Privacy Policy
This Privacy Policy explains how DraftMesh ("we", "us", or "our") collects, uses, and protects information when you use our website, sync service, Obsidian plugin, and related features (collectively, the "Service").
1. Information we collect
- Account information: email address, authentication credentials or API tokens, and basic account settings.
- Vault and sync metadata: vault identifiers, device names, sync timestamps, file paths, and operational logs needed to provide sync, collaboration, and sharing.
- Encrypted vault content: note content, attachments, and related blobs are encrypted on your device before upload. We store ciphertext and cannot read your plaintext notes.
- Billing information: subscription status and payment references are processed by our payment provider, Creem. We do not store full payment card numbers on our servers.
- Support communications: messages you send to support@draftmesh.app.
2. How we use information
We use collected information to:
- provide, operate, and maintain the Service;
- authenticate users and secure accounts;
- sync vaults, enable collaboration, and deliver public sharing;
- process subscriptions and provide customer support;
- monitor reliability, prevent abuse, and improve the Service.
3. Encryption
DraftMesh uses end-to-end encryption for vault content. Encryption keys are derived and used on your device. Our servers store encrypted data only and do not have access to your decryption keys or plaintext vault contents.
4. Sharing of information
We do not sell your personal information. We may share information with:
- Service providers that help us operate the Service, such as payment processing through Creem and infrastructure hosting.
- Legal authorities when required by applicable law or to protect rights, safety, and security.
5. Data retention
We retain account and sync metadata for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request account deletion by contacting support.
6. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or export personal information we hold about you. Contact us at support@draftmesh.app to make a request.
7. International users
If you access the Service from outside the country where our infrastructure is hosted, your information may be processed in other jurisdictions with different data protection laws.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date above.
9. Contact us
For privacy questions or requests, contact support@draftmesh.app.