Privacy Policy

This Privacy Policy explains how Avetria Tech Private Limited (“First Draft”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you use the First Draft website and services (the “Service”). First Draft is an AI writing assistant built for journalists, editors, and media professionals.

We act as the data controller (or, under India’s Digital Personal Data Protection Act, the “Data Fiduciary”) for the personal data described here. By using the Service, you agree to the practices described in this policy.

Information you give us

• Account information - your name, email address, and profile details when you sign up (including via a third-party login such as Google).
• Content and inputs - the notes, source material, prompts, files, and other content you submit to the tools, and the drafts we generate for you.
• Payment information - billing details needed to process subscriptions. Payments are handled by Razorpay; we receive limited transaction data and do not store your full card number.
• Communications - messages you send us for support, sales, or feedback.

Information we collect automatically

• Usage data - how you interact with the Service, such as tools used, features accessed, and actions taken.
• Device and log data - IP address, browser type, device identifiers, and timestamps.
• Cookies and similar technologies - see our Cookie Policy for details and your choices.

We use personal data to:

• Provide, operate, and maintain the Service and generate Output from your inputs.
• Authenticate you, manage your account, and process payments and subscriptions.
• Improve, troubleshoot, and secure the Service, including analytics and preventing fraud and abuse.
• Respond to your support requests and communicate with you about the Service.
• Send you service and, where permitted, marketing messages - you can opt out of marketing at any time.
• Comply with legal obligations and enforce our terms.

To generate drafts, headlines, translations, and other Output, we send your inputs to trusted third-party AI model providers that process them on our behalf to return a result.

• We do not sell your content, and we do not use your content to train third-party AI models without a lawful basis or your consent.
• We may use aggregated or de-identified data that does not identify you to understand usage and improve the Service.
• Please avoid submitting sensitive personal data or confidential source information you are not authorised to share into the tools.

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of our contract with you (to provide the Service); your consent (for optional cookies and marketing); our legitimate interests (to secure and improve the Service); and compliance with legal obligations. Under India’s DPDP Act, we process data based on your consent or other legitimate uses permitted by law.

We do not sell your personal data. We share it only as described below:

• Service providers (sub-processors) - AI model providers, our payment processor (Razorpay), hosting and infrastructure providers, analytics tools (such as PostHog, Google Analytics, and Microsoft Clarity), and reCAPTCHA - each processing data on our behalf under appropriate agreements.
• Legal and safety - where required by law, legal process, or to protect the rights, safety, and security of First Draft, our users, or the public.
• Business transfers - in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your direction - when you ask us to share or export your data.

We keep personal data for as long as your account is active and as needed to provide the Service, and afterwards only as required to meet legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. You can delete your content or request account deletion, after which we will delete or de-identify your data within a reasonable period, except where retention is legally required.

We use administrative, technical, and organisational measures - including encryption in transit, access controls, and secure infrastructure - to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will notify you and the relevant authorities as required by law.

Your data may be processed in countries other than your own, including where our service providers operate. Where we transfer data across borders, we use safeguards required by applicable law, such as standard contractual clauses, to protect it.

Depending on where you live, you may have the right to access, correct, update, delete, or export your personal data; to object to or restrict certain processing; to withdraw consent; and to nominate someone to exercise your rights in the event of death or incapacity (under the DPDP Act).

To exercise any of these rights, contact us at kalpit@avetria.tech. You also have the right to lodge a complaint with your local data-protection authority - in India, the Data Protection Board. We will respond within the timeframes required by law.

The Service is intended for professional adults and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to review their policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after the changes take effect means you accept the updated policy.

For any questions, requests, or complaints about your privacy, contact us at kalpit@avetria.tech.

In accordance with India’s DPDP Act and IT Rules, our Grievance Officer can be reached at Kalpit Shah, kalpit@avetria.tech, Avetria Tech Private Limited, A/21, Jay Suryanagar Society, Nikol Kathwada, Nikol, Ahmedabad, Gujarat, India, 382350. We will acknowledge and address grievances within the timeframes required by law.