Privacy Policy

1. Who we are

Draftly is the responsible party for the personal information processed through this service, in terms of the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

We collect the information you provide to create documents: your account and contact details; for employers, your disciplinary code and the case facts you enter; and for employees, the employer documents and the account of events you submit, plus your contact details and — where the document you are creating requires it, such as a CCMA referral form — your address. We deliberately do not ask for South African ID numbers, and you should not include ID numbers, banking details, or medical information unless it is necessary and you choose to provide it.

3. How we use it

We use your information only to generate the documents you request, to deliver and store those documents for you, to process payments, and to operate and support the service. Document content is sent to our AI provider (Anthropic) solely to generate your document.

AI processing. To generate documents, parts of the information you provide are processed by our AI provider, Anthropic (“Claude”), via its commercial API, which operates in the United States — a cross-border arrangement under POPIA section 72. Your data remains confidential and is processed only to provide the service.

4. Who we share it with

We share information only with the service providers needed to run Draftly — our hosting and database provider (Supabase, hosted in the EU), our AI provider (Anthropic), our payment provider (Stripe), our email provider, and our error-monitoring provider (Sentry, hosted in the EU) — each only to the extent needed to perform their function. If you accept analytics cookies, our marketing pages also share basic browsing information with Meta Platforms; see section 5. That never happens on the employee pages, and never if you decline. We do not sell your personal information.

If you are an employer, you are the responsible party for the personal information of your own employees that you submit to Draftly, and Draftly acts as your operator under POPIA sections 20–21, processing that information only on your instructions. The terms of that arrangement are set out in our Data Processing Addendum.

5. Cookies and analytics

Draftly sets the cookies it needs to keep you signed in and to keep the service secure. These are essential and cannot be turned off without breaking the service.

Separately, our marketing pages can load the Meta Pixel, which tells Meta Platforms that a browser visited a page. This is not essential, so we ask first: it only loads if you choose “Accept” on the cookie notice, and not at all if you decline or ignore it. You can change your mind by clearing this site’s data in your browser, which makes us ask again.

We never run analytics or advertising on the employee pages. The Meta Pixel does not load there, whatever you choose on the cookie notice, and nothing about your visit is shared for marketing purposes.

Separately from analytics, we use an error-monitoring provider, Sentry, so that we find out when something in the service breaks. On the employee pages it is not told about ordinary visits — the routine monitoring that would report them is switched off there. It is sent a report only if something actually goes wrong, and that report contains the page address and the technical details of the fault. We have switched off its collection of IP addresses and cookies, and we do not send it the answers you enter or the document you generate.

6. Storage and security

Your documents are stored in a private, access-controlled store and made available to you through time-limited secure links. We take reasonable technical and organisational measures to protect your information, though no system can be guaranteed perfectly secure.

7. Retention

We keep your information for as long as your account or case is active and as needed to provide the service and meet legal obligations. You may ask us to delete your information, subject to any records we are required to retain.

8. Your rights

Under POPIA you may request access to the personal information we hold about you, ask us to correct or delete it, and object to certain processing. To exercise these rights, contact us at the address below.

9. Contact

For any privacy question or request, email info@draftly.co.za.