Privacy
Privacy Policy
Last updated: May 2026
1. Who We Are
AcreDraft ("we," "us," "our") operates the website and application at acredraft.com. AcreDraft is an AI-powered proposal generator designed for residential landscape contractors in the United States and Canada. This Privacy Policy describes how we collect, use, and protect your information when you use our service.
2. Information We Collect
Information you provide directly
- Account information: Email address and password when you create an account
- Business information: Business name, phone number, logo, brand colors, license/insurance number, email address, payment link URLs (Venmo, CashApp, PayPal, Zelle, or custom)
- Client information: Names, email addresses, phone numbers, and property addresses of your clients that you enter into AcreDraft
- Proposal content: Job descriptions, scope of work, pricing, terms, and other content you provide or that our AI generates for your proposals
- Team information: Email addresses of team members you invite (Crew plan)
Information collected automatically
- Usage data: Pages visited, features used, and general interaction patterns (collected via privacy-friendly analytics — see Section 8)
- Device information: Browser type, operating system, and screen size
- Log data: IP address, access times, and referring URLs
Information we do NOT collect
- We do not collect Social Security numbers, government IDs, or financial account numbers
- We do not collect payment card information (see Section 7)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve AcreDraft's services
- Generate AI-powered proposals based on your input
- Send proposals and communications on your behalf (to your clients, via email)
- Process your subscription and manage your account
- Send you service-related emails (account verification, password resets, subscription updates)
- Provide customer support
- Analyze usage patterns to improve the product (in aggregate, not individually)
We do NOT use your information to:
- Sell your data to third parties
- Send marketing emails to your clients
- Train AI models on your proprietary business data or client information
- Target you with third-party advertising
4. How We Share Your Information
We share your information only in these limited circumstances:
- Service providers: We use third-party services to operate AcreDraft, including:
- Supabase — Database hosting and authentication
- Dodo Payments — Subscription billing (as Merchant of Record)
- Resend — Transactional email delivery (sending proposals and notifications)
- AI providers — To generate proposal content (job descriptions and scope of work you provide are sent to AI services for generation; your business name, client names, and contact info may be included in the prompt context)
- Plausible Analytics — Privacy-friendly, cookieless website analytics
- At your direction: When you send a proposal to a client, we share the proposal content (including your business information and the client's name/address) via email and a shareable web link.
- Team members: If you are on the Crew plan, your proposals, clients, and business information are shared with members of your team.
- Legal requirements: We may disclose your information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of AcreDraft, our users, or the public.
- Business transfers: If AcreDraft is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our site before your information becomes subject to a different privacy policy.
We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.
5. Data You Store About Your Clients
AcreDraft allows you to store information about your clients (names, emails, phone numbers, property addresses). You are the data controller for your client data — you determine what client information to enter and how to use it.
- We process your client data solely to provide AcreDraft's services to you (generating proposals, sending emails on your behalf, tracking proposal status)
- We do not contact your clients for any purpose other than delivering communications you initiate (e.g., sending a proposal you created)
- We do not use your client data for our own marketing
- You are responsible for ensuring you have the right to store and use your clients' information
6. AI-Generated Content
AcreDraft uses artificial intelligence to generate proposal content (scope of work descriptions, material lists, project timelines). When you use this feature:
- The job description, property details, and pricing information you provide are sent to our AI provider to generate the proposal
- AI-generated content is a starting point — you should review, edit, and verify all generated content before sending it to clients
- We do not guarantee the accuracy, completeness, or suitability of AI-generated content
- You are responsible for the final content of any proposal you send
7. Payment Processing
AcreDraft uses Dodo Payments as our Merchant of Record for subscription billing. When you subscribe to a paid plan:
- Your payment information (credit card, billing address) is collected and processed directly by Dodo Payments
- AcreDraft does not store, see, or have access to your full payment card number
- Dodo Payments handles all billing, invoicing, sales tax, and refunds
- For Dodo's privacy practices, see their privacy policy at dodopayments.com
For deposit collection from your clients (Venmo, CashApp, PayPal, Zelle links), AcreDraft simply displays the payment link you configure — we do not process, facilitate, or have access to those transactions.
8. Analytics and Cookies
- Analytics: We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies, does not collect personal data, and does not track users across websites. All data is aggregated — we see page view counts and general trends, not individual user behavior.
- Essential cookies: We use minimal cookies required for the service to function (authentication session tokens). These are strictly necessary and cannot be opted out of while using the service.
- We do NOT use advertising cookies, tracking pixels, or third-party analytics that follow you across the web.
9. Data Security
We implement reasonable technical and organizational measures to protect your information:
- All data is transmitted over HTTPS (TLS encryption in transit)
- Data is stored in Supabase's secured infrastructure with encryption at rest
- Authentication uses industry-standard practices (hashed passwords, secure session tokens)
- Access to production data is restricted to essential personnel
- Row-level security policies ensure users can only access their own data (and their team's data on the Crew plan)
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
10. Data Retention and Deletion
- Active accounts: We retain your data for as long as your account is active.
- Deleted accounts: If you delete your account, we will delete your personal data, proposals, client data, and business information within 30 days. Some data may be retained in backups for up to 90 days, after which it is permanently deleted.
- Free accounts with no activity: We may delete accounts that have been inactive for 12 months or more, with 30 days email notice before deletion.
To request deletion of your account and data, email support@acredraft.com or use the account deletion option in your Settings page.
11. Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data
- Export your data in a portable format
- Opt out of non-essential data processing
To exercise any of these rights, contact us at support@acredraft.com. We will respond within 30 days.
California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, email support@acredraft.com.
12. Children's Privacy
AcreDraft is a business tool designed for professional contractors. We do not knowingly collect information from children under 16. If we learn that we have collected information from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@acredraft.com.
13. International Users (Canada)
If you are located in Canada, your information is processed and stored in the United States. By using AcreDraft, you consent to the transfer of your information to the United States. We comply with applicable provisions of the Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Your continued use of AcreDraft after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.
15. Contact Us
If you have questions about this Privacy Policy or our data practices:
Email: support@acredraft.com