Legal
Privacy policy
Last updated: 9 November 2026
This page explains what Redraft (redraft.dev) does with your documents and your information, in plain words. For any question or request, write to contact@redraft.dev.
The short version
- Your documents are used only to make your edits. They aren't saved on our servers, sold, or used to train AI.
- If you create an account, we keep your name, your email, your plan, how many documents you made this month, and the templates and signatures you choose to save.
- Visitor statistics run only if you accept them.
- You can ask us to show, correct or delete your information at any time.
1. Your documents
When you open a PDF in Redraft, it is sent to our server so the server can read its text and make the changes you ask for. Each request works on its own copy:
- Not saved on our servers. Temporary copies are deleted as soon as each edit, preview or download is done.
- Kept in memory while you edit. So that your document isn't sent again for every preview, the server keeps it in its working memory for up to 20 minutes after your last change. The text read from it and the edited copy made for your download are held for the same time, no longer. None of it is written to disk, and it is gone sooner if the server needs the room or restarts.
- Spreadsheets you use for Bulk or Annex, and text you paste into Start from text, are handled the same way: used for that request, then deleted.
- On your device. Your browser keeps your 24 most recent documents, the fields you set up, the signatures you draw and, in Bulk, the spreadsheet rows you loaded, so you can pick up where you left off. They stay on your device. Remove a document from Recent activity, press Start over in Bulk, or clear this site's data in your browser to remove everything. Signing out removes the small pictures of your saved templates.
- In your account, only if you choose. When you save a template or a signature to your account, it is stored with our database provider (Supabase) until you delete it or your account.
- Fonts you upload are kept on our server for your account, so your later edits can use them.
We don't read your documents, sell them, share them for advertising or use them to train AI.
2. Your account
- Sign-up: your name, email address and password. Your password is handled by our sign-in provider (Supabase) and stored scrambled (hashed); we never see it.
- Sign in with Google: we receive your name, email address and profile picture from Google.
- Your agreement: when you create an account you tick a box to say you are 13 or older and accept the Terms and this policy. We keep the date and the version you accepted with your account, to be able to show it.
- Your plan and usage: your plan and how many documents you made this month, to apply the plan's limits.
- Emails: we send the emails your account needs, such as confirming your address or resetting your password. We don't send marketing emails.
3. Using Redraft without an account
You can edit and download documents without an account. To apply the daily limit for guests, the server counts downloads by IP address. The count is kept only in the server's memory, never saved, and is removed when the day ends (or sooner, if the server restarts).
4. Visitor statistics (only if you accept)
When you first visit, we ask whether you accept visitor statistics. If you accept, we use PostHog (in the United States) to count visits and a few actions, such as opening a document, downloading one, generating a batch or creating an account, so we can see what works and what to improve.
- Statistics never include the content of your documents or anything you type. Screen recording and automatic click collection are switched off.
- When you are signed in, statistics are linked to your account's ID, not to your email.
- If you decline, no statistics are collected and no statistics cookie is set.
- You can change your choice at any time: .
5. Technical logs
Like every website, our hosting providers keep technical logs: IP address, time, the address requested and any error. They are used to run the service, fix problems and protect it from abuse.
6. Who handles data for us
| Provider | What for |
|---|---|
| Supabase | Accounts and sign-in, saved templates and signatures, usage counts, account emails |
| Hugging Face | The server that reads and edits your documents |
| Vercel | Hosting the website |
| PostHog | Visitor statistics, only if you accept them |
| Sign in with Google, if you use it |
Some of these providers handle data outside your country, including in the United States. They may use it only to provide their service to us.
7. How long we keep things
- Documents and spreadsheets: not saved; a document, the text read from it and the edited copy stay in the server's memory for up to 20 minutes after your last change (see section 1).
- Your account, saved templates and signatures: until you delete them or your account. The date and version of what you accepted at sign-up go when the account goes.
- Fonts you upload: until you delete your account, or ask us to delete them.
- Guest download counts: until the end of the day.
- Visitor statistics: for as long as they help us improve Redraft; you can ask us to delete yours.
8. Your rights
You can ask us to show you the information we hold about you, correct it, give you a copy, delete it, or stop using it. Write to contact@redraft.dev from the email address of your account. We answer within 30 days.
To delete your account and everything saved in it yourself, open the account menu (the person icon on your workspace) and choose Delete my account. It deletes your account, the templates and signatures saved to it and the fonts you uploaded, at once.
You can also complain to your data protection authority, for example the CNDP in Morocco or the authority of your country in the European Union.
9. Cookies and storage on your device
Redraft does not use advertising cookies. It keeps a few things in your browser so it can work (your sign-in, your theme, your recent documents and signatures), and visitor statistics set a cookie only if you accept them. Everything, with what each is for and how long it stays, is on the cookie policy.
10. Security
Everything travels over encrypted connections (HTTPS). Data saved in an account can be read only by that account. No system is perfectly secure, so keep your own copy of important documents, and tell us at contact@redraft.dev if you notice a problem.
11. Children
Redraft is for people aged 13 and older, and for businesses. If you are under 13, please don't create an account or use Redraft. In some countries the age to agree to something like this on your own is higher (for example 16 in parts of the European Union): there, you need a parent or guardian to agree for you. We don't knowingly collect information about children under 13. If we find an account that belongs to one, we delete it and everything saved in it. If you think this has happened, write to contact@redraft.dev.
12. Changes to this policy
When this policy changes, we update this page and its date. If a change matters for how your information is used, we will also tell account holders by email or in the app.