Privacy Policy

Privacy at a glance

• We collect only what is required to operate the service
• Your content is never sold or used for advertising
• Strong encryption and access controls protect your data
• Your content is never used to train AI models

Data we collect

• Account data: email, name, profile information, and Google OAuth identity when signing in with Google
• Billing data: subscription plan and status, payment details are handled directly by Stripe and never stored on our servers
• Content data: prompts, inputs, generated outputs, templates, style profiles, and brand voice configurations you create
• Usage data: generation counts, feature usage, and platform activity within your account
• Technical data: IP address, browser type, and session data for security and performance purposes. We use session cookies strictly for authentication. We do not use tracking, advertising, or analytics cookies.

How we use data

Third-party services

• Stripe — payment processing and subscription management. Your card data goes directly to Stripe under their PCI-DSS compliance.
• Google OAuth — optional sign-in. We receive only your name and email from Google, nothing else.
• AI Providers — AI generation. Prompts and inputs are sent to these providers to fulfill generation requests. They are subject to their respective data handling policies.
• Tavily — real-time web research. Search queries derived from your generation inputs are sent to Tavily to fulfill research requests.
• Resend — transactional email delivery for account verification, billing notifications, and support communications.
• Google Cloud — infrastructure hosting in the United States (us-central1).

Security

• TLS encryption in transit
• Encrypted database at rest via Google Cloud SQL
• Secrets managed via Google Cloud Secret Manager
• Authentication via NextAuth with session management
• Continuous monitoring and incident response

Data retention

• Account and content data is retained for the duration of your subscription.
• Upon account deletion, your content and personal data are removed within 30 days.
• Billing records may be retained longer as required by financial regulations.

Your rights

You may request access, correction, deletion, or export of your personal data at any time through your account settings or by contacting support@writerzroom.com.

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request erasure of your personal data. Account deletion requests are processed within 30 days.
• Portability: Request an export of your content and account data in a machine-readable format.
• Restriction: Request that we limit processing of your data in certain circumstances.

GDPR (EEA/UK users): You have the right to lodge a complaint with your local supervisory authority if you believe your data has been processed unlawfully.

CCPA (California residents): We do not sell personal information. You have the right to know what personal information is collected, to request deletion, and to non-discrimination for exercising your rights.

Contact