How we protect your workspace

You can sign in with an email and password or with Google.

Sessions are held in HttpOnly cookies. We do not store bearer tokens in the browser where scripts could read them.

Drafts, brand voice settings, and the access you grant to connected accounts stay scoped to your workspace.

We use them to run the product for you: writing, publishing, and reporting on what you shipped.

We only post to the platforms you have connected, and only when you ask us to publish.

Nothing goes out on its own. You can disconnect a platform at any time, which removes our ability to publish there.

ProjectDrafts runs on a small set of service providers: hosting, database, authentication, payments, and AI processing.

We share only what those providers need to do their part. We do not currently hold SOC 2 or ISO certification, and we would rather say so than imply otherwise.