Privacy at Always Drafting

Always Drafting is a small product design company in Seattle, Washington. This page explains what we collect, why, who it goes to, how long we keep it, and what you can ask us to do with it. We write it in plain English and we keep it accurate: if we change what we do, we change this page.

The short version

We never sell your personal information, and we don't share it for advertising.
No advertising trackers and no tracking cookies. Our visit counter (Umami) uses no cookies and doesn't follow you to other sites.
We only collect what we need to answer you, build what you ask for, or do the work we describe below.
We research businesses and creators from public information, and we tell you how below.
You can ask us what we hold about you, correct it, or delete it: hello@alwaysdrafting.com. We answer within 30 days.

Who we are

Always Drafting is run by HU5TLE LLC ("we", "us"), which is responsible for the personal information described here. Contact: hello@alwaysdrafting.com, or 929 N 145th St, Unit 33012, Seattle, WA 98133. This policy covers alwaysdrafting.com, the free snapshot, the emails we send, and our creator product service (Creator Scout). It doesn't cover other websites we link to.

What we collect and why

When you visit this website

Visit counts. Umami records the page, the site that sent you, your browser and device type, your country, and which of our buttons you click (for example "Get a free snapshot"). It sets no cookies and doesn't store your IP address. We use it to see what's useful and what isn't.
Server logs. Like every website, our hosting (Amazon Web Services) may record your IP address, the page you asked for and your browser, for security and to keep the site running.
In your own browser. A few small notes stay in your browser's storage, never sent to us: which page sent you to the snapshot, a snapshot you're waiting for, and an ad order you're putting together.

When you ask for a free snapshot

What you give us: your business website (or Facebook Page name), your business ZIP code, and optionally up to three competitors. If we can't find your business online, we ask for its name, its kind and an email address. You can also leave an email to hear when your snapshot is ready.
The person check. To stop automated abuse, Cloudflare Turnstile checks that a person is asking. Cloudflare receives your IP address and browser signals for this. We keep only a scrambled (one-way hashed) form of your IP address, to limit how many snapshots one person can request a day.
What we gather to build it: your business's live ads and its competitors' ads from Meta's public Ad Library; your business's public website, including up to five email addresses it publishes there; and answers from an AI model (Anthropic's Claude, with web search) about who AI assistants recommend near you. We send Claude your business name, category, town, website address and some of your website's text. We don't send it your email address.
Your snapshot page is published at a long, unguessable address, hidden from search engines and linked from nowhere. It shows business information (ads, AI answers, your town), never your email address.
Why: to make the snapshot you asked for, to reply to you, and to keep the service from being abused.

If we've researched or contacted your business

We look for businesses we think we can help, mostly in the Seattle area, using public sources: Meta's Ad Library, business websites, public directories and public company filings. For each business we may keep its name, website, location, industry, public ad activity, and business contact details it publishes, such as a contact email, sometimes with a person's name and role. We may prepare a private snapshot for a business and email the business about it.

Every email from us says who we are, gives our mailing address, and has an opt-out link: it opens a page where one more click takes you off our list immediately. Replying "no thanks" works too. Either way, we don't write again.
Roundups. We sometimes post about local businesses' public ads on our own Facebook Page and Instagram. A business can ask us to leave it out, and we will.
Why: our legitimate interest in finding and offering our services to businesses, using information they've made public.

When you order ads from us

Payment goes through Stripe, which handles your card details; we never see them. Stripe tells us what you ordered, the amount and the email you gave, and we use that to make and deliver your order and keep business records.

When you email us

We keep our email conversations so we can reply and follow up. We don't add you to any mailing list.

What we don't collect

We don't knowingly collect health information, precise location, government ID numbers, financial account details or other sensitive personal information, and we don't make decisions about you by automated means that have legal or similarly significant effects.

Creator partnerships (Creator Scout)

We work with content creators to turn what their followers ask for into products, such as ebooks, workbooks, courses and coaching offers, sold through our store on Whop. This section covers creators we research and work with, the people who comment on their posts, and people who buy their products.

If you're a creator we've researched

Public profile information: your handle, name, bio, website link, follower count, public posts and captions, their view, like and comment counts and dates, and your public photos. We get this through Meta's official tools for business accounts and by saving public Instagram pages we view.
Contact details you publish: an email address from your bio, your contact button or your website. We also look at your website for location and what you already sell.
Your general location, inferred from your bio, website or post locations (for example a city). Never your address.
Our analysis: topics, tone, what your audience asks for, and product ideas, written with Anthropic's Claude from your public captions and comments.
Why: our legitimate interest in finding creators whose audiences are already asking for something, and proposing a product to them. We contact you by email (or a direct message if there's no email). If you say no, or ask us to delete your data, we stop.

If you've commented on a creator's post

We read public comments on a creator's posts to understand what their audience is asking for. We don't keep commenters' names or handles: each one is replaced by a scrambled (one-way hashed) code as soon as we process it, and the comment text itself is deleted within 30 days. We never contact commenters.

If you're a creator working with us

Your private link to your portal page works for 60 days. We store only a scrambled form of it, and opening it sets one cookie that keeps you signed in.
What you give us: your answers (interested or not now, the ideas and format you choose, notes), the material you write or upload, photos you upload or pick from your Instagram, and your revision notes. Your material and notes are sent to Anthropic's Claude to draft and revise your product. Short headings (never your full text) are sent to an image model to draw illustrations.
Your agreement. When you start a product, and again when you put it on sale, we record your agreement: the exact terms you saw and their version, the date and time, your IP address and browser, and, for the listing, your typed full name, price, the email you use with Whop, and your offer.
Payouts. Your share is paid through Whop, using the email you give us for Whop.
Why: to make and sell your product under our agreement with you, and to keep proof of what was agreed.

The terms you agree to

The creator agreement (version 2026-11-12.4, printable and as a PDF) sets out the full terms. In short, as below. Your own copy, with the money terms for your offer, is shown in your portal before you agree, and we keep a copy of exactly what you agreed to.

You own your content and your photos. Nothing you share with us changes that.
We make the product from the material you give us and your posts.
You approve everything before anything is sold. Nothing goes on sale without your yes.
The finished product we make together is sold only through our store while the agreement runs.
Revenue is shared as set out in your offer, on sales we process, after Whop's fees (for example 70% to you, 30% to us), or we pay you a one-time fee and you keep 100% of sales.
Either side can end the agreement with 30 days' notice.
You can delete your data any time. We keep signed agreements and sales records for legal and tax reasons.
Every file we make (PDF and PowerPoint) carries a small "Crafted by AlwaysDrafting" credit at the bottom of each page, linking to our site.

Delete my data

Your portal has a Delete my data button, and you can also email us. It takes your products off sale, deletes your files and photos, your profile, posts, comments, analysis, answers, material and drafts, and puts your handle on a do-not-contact list so we never research or contact you again. We keep only what we must: your signed agreements, sales records, files buyers have already paid for (so they keep what they bought), and the do-not-contact entry itself. Copies in our providers' systems, such as Whop's own records and background job logs, follow those providers' retention.

If you buy a creator's product

Checkout is run by Whop, which holds your payment details. We receive your email address, the amount, the payment status and what you bought, so we can send you your download link and handle refunds. Your download link keeps working so you can return to what you bought; if a purchase is refunded or disputed, the link stops working.

Services we use

We share personal information only with the services that help us run Always Drafting, each for the purpose below, and with no one else, except when the law requires it, to protect our rights or someone's safety, or if Always Drafting is ever sold or merged (then this policy keeps applying to your information).

Service	What it receives	Why
Amazon Web Services	This website, snapshot requests and records, business records, server logs	Hosting, storage and processing (United States)
Cloudflare	Your IP address and browser signals during the person check; short ad descriptions for picture generation	Spam and abuse prevention (Turnstile); generating example ad pictures
Anthropic (Claude)	A business's name, category, town, website address and website text; for creators, public captions, comments without names, and material a creator gives us	AI analysis and drafting
Umami	Pages viewed, referring site, browser and device type, country, button clicks. No cookies, no IP stored, no cross-site tracking	Counting visits to this website
Zippopotam.us	The ZIP code you type, and your IP address (your browser asks it directly)	Showing the town for a ZIP code
Higgsfield	Descriptions and brand images for ads a customer orders	Making ordered ad images and video
Stripe	Payment and the email you give at checkout. We never see your card number	Payments for ad orders
Resend	Order details and email addresses in the emails we send	Sending order and delivery emails
Vercel	Order notifications; for Creator Scout, the app, its background jobs and their logs	Hosting
Supabase	Creator Scout's database and private file storage	Storage (Creator Scout)
Whop	Buyer checkout details and payment; a creator's Whop email for payouts	Store, checkout and creator payouts (Creator Scout)
Meta (Facebook and Instagram)	Our requests for public Page, profile, post and ad information; posts we publish on our own accounts	Research, and our own social media
Google	Email we write to you from our Google Workspace mailbox	Email

Cookies

This website sets no advertising or tracking cookies, and our visit counter uses none. Cloudflare's person check may store what it needs to tell people from bots. The creator portal sets one cookie that keeps you signed in to your own page. These are strictly necessary, so there's no cookie banner. We honor Global Privacy Control and Do Not Track signals, though we don't sell or share your information either way.

How long we keep it

Snapshot requests and the email you leave to hear when your snapshot is ready: deleted after 12 months. Request counters by scrambled IP address: 30 days.
Business records: until they're no longer useful for the work described here, or until you ask us to delete them.
Server logs: deleted after 90 days.
Snapshot pages: until we take them down, or as soon as you ask.
Creator research: raw comments and captured pages are deleted within 30 days; other research data until it's no longer useful, or until you use Delete my data.
Creator portal links: 60 days.
Agreements, orders and sales records: as long as the law requires for legal, tax and accounting reasons (generally up to seven years).
Email: as long as we need it to work with you.

Your rights

Wherever you live, you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct it if it's wrong;
delete it (we'll tell you if we must keep anything, and why);
stop contacting you, or stop using your information for research or outreach;
and, where the law gives you these rights, restrict or object to how we use it, or move it elsewhere.

Email hello@alwaysdrafting.com. We may ask you to confirm it's you, for example by replying from the email address involved. We answer within 30 days, at no charge, and we won't treat you differently for asking. You can ask someone to make a request for you. If we turn down a request, we'll say why and you can ask us to reconsider by replying. If you're in the European Economic Area or the United Kingdom, you can also complain to your data protection authority, and residents of US states with privacy laws can contact their state attorney general.

We do not sell personal information and do not share it for targeted advertising, as those terms are defined under US state privacy laws, including California's.

Security

We use encrypted connections (HTTPS) everywhere, private storage that only Always Drafting can reach, access limited to our own sign-in, scrambled (hashed) private links and IP addresses, signed and expiring links to private files, and checks that payment and other notifications really come from their senders. No system is perfectly secure; if a breach ever affects your personal information, we'll tell you and the authorities as the law requires.

Children, location, changes

Children. Our services are for businesses and adults. We don't knowingly collect information from anyone under 16. If you think we have, email us and we'll delete it.
Where your information is. We're in the United States, and our services store and process information here and in other countries where they operate. If you're outside the US, your information is transferred to the US, where privacy laws may differ; we rely on our providers' contractual safeguards for those transfers.
Our reasons, for visitors in the EEA and UK. We use your information to perform our agreement with you (creator agreements, orders), with your consent where we ask for it, to meet legal obligations, and for our legitimate interests in running and promoting Always Drafting, which we balance against your rights; you can object at any time.
Changes. When we change this policy we update the date at the top. If a change is significant, we'll also tell creators and customers we work with by email before it takes effect.

Contact

HU5TLE LLC, operating Always Drafting
929 N 145th St, Unit 33012, Seattle, WA 98133
hello@alwaysdrafting.com

Our Explore Playlist Generator browser extension has its own privacy policy.