Policy / 02
1. Data collected
Roughdraft may collect your name, business email, company or property name, public listing URL, property relationship, project goals, rights confirmations, approved source files, quote and order records, service messages, delivery records, revision requests, and opt-out status. Payment-card details are entered directly with Stripe and are not stored by Roughdraft.
2. Why it is used
Data is used to review fit, verify authority, prepare a private preview and quote, prevent fraud and duplicate orders, process payment status, produce and deliver work, handle revisions or refunds, honor suppression requests, secure the service, and keep required business records.
3. Processors
Roughdraft expects to use Cloudflare for site delivery, private file storage, database functions, and service email; Stripe for checkout, subscriptions, and payment events; Google Workspace for replies and operator-managed email; Vast.ai with ComfyUI for approved image production; and Muapi for approved motion production. Local Hermes may prepare listing copy on the operator's private machine. Only data needed for the accepted work is sent to a production provider. Each provider handles data under its own terms and privacy commitments.
4. Sharing and selling
Roughdraft does not sell personal information. Data is shared only with service providers needed to run the approved workflow, professional advisers when necessary, authorities when legally required, or a successor in a legitimate business transfer.
5. Retention
- Incomplete or rejected requests: normally deleted or minimized within 90 days.
- Private preview tokens: expire automatically; token values are stored only as hashes.
- Customer source files, working outputs, and delivery files: retained while needed to produce, review, deliver, revise, secure, or document the paid work, then deleted or minimized under the studio's operational retention schedule.
- Order, subscription, payment, rights, and delivery records: retained as needed for contracts, taxes, disputes, and legal obligations.
- Suppression records: retained as long as needed to prevent unwanted contact.
- Security and audit events: retained only as long as operationally necessary.
6. Security
Roughdraft uses access controls, encrypted service bindings, hashed private tokens, request limits, audit records, and private delivery paths. No internet system can guarantee absolute security.
7. Choices and requests
You may ask to access, correct, or delete eligible information, or opt out of marketing email. Some records must be retained for payment, contract, fraud-prevention, or legal reasons. Send requests to [email protected].
8. Children
The service is for business users age 18 or older and is not directed to children.
9. Changes
Material policy changes will receive a new effective date. The policy accepted with an active quote applies to that order where required.