Privacy notice

Who we are

DRAFTAI TECHNOLOGY COMPANY LIMITED (草稿智能科技有限公司) is a company incorporated in Hong Kong, whose address is 19H Maxgrand Plaza, No. 3 Tai Yau Street, San Po Kong, Kowloon, Hong Kong. It is responsible for the personal information described in this notice. You can reach us about it at contact@shiprev.dev.

What we collect

The website has no accounts, and it does not send anything you type or choose on it to us or to anyone else. You can read every page without telling us who you are.

The website is hosted for us by Cloudflare, which delivers each page to your browser. To do that and to protect the website from attacks, Cloudflare processes basic technical information about each request, such as your IP address, your browser type, the page requested and the time. We do not export these records or keep our own copy of them.

Cloudflare may also ask your browser to remember, for a limited time, to send Cloudflare a short report if a page on the website fails to load because of a network problem, such as a connection that times out. Your browser sends that report directly to Cloudflare, not to us, and only when such a failure occurs. The report contains the address of the page, the address of the page you came from, the type of error and timing details, and Cloudflare receives your IP address and browser type with it. Cloudflare uses these reports to monitor and maintain its network.

The website does not use analytics, advertising or tracking scripts, and the website itself does not set cookies. It saves one setting in your browser, your choice of light or dark theme, and that setting never leaves your device. Because the website does not track you, it behaves the same whether or not your browser sends a Do Not Track signal.

If Cloudflare's security systems judge that a request may be automated or harmful, Cloudflare may ask your browser to complete a check before showing the page, and may then set a cookie that is strictly necessary to remember that the check was passed. We have not turned on any Cloudflare feature that adds cookies or scripts to ordinary visits.

The website may offer a link to apply for early access to the ShipRev managed cloud. The link opens a form on Google Forms, a service provided by Google. The form asks for your email address and three optional questions about your setup: how many paid plans you sell, whether you charge for usage, and how many separate systems hold identity, subscriptions, usage and entitlements today. It does not ask for your name or company, and you do not need a Google account or to sign in to use it. Applying is voluntary. If you do not apply, the only consequence is that you will not be among the people we contact first when early access opens.

When you open the form, Google also processes technical information about your visit, such as your IP address and browser type, and may set cookies, under Google's own privacy policy.

If you write to us at contact@shiprev.dev, we receive your email address, your name if you include it, and whatever you write. Writing to us is voluntary. If you do not, the only consequence is that we cannot reply to you.

Please do not include sensitive information, such as health or financial details, or information about other people, in your email.

How we use it

We use what you write to us only to reply to you and to continue the conversation you started.

We use your early access application only to decide whom to contact first when early access to the managed cloud opens, and to invite you then. A person on our team reads the applications and decides the order in which we contact applicants; we do not use automated means to make that decision.

If you ask us to tell you when ShipRev becomes available, that is, when the managed cloud service opens or when the source code is published, we will write to you once it is. We will not add you to a newsletter or send you other marketing.

We will not publish your words, or anything that identifies you or your company, without asking you first.

The technical records described above are used only to deliver the website and to keep it running and secure.

We do not sell or rent your information, and we do not share it with anyone for their own marketing. We do not make decisions about you by automated means, apart from Cloudflare's automatic screening of requests for attacks described above.

Legal basis

If you are in the European Economic Area or the United Kingdom, we rely on our legitimate interest in running a secure website for the technical records that Cloudflare processes for us, and on our legitimate interest in replying to people who write to us for our correspondence with you. If you ask us to tell you when ShipRev is available, we rely on your consent to do so. You can withdraw your consent or object at any time, as described below.

For early access applications, we rely on your consent, which you give by submitting the form after reading how we will use it. You can withdraw it at any time by asking us to delete your application. For messages sent to our social media accounts and for the statistics the platforms give us, we rely on our legitimate interest in replying to people who contact us there and in understanding, in total, how our accounts are used.

Where it is kept and for how long

Cloudflare delivers the website from its data centres around the world, usually from one close to you. It processes the technical records described above in its data centres in the United States and Europe, for a limited period that Cloudflare sets. Under its terms with us, it keeps them no longer than it needs them to provide its service to us, and not after our agreement with it ends. Cloudflare's dashboard also lets us view a sample of requests that its security features have flagged or blocked, including the IP address and browser type, for up to 31 days. We do not copy them out of the dashboard.

If you are outside the United States, including in the European Economic Area or the United Kingdom, information about your visit may be handled in the United States. Data protection law there may differ from the law where you live. This notice and your rights under it apply wherever your information is handled.

If you write to us, or we write back, your email address and our correspondence are held in our email account with Lark, an email service provided by Lark Technologies Pte. Ltd. in Singapore. We keep that correspondence while it is useful to the conversation, and delete it when you ask us to. If you have asked us to tell you when ShipRev is available, we keep your email address for that purpose until we have sent that notice or you tell us to stop.

Early access applications are held with Google, in the Google account we use for the form, together with a list of applicants, their answers and the order in which we plan to contact them. We keep each application, and its entry on that list, for no longer than 12 months from when we receive it. If we invite you to early access and you have not replied within 90 days of the invitation, we delete your application then. If you reply, we keep our correspondence as described above. If you ask us to delete your application, we do so within one month.

Our social media accounts

We may run accounts for ShipRev on social media platforms. If you message or mention one of them, we receive what you send and the profile information the platform shows us, and we use it only to reply to you. Your messages stay on the platform. We do not keep copies of them elsewhere, apart from notes about what people ask us that do not identify anyone, and we delete the messages we are able to delete when you ask us to.

The platforms also give us statistics about how people interact with our accounts, which they compile from their own data; we see only the totals. Each platform is responsible for its own processing under its own privacy policy. You can ask the platform or us about the statistics, and we will pass on any request that only the platform can deal with.

Who else receives it

Cloudflare, Inc., in the United States, hosts the website and delivers it to you. It processes the technical records described above on our behalf under a data processing agreement that forms part of our agreement with it and includes the standard contractual clauses approved by the European Commission, and the UK addendum to them, as safeguards for international transfers. Cloudflare also uses information it derives from traffic across its network, such as threat scores for IP addresses, to secure, maintain and improve its service, as described in its own privacy policy. Cloudflare uses its own service providers, which it lists publicly.

Google provides the form we use for early access applications and stores the applications and our list of applicants. We use Google Forms under Google's own terms of service and privacy policy, not under a data processing agreement with us, so Google handles this information as its privacy policy describes, rather than only on our instructions, and the safeguards described for Cloudflare and Lark do not apply to it. Google may store this information in the United States and other countries where it or its service providers operate.

Lark, our email provider, holds our correspondence with you, including any early access invitation we send you and your reply. Lark may store this information on servers in the United States, Singapore or Japan, and uses its own service providers to run its service. It handles this information on our behalf under a data processing agreement that includes the standard contractual clauses approved by the European Commission, and the UK addendum to them, as safeguards for international transfers.

You can ask us for a copy of the safeguards for Cloudflare or Lark at contact@shiprev.dev.

No other company receives this information from us.

Your choices and rights

You can ask us what information we hold about you, ask us to correct it or delete it, including your early access application, and ask us to stop contacting you. Write to contact@shiprev.dev from the email address you used to write to us or to apply, or by post to our data protection contact at the address above. We will reply within 30 days.

The technical records that Cloudflare processes do not include your name, and we do not keep our own copy, so we usually cannot link them to you. If you give us details that let us identify them, such as your IP address and the time of your visit, we will deal with your request, with Cloudflare's help where needed.

Any notice we send you about ShipRev's availability, and any early access invitation, will tell you how to stop further emails.

Depending on where you live, you may have further rights, such as the right to object to or restrict how we use your information, to receive it in a portable format, and to complain to your data protection authority. In Hong Kong, your rights of access and correction are provided by the Personal Data (Privacy) Ordinance. You can exercise any of these rights through the same address.

Children

The website is not directed at children, and we do not knowingly collect information from anyone under 16.

Changes to this notice

If we change what the website collects or how we use it, we will update this notice and the date at the top before the change takes effect. If a change affects information you have already given us, we will ask you first.