Privacy Policy

We collect the following categories of information:

Account Information

When you create an account, we collect information such as your email address and authentication credentials necessary to provide secure access to the Service.

Uploaded Content

We process the handwriting images, scanned documents, text files, and other content you upload in order to provide AI-powered transcription and document redrafting services.

Usage Information

We collect limited operational information such as document counts, timestamps, account activity, browser information, device information, IP address, and diagnostic logs to operate, maintain, secure, and improve the Service.

We use your information to:

• Provide and maintain the Service.
• Process uploaded files using AI-powered transcription and document processing.
• Authenticate users and secure user accounts.
• Process subscription payments and manage customer accounts.
• Respond to customer support requests.
• Detect fraud, misuse, and security incidents.
• Improve the reliability, performance, and functionality of the Service.
• Comply with applicable legal obligations.

Uploaded content is processed through secure AI service providers solely to provide the requested functionality. We do not use your uploaded content to train public AI models.

Where required by applicable law, we process your personal information on one or more of the following legal bases:

• Performance of a contract – to provide the MagicRedraft Service you have requested.
• Legitimate interests – to maintain, secure, improve, and protect our services and users.
• Consent – where you voluntarily provide consent for specific processing activities.
• Legal obligation – where processing is necessary to comply with applicable laws or regulatory requirements.

We work with trusted third-party providers who assist us in operating the Service.

These providers may include:

• Paddle, which acts as our Merchant of Record for subscription billing, payments, invoicing, and applicable taxes. EchoWaffle Ltd. does not collect or store your payment card information directly. Paddle processes payment information in accordance with its own Privacy Policy and applicable PCI-DSS requirements.
• Secure cloud infrastructure providers used for hosting, storage, and application security.
• AI processing providers that securely process uploaded content solely to perform transcription and document processing on our behalf.

These providers may process personal information only as necessary to provide services to EchoWaffle Ltd. and are contractually required to protect your information.

We retain personal information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain appropriate business records.

Uploaded documents and account information may be deleted when you delete them from your account or request account deletion, subject to any legal or regulatory retention requirements.

We implement industry-standard administrative, technical, and organizational safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction.

Data is encrypted during transmission and, where applicable, while stored using modern security practices. While no system can guarantee absolute security, we continually work to protect your information.

Your information may be processed or stored in countries other than your country of residence where our service providers or infrastructure are located. Where required, we take appropriate measures to protect personal information transferred internationally in accordance with applicable data protection laws.

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of certain processing activities.
• Object to certain processing based on legitimate interests.
• Request a copy of your personal information in a portable format, where applicable.
• Withdraw consent where processing is based on your consent.

To exercise any of these rights, please contact us using the details below. We may request information necessary to verify your identity before processing your request.

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements, or business practices. Any updates will be posted on this page with a revised "Last Updated" date.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

EchoWaffle Ltd.
Email: support@redraft.app