Your content, kept safe and kept yours.
Where your work lives, who can see it, and how to take it away. Plain English, no fine print.
The short version
- Each workspace is walled off from every other one at the database level.
- Inside a workspace, people see only the projects they're on.
- Daily backups, plus sitemap snapshots you can restore yourself.
- Staff look only when there's a reason, and every visit is logged where you can see it.
- Your content isn't used to train AI models. We never see your card number.
Where it's hosted
The DraftBay app is hosted on Netlify. Your workspace data and your sign-in are handled by Supabase (managed Postgres). Emails are sent by Resend, and payments go through Stripe.
Who can see what
Every workspace is separated from every other workspace at the database level, using row-level security. That rule lives in the database itself, so one customer can't reach another customer's pages, copy or comments.
Inside your workspace, people only see the projects they've been added to. Owners and admins see the whole workspace and decide who's on which project. A client you add to one project sees that project and nothing else.
When you @mention someone, DraftBay only offers people who can already see that page or piece of copy.
Live updates only reach people on that project.
Team update emails
Team updates go only to people on the project who have signed in to DraftBay. Scheduled updates are off until a project lead switches them on. Every update email has a one-click link that stops the scheduled ones, and each person can switch them off for themselves in DraftBay. Updates someone sends by hand still arrive, and everything also shows in your DraftBay notifications.
Backups
Supabase takes daily backups of the database. On top of that, your sitemap keeps version snapshots, so if a change goes wrong you can restore an earlier version from inside DraftBay.
When DraftBay staff can look
Staff open a workspace only to give support you ask for, fix a problem, keep the service secure, or meet billing or legal obligations. Only a few people have this access.
Every staff visit and every change is recorded in a log that staff can't edit. Owners and admins can read it any time under Settings → “DraftBay support visits”.
AI
DraftBay's AI is provided by Anthropic. It's used in two places: when you ask the assistant something, and in a once-a-day automatic review of each active project's Board, which suggests tasks and questions. When the assistant suggests a change to your project, such as linking copy to a page, emailing your team, handing approved copy to your designer or updating page addresses, nothing happens until you approve it. It runs with your own access, so it can't reach projects you're not on. It also keeps short notes about your workspace to remember your preferences. Your content isn't used to train models.
Payments
Billing runs on Stripe. You type your card details into Stripe, not into DraftBay, so we never see or store your card number.
Deleting your data
Workspace owners can delete projects in the app. To delete your whole account or workspace, email info@draftbay.ai and we'll take care of it. We may need to keep billing records where the law requires it.
For the full legal detail, read our Privacy Policy and Terms of Service.
The short answers.
Can other DraftBay customers see my content?
No. Every workspace is separated from every other workspace at the database level, using row-level security. Inside your workspace, people only see the projects they're on; owners and admins see the whole workspace.
Where is my data stored?
The app is hosted on Netlify. Your workspace data and sign-in are handled by Supabase (managed Postgres). Payments go through Stripe and emails are sent by Resend.
Is my data backed up?
Yes. Supabase takes daily backups of the database. Your sitemap also keeps version snapshots that you can restore from inside DraftBay.
Can DraftBay staff see my workspace?
Only to give support you ask for, fix a problem, keep the service secure, or handle billing or legal obligations. Every staff visit and change is recorded in a log staff can't edit, and your owners and admins can read it under Settings → DraftBay support visits.
Is my content used to train AI?
No. DraftBay's AI is provided by Anthropic. It is used when you ask the assistant something and in a once-a-day automatic Board review of each active project. Your content isn't used to train models.
How do I delete my data?
Workspace owners can delete projects in the app. To delete your whole account or workspace, email info@draftbay.ai and we'll take care of it.
Something we haven't covered? Email info@draftbay.ai and a real person will answer.