Legal
Privacy Policy
Last updated: April 9, 2026
1. Who we are
Dragble operates https://dragble.com and provides the Dragble SDK and related services. Contact us at hello@dragble.com.
2. What data we collect
Account data (email, name when provided). Payment data (processed by our third-party payment processor — we do not store card details). Usage data (API calls, editor key usage, feature usage). Technical data (IP address, browser type, device, pages visited). AI interaction data (prompts submitted to AI features). Analytics data (Google Analytics 4, only with your consent).
3. Legal basis for processing (GDPR Article 6)
Consent: analytics cookies and marketing (you can withdraw anytime). Contract performance: providing our service, processing your account. Legitimate interest: security monitoring, fraud prevention, service improvement. Legal obligation: tax records, compliance with applicable law.
4. How we use your data
Provide and improve our services. Process payments via our payment processor. Send service notifications (account, billing, security). Analyze usage to improve features. Maintain security and prevent abuse. Comply with legal obligations. We do not sell your personal data to third parties.
5. AI features and data
Certain Dragble plans include AI-powered features (smart text, smart headings, AI image generation). When you use these features, your input is sent to third-party AI providers for processing. We do not use your prompts or AI interactions to train models. AI-generated content is not guaranteed to be accurate. If you use BYOK (Bring Your Own Key), your data is routed through Dragble servers to your own API key with the AI provider. You are responsible for reviewing your provider's terms. We encourage you to review the privacy policies of our AI providers, which are disclosed upon request.
6. Sub-processors
We use third-party service providers to help operate our platform. These providers process data on our behalf and are bound by data processing agreements. Categories of sub-processors include: Authentication and user management — email address, account metadata. Cloud infrastructure and storage — uploaded assets, IP addresses for content delivery. Email delivery — email addresses for transactional notifications. Payment processing (Merchant of Record) — email, billing information, payment details. AI processing — content submitted to AI features for text and image generation. Analytics — anonymized usage data, collected only with your consent. Stock media search — search queries submitted when browsing free image libraries. A detailed list of specific sub-processors is available upon request by contacting hello@dragble.com.
8. Your rights — GDPR
If you are in the European Economic Area, you have the right to: access your personal data, correct inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, contact us at hello@dragble.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
9. Your rights — CCPA (California)
If you are a California resident, you have the right to: know what personal information we collect and how it is used, request deletion of your personal information, opt out of the sale of personal information (we do not sell personal data), and receive equal service regardless of exercising your privacy rights.
10. Children's privacy
Dragble is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at hello@dragble.com.
11. International data transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States and European Union, where our infrastructure providers operate. We use appropriate safeguards for international transfers, including Standard Contractual Clauses where applicable under GDPR.
12. Data retention
Active accounts: personal data is retained for as long as your account is active. Deleted accounts: personal data is deleted within 30 days of account closure. Anonymized analytics data is retained for product improvement. Payment records: retained as required by law, typically 7 years. AI interaction logs: deleted after 90 days. You may request early deletion by contacting hello@dragble.com.
13. Data security
We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption for all connections, access controls and authentication, regular security reviews, and encrypted storage for sensitive data. No method of internet transmission is 100% secure. In the event of a data breach affecting your personal data, we will notify affected users within 72 hours as required by GDPR.
14. Data processing agreement
A Data Processing Agreement (DPA) is available for business and enterprise customers upon request. Contact hello@dragble.com to request a copy.
15. Changes to this policy
We may update this Privacy Policy periodically. For significant changes, we will notify you by email or by a prominent notice on our website at least 30 days before the changes take effect. The date of the latest revision is shown at the top of this page. Continued use of Dragble after changes constitutes acceptance of the updated policy.
16. Contact
For privacy-related questions or to exercise your data rights, contact: Dragble Email: hello@dragble.com