Privacy Policy

Effective September 28, 2026

This policy explains what Hunting Southern LLC collects when you use Draftluxe, why, who we share it with, and the choices you have. For the content your organization puts into Draftluxe, we act on your organization's behalf as its service provider (a "processor"), and your organization decides how that content is used.

What we collect

  • Login details: your email address and a hashed password, the accounts you belong to and your role in each, and, if you turn it on, a two-factor authenticator secret.
  • Account content: search phrases, brand voices and caption instructions, the news stories found for them and their grades, generated captions, headlines and graphics, and the photos and designs you upload or create.
  • Billing details: the account's plan and subscription, and the billing contact's name, email and address. Card details are entered on Stripe's own checkout page and go to Stripe, never to us; we keep only what Stripe tells us about the subscription.
  • Activity: an audit log of significant actions in an account (who changed settings, the team, API keys or brands, deleted something, graded a story by hand, exported data or closed the account), and records of each daily run.
  • Technical data: server logs with IP addresses, browser details and the requests made, kept for security and troubleshooting.

News stories come from public sources. We don't collect information about the people named in them beyond what the published articles already say.

Cookies

We use only the cookies the app needs to work: your sign-in session and which of your accounts is open. We don't use advertising or cross-site tracking cookies.

How we use it

  • to run the service: finding, grading and drafting content, and sending your team's daily digest;
  • to keep accounts secure and separate, investigate problems and prevent abuse;
  • to answer support requests and tell you about changes to the service or these policies.

We don't sell personal information, don't share it for targeted advertising, and don't use your content to train AI models.

Who we share it with

We use the providers below to run the service. Each receives only what its job needs, under contract terms that restrict how it can use the data. The full list, with what each one receives, is on the subprocessor page.

  • Supabase: database, sign-in and file storage
  • Vercel: hosts the dashboard and design editor
  • Railway: runs the pipeline service and the daily scheduler
  • Google (Gemini API): grades stories, writes captions and headlines, generates images, and computes similarity for de-duplication
  • Apify: runs the Google News searches
  • Jina AI: fetches the full text of news articles and finds related coverage
  • Pexels: stock photo search, when a graphic asks for a stock photo
  • Stripe: takes subscription payments and keeps billing records
  • Resend: sends the daily digest and account emails

We may also disclose information when the law requires it, or to protect the rights and safety of our users and others.

How long we keep it

  • Account content is kept while the account is open.
  • When an owner closes an account, it can be restored for 30 days. After that its data and files are permanently deleted, along with any login that no longer belongs to an account.
  • Database backups keep deleted data for up to 7 days before it ages out.

Your choices and rights

  • Account owners and admins can export all of the account's data from the Settings page at any time.
  • Account owners can close and delete the account from the Settings page.
  • You can turn your daily digest email off from the Team page or the link in any digest.
  • Depending on where you live, you may have the right to access, correct, delete or port your personal information, or to object to how it is used. Write to huntingsouthern@gmail.com. If the request concerns an account's content, we may refer you to the account's owner, who controls it. We won't treat you differently for exercising these rights.

Security

Data is encrypted in transit and at rest. Each account's data is kept apart at the database level, API keys are stored only as hashes, and two-factor sign-in is available to every login. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you as the law requires.

International transfers

We and most of our providers are in the United States, and some process data elsewhere, as the subprocessor list shows. Where the law requires, transfers rely on safeguards such as standard contractual clauses.

Children

Draftluxe is a business service and isn't meant for anyone under 16.

Changes

If we change this policy materially, we will tell account owners by email before the change takes effect and update the date above.

Contact

Hunting Southern LLC, Mableton, GA 30126. huntingsouthern@gmail.com