Privacy Policy
This policy explains how the Draftly service processes your personal data. It is prepared in accordance with the EU General Data Protection Regulation (GDPR) and Turkish Data Protection Law (KVKK).
Last updated: July 14, 2026
1. Data Controller
The data controller processing personal data is the company providing the Draftly service. For any request regarding our data processing activities, you can reach us through the contact form or the email address on our contact page.
2. Personal Data We Process
Account and contact data: Name and surname, corporate email address, company name, phone number (to the extent you share them in contact and demo request forms).
Service usage data: Email content and attachments you process through the Outlook add-on to generate drafts, draft generation requests, and your preferences within the service.
Technical data: IP address, browser type, session information, and access logs necessary for the secure operation of the service.
3. Purposes of Processing
Provision of the service: Generating email drafts that match your organization's voice within Outlook.
Communication and support: Demo requests, your questions, and account management.
Security of the service and prevention of abuse: Access logs and necessary technical controls.
Fulfillment of legal obligations.
4. Not Used for Model Training
The email content and drafts we process are used solely for you to use the service. Your content is never used in the training, validation, or general system development of any artificial intelligence model. Draft generation happens on each request, and your content is never evaluated for training.
5. Data Transfers
Your personal data may be transferred to the hosting infrastructure and artificial intelligence service providers that are necessary for the service to operate. These transfers are made solely for the purpose of providing the service, with the necessary technical safeguards, under GDPR and KVKK. Your data is not shared with third parties for advertising purposes.
6. Data Retention
Your personal data is retained for as long as necessary for the purpose for which it was processed. When you close your account, your data is deleted within a reasonable period, except for data that must be retained due to legal obligations.
7. Your Rights
Under GDPR and KVKK, you have the right to access, rectify, erase, restrict the processing of, and obtain the portability of your personal data, as well as the right to object. To exercise these rights, you can reach us through the contact form. Your requests are fulfilled as soon as possible after identity verification.
8. Cookies
Cookies necessary for the operation of the site and service are used. For details, see our Cookie Policy page.