Privacy policy

Draven is a product of Vaillant LLC. This policy covers both the marketing site at getdraven.com and the Draven application at app.getdraven.com. If you have questions, email privacy@getdraven.com.

On getdraven.com we only collect what you type into the waitlist or demo request forms. That is your email address, and optionally your name, company, and any message you write. We also record the date you submitted and whether it was a waitlist or demo request.

We use it to contact you about early access, to respond to demo requests, and to confirm we received your submission. We do not send marketing unrelated to Draven, and we do not sell or rent your information to anyone.

We do not use advertising cookies, analytics scripts, session recording, or third party trackers on this site.

When you create an account we store your email address, your name, your password in hashed form, and the settings you choose, such as your timezone and your brief time. We also store the work you create in Draven: your chats, tasks, projects, notes, contacts, deals, and any files you upload to the knowledge base.

Each account is isolated. Your data is not visible to other Draven users, and we do not use one customer’s data to answer another customer’s questions.

Connecting your Google account is optional, and Draven works without it. If you do connect, Draven requests only the access its features actually use:

• Gmail. Read your messages, search your inbox, and create, modify and send messages and drafts on your instruction. Used for the inbox view, the inbox section of your brief, and drafting or sending mail you ask for.
• Google Calendar. Read your events, and create, update and delete events on your instruction. Used for the calendar views, the meeting counts on your dashboard, and scheduling you ask for.
• Google Docs. Create documents and read and update existing ones, when you ask Draven to write or revise a document.
• Google Drive and Google Sheets, read only. Read files and spreadsheets you point Draven at, so it can reference them in an answer.
• Your name and email address. Used to identify which Google account is connected and to show it back to you.

Draven reads this data to carry out what you ask it to do and to assemble your daily brief. It does not scan your account for any other purpose.

Draven is an AI assistant, so answering a question about your mail or calendar means sending the relevant content to a language model. Draven uses the OpenAI API for this. Content is sent only to produce the response you asked for. Under OpenAI’s API terms this content is not used to train their models.

Google data is held only for as long as it takes to answer you, except where a feature you use stores a result, such as a task Draven extracts from an email at your request, or the text of a brief that is cached so it can be shown again. Draven does not keep a copy of your mailbox or your calendar.

We do not use Google Workspace data for advertising, we do not sell or transfer it, and we do not use it to train, retrain, or improve any generalized artificial intelligence or machine learning model.

Draven’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use a small number of service providers to run Draven: infrastructure and hosting, the language model that generates Draven’s responses, and delivery of transactional email such as password resets and waitlist confirmations. Each one is bound by contract to process data only to provide that service to us, and none of them may use it for their own purposes.

Other than the language model provider named above, we do not publish the list. If you are evaluating Draven and your procurement or security review needs it, email security@getdraven.com and we will provide it under a mutual NDA. Our security page covers how your data is protected in more detail.

You can disconnect your Google account from inside Draven at any time. Disconnecting deletes the stored credential for that account immediately, and Draven can no longer reach your Google data.

You can also revoke Draven’s access directly from your Google account at myaccount.google.com/permissions.

To delete your Draven account and the data in it, email privacy@getdraven.com. We will action it and confirm when it is done.

We keep waitlist and demo submissions until Draven launches and you have had the chance to create an account, or until you ask us to delete them, whichever comes first.

Everything is transmitted over HTTPS. The tokens that let Draven reach your Google account are encrypted before they are stored, and access to your records is checked against your account on every request.

If you believe you have found a security issue, please report it to security@getdraven.com.

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@getdraven.com and we will action it. Depending on where you live, you may have additional rights under the GDPR or the CCPA. We honor those requests regardless of where you are.

If we change this policy we will update the date at the top of this page. Material changes affecting how we use your information will be communicated to the email address you gave us.