Privacy Notice

1. Who we are

Drag AI is operated by Techatone ("Techatone", "we", "us"). Techatone is the data controller for the personal data described in this notice. You can reach us at support@dragshield.lovable.app.

2. Data we collect

• Account data — email address, password credentials handled by our authentication provider, display name, username and optional profile picture.
• Content data — the prompts, chat messages, direct messages and image generation requests you submit, plus the responses produced for you.
• Usage data — daily message and image counts, plan status, feature interactions and diagnostic error logs.
• Technical data — IP address, device and browser identifiers, and approximate location derived from IP.
• Support data — messages you send us about billing or the product.

3. Why we use it and our legal basis

• Creating your account and providing the service — performance of our contract.
• Generating AI responses and images from your prompts — performance of our contract.
• Enforcing plan limits and managing subscriptions — performance of our contract.
• Security, abuse prevention and fraud detection — our legitimate interests.
• Improving reliability and product quality — our legitimate interests.
• Customer support — performance of our contract and our legitimate interests.
• Optional marketing emails — your consent, withdrawable at any time.
• Meeting accounting and legal obligations — compliance with legal obligations.

4. Who we share data with

• Merchant of Record — Paddle.com handles the sale of our subscriptions, payment processing, subscription management, invoicing and sales tax compliance.
• Service providers and subprocessors — hosting, database and authentication providers, AI model providers that process prompts to generate responses, and error-monitoring tooling.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our rights and users.

We do not sell your personal data.

5. International transfers

Our providers may process data outside your country, including in the United States and the European Economic Area. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

Account and content data is kept while your account is active. Direct messages are deleted automatically 24 hours after they are sent. Usage counters are kept for up to 12 months. Billing records are retained for as long as tax and accounting law requires. When data is no longer needed it is deleted or anonymised. Deleting your account removes your profile, chats and generated content.

7. Your rights

Subject to local law you may request access to your data, correction, erasure, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent at any time and complain to your data protection authority. Email us and we will respond within one month.

8. Security

We use appropriate technical and organisational measures including encryption in transit, row-level access controls on our database, scoped access tokens and least-privilege access for staff. No online service can be completely secure, so please use a strong, unique password.

9. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and to remember interface preferences. We do not use advertising cookies. You can clear or block storage in your browser settings, but the service may stop working correctly.

10. Children

Drag AI is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect their data.

11. Changes and contact

We will update this notice when our practices change and revise the date above. Questions? Email support@dragshield.lovable.app or see our Terms & Conditions.