Privacy Policy

1. Introduction

Drafted, Inc. ("the Company," "we," "us," or "our") operates the website draftedhq.org and the Drafted platform (collectively, the "Service"). Drafted is an AI-powered employee-referral and warm-network recruiting platform: talent teams connect their employees' professional accounts, and our platform maps those collective networks to surface warm introduction paths to open roles. This Privacy Policy explains what personal information we collect in connection with that Service, how we use and share it, and the choices you have.

The Company is based at 51 Melcher Street, Suite 3, Boston, MA 02210, and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, work email, phone, company name) when you fill out a demo request, contact form, or free-trial sign-up;
• Account credentials and profile information when you register for the Service;
• The content of any messages you send us through the contact form or by email.

2.2 Employee Network Data (Platform Users)

When a talent team deploys Drafted and their employees authorize the integration, the Company processes the following data on behalf of the subscribing organization:

• Professional connection metadata: names, job titles, employers, and mutual-connection signals from authorized LinkedIn, Gmail, or Outlook connections. We read connection metadata only; we do not read message content, email body text, or private correspondence of any kind.
• Warm-path graph data: structured relationship graphs derived from the connection metadata above, used to score introduction paths between employees and candidate profiles for a specific open role.
• Candidate profile information: publicly available professional information (name, current role, employer, general location) used to match candidates to open roles. This data is sourced from public professional networks, not scraped from private profiles.
• Referral and pipeline activity: records of which introduction requests were sent, whether they were accepted, and pipeline-stage outcomes, used to power the analytics dashboard and improve warm-path scoring.

Employee network data is processed solely to generate warm-path rankings and introduction recommendations for the subscribing talent team. We do not use employee connection graphs or candidate matching data to train machine-learning models without explicit written consent from the subscribing organization.

2.3 Information Collected Automatically

When you visit draftedhq.org, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Operate the Drafted platform: process employee network connections, run warm-path scoring, generate introduction recommendations, and power the analytics dashboard for subscribing talent teams;
• Respond to inquiries, demo requests, and support tickets;
• Maintain and improve the Service, including debugging network-graph algorithms and improving AI matching accuracy;
• Send service-related communications (onboarding guides, product updates) and, with your consent where required, marketing emails;
• Detect, investigate, and prevent fraud, unauthorized access, or misuse of the platform;
• Comply with legal obligations, including responding to lawful requests from regulators or courts.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (hosting infrastructure, transactional email delivery, product analytics) under contractual confidentiality and data-processing terms that restrict their use to providing services to us;
• Subscribing organizations: employee network graphs and warm-path output are shared with the talent team of the organization that deployed Drafted and whose employees authorized the integration. Employees can revoke authorization at any time through their account settings;
• Legal authorities, when disclosure is required by law, court order, or to protect the rights, safety, or property of the Company or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy continuing to apply to your information.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember session preferences, and measure usage patterns. For full details on the specific cookies in use and your choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described and to meet our legal and accounting obligations. Specific retention periods by category:

• Account and platform data for active subscribers: retained for the duration of the subscription plus 90 days after cancellation, then deleted or anonymized;
• Employee network graphs and warm-path records: purged within 30 days of account closure or employee-authorization revocation, whichever comes first;
• Marketing contact data (demo request leads): retained up to 24 months from last interaction, then removed;
• Server access logs: retained 90 days, then aggregated and stripped of identifying fields.

7. Security

We use administrative, technical, and physical safeguards to protect personal information, including TLS encryption in transit, encrypted storage for network-graph data, restricted-access databases with least-privilege controls, and access logging for all production systems. No system is perfectly secure; we cannot guarantee absolute security, and we encourage you to use strong, unique credentials for your Drafted account.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected] with your name and a description of the request. We will respond within the timeframe required by applicable law.

9. Massachusetts Residents

Massachusetts does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails at any time via the unsubscribe link in each message or by emailing us.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, GLBA or FERPA), those laws may give you additional rights with respect to data covered by them.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

11. Contact

Questions, requests, or complaints about this Policy can be sent to:

Drafted, Inc.
51 Melcher Street, Suite 3, Boston, MA 02210
Email: [email protected]
Phone: +1 (617) 220-0157