Legal

Privacy Policy

Last updated: April 2026

1. Overview

This policy explains what data Writ collects, why we collect it, and how we handle it. We keep things simple: we collect only what we need to run the service, we do not sell your data, and we do not use it for advertising.

We are committed to handling your data responsibly and in accordance with applicable data protection law.

2. Data we collect

Account data — your email address, name (optional), and a hashed password when you create an account.

Testimonials — the name, role, company, and testimonial text submitted by your clients through your collection page. Your clients do not need an account to submit.

Billing data — if you subscribe to a paid plan, Stripe collects and stores your payment details. We store only a Stripe customer ID — we never see or store your card number.

Usage data — basic server logs (IP address, browser type, pages visited) for security and debugging. We do not use third-party analytics trackers.

3. How we use your data

We use your data to:

  • Operate your account and provide the service
  • Process subscription payments
  • Send transactional emails (receipts, password resets)
  • Investigate security incidents or abuse

We do not use your data for marketing to third parties, profiling, or automated decision-making.

4. Third-party services

We use trusted third-party services for hosting, payments, and email. These providers only receive the data necessary to perform their function and are bound by their own privacy policies.

5. Your clients' data

When your clients submit a testimonial through your collection page, you become the data controller for that submission. You are responsible for having a lawful basis to collect and publish that information — for example, obtaining their consent before sharing the link.

We act as a data processor on your behalf for testimonial data, and handle it only as necessary to provide the service to you.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, we will delete your account data and all associated testimonials within 30 days.

Billing records may be retained for a period required by applicable financial record-keeping regulations.

7. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict processing in certain circumstances

To exercise any of these rights, contact us via the details on our about page. We will respond within 30 days.

8. Cookies

Writ uses a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Changes to this policy

If we make material changes to this policy we will notify you by email or via a notice in the dashboard before the changes take effect.

10. Contact

For privacy-related questions or to exercise your rights, contact us via the about page.