Legal
Privacy Policy
Last updated: June 15, 2026
1. Who we are
Muhammad Zaman, trading as Dragble, based in Lahore, Pakistan operates https://www.dragble.com and provides the Dragble SDK, dashboard, hosted editor, API, documentation, and related services. For personal data handled directly by Dragble, Muhammad Zaman, trading as Dragble is the controller. Contact us at hello@dragble.com.
2. What data we collect
Account data (email, name when provided, login and security metadata). Payment and billing data (processed by a third-party payment processor acting as Merchant of Record — we do not store card details). Service usage data (API calls, editor key usage, exports, feature usage, project and plan usage). Technical data (IP address, browser type, device, pages visited, approximate location, log data, and security events). Content data (templates, assets, designs, prompts, AI feature inputs, and generated outputs when you use those features). Analytics and advertising measurement data from tools such as Google Analytics, Google Tag Manager, Microsoft Clarity, PostHog, Meta Pixel, and LinkedIn Insight Tag, only when configured and only after you accept non-essential cookies/tracking.
3. Legal basis for processing (GDPR Article 6)
Consent: non-essential analytics, advertising measurement, session replay, and marketing tracking (you can withdraw or decline consent at any time). Contract performance: creating and managing your account, providing the dashboard, SDK, API, editor, exports, support, and subscription access. Legitimate interest: service security, fraud prevention, abuse prevention, product diagnostics, aggregated usage analysis, and service improvement. Legal obligation: tax records, accounting records, sanctions screening, compliance requests, and payment dispute handling.
4. How we use your data
Provide, secure, maintain, and improve our services. Process payments, subscriptions, invoices, refunds, tax-related records, chargebacks, and buyer support. Send service notifications (account, billing, security, product, and support messages). Analyze usage to improve features and diagnose issues. Measure marketing performance where you have accepted non-essential tracking. Maintain security and prevent abuse, spam, fraud, and policy violations. Comply with legal obligations. We do not sell your personal data for money. If advertising measurement tools are enabled, you can decline non-essential cookies/tracking to opt out of that sharing.
5. AI features and data
Certain Dragble plans include AI-powered features for lawful business template workflows, such as smart text, smart headings, business image generation, alt text, localization, and editing assistance for email templates, landing pages, popups, and related content. These AI features are not intended for deepfakes, face swaps, voice impersonation, adult content, spam, phishing, deceptive marketing, political persuasion at scale, or other prohibited uses listed in our Acceptable Use Policy. When you use AI features, your input and relevant template context may be sent to third-party AI providers for processing. We do not use your prompts or AI interactions to train models. AI-generated content is not guaranteed to be accurate. If you use BYOK (Bring Your Own Key), your data is routed through Dragble servers to your own API key with the AI provider. You are responsible for reviewing your provider's terms. We encourage you to review the privacy policies of our AI providers, which are disclosed upon request.
6. Sub-processors
We use third-party service providers to help operate our platform. These providers process data on our behalf or as independent controllers where required for payments, tax, fraud, advertising, analytics, and compliance. Categories of providers include: Authentication and user management — email address, account metadata, login events. Cloud infrastructure and storage — uploaded assets, logs, IP addresses, and content delivery. Email delivery — email addresses and transactional notification content. Payment processing and Merchant of Record services — a third-party processor handles customer, billing, payment, tax, invoice, subscription, chargeback, and refund data for paid transactions. AI processing — content submitted to AI features for text and image generation. Analytics, ads, and product measurement — Google Analytics, Google Tag Manager, Microsoft Clarity, PostHog, Meta Pixel, and LinkedIn Insight Tag may process usage or event data only when configured and consented. Stock media search — search queries submitted when browsing free image libraries. A detailed list of specific sub-processors is available upon request by contacting hello@dragble.com.
8. Your rights — GDPR
If you are in the European Economic Area, United Kingdom, or another region with similar privacy rights, you may have the right to: access your personal data, correct inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, object to processing based on legitimate interests, and withdraw consent at any time. To exercise these rights, contact us at hello@dragble.com. We will respond within 30 days where GDPR applies, unless a lawful extension is required. Some payment, tax, fraud-prevention, and legal records may need to be retained even after a deletion request. You also have the right to lodge a complaint with your local data protection supervisory authority.
9. Your rights — CCPA (California)
If you are a California resident, you may have the right to know what personal information we collect and how it is used, request deletion or correction of your personal information, opt out of sale or sharing for cross-context behavioral advertising, and receive equal service regardless of exercising your privacy rights. We do not sell personal data for money. You can decline non-essential cookies/tracking to opt out of advertising measurement sharing.
10. Children's privacy
Dragble is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at hello@dragble.com.
11. International data transfers
Dragble is operated from Pakistan and uses service providers that may process data in countries outside your jurisdiction, including the United States, European Union, United Kingdom, and other locations where our infrastructure, payment, analytics, AI, and support providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, provider data-processing terms, or other lawful transfer mechanisms.
12. Data retention
Active accounts: personal data is retained for as long as your account is active. Deleted accounts: personal data is deleted or anonymized within 30 days of account closure where technically and legally possible. Backups and security logs may persist for a limited period before automatic rotation. Anonymized or aggregated analytics data may be retained for product improvement. Payment, invoice, tax, accounting, refund, chargeback, and fraud-prevention records are retained as required by law or payment-provider rules, typically up to 7 years. AI interaction logs are deleted or anonymized after 90 days unless needed for security, abuse, support, or legal reasons. You may request early deletion by contacting hello@dragble.com.
13. Data security
We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption for all connections, access controls and authentication, regular security reviews, and encrypted storage for sensitive data. No method of internet transmission is 100% secure. In the event of a data breach affecting your personal data, we will notify affected users within 72 hours as required by GDPR.
14. Data processing agreement
A Data Processing Agreement (DPA) is available for business and enterprise customers upon request. Contact hello@dragble.com to request a copy.
15. Changes to this policy
We may update this Privacy Policy periodically. For significant changes, we will notify you by email or by a prominent notice on our website at least 30 days before the changes take effect. The date of the latest revision is shown at the top of this page. Continued use of Dragble after changes constitutes acceptance of the updated policy.
16. Contact
For privacy-related questions or to exercise your data rights, contact: Muhammad Zaman, trading as Dragble, based in Lahore, Pakistan Email: hello@dragble.com