Legal
Privacy Policy
Last updated: April 2026
1. Overview
This policy explains what data Writ collects, why we collect it, and how we handle it. We keep things simple: we collect only what we need to run the service, we do not sell your data, and we do not use it for advertising.
We are committed to handling your data responsibly and in accordance with applicable data protection law.
2. Data we collect
Account data — your email address, name (optional), and a hashed password when you create an account.
Testimonials — the name, role, company, and testimonial text submitted by your clients through your collection page. Your clients do not need an account to submit.
Billing data — if you subscribe to a paid plan, Stripe collects and stores your payment details. We store only a Stripe customer ID — we never see or store your card number.
Usage data — basic server logs (IP address, browser type, pages visited) for security and debugging. We do not use third-party analytics trackers.
3. How we use your data
We use your data to:
- Operate your account and provide the service
- Process subscription payments
- Send transactional emails (receipts, password resets)
- Investigate security incidents or abuse
We do not use your data for marketing to third parties, profiling, or automated decision-making.
4. Third-party services
We use trusted third-party services for hosting, payments, and email. These providers only receive the data necessary to perform their function and are bound by their own privacy policies.
5. Your clients' data
When your clients submit a testimonial through your collection page, you become the data controller for that submission. You are responsible for having a lawful basis to collect and publish that information — for example, obtaining their consent before sharing the link.
We act as a data processor on your behalf for testimonial data, and handle it only as necessary to provide the service to you.
6. Data retention
We keep your data for as long as your account is active. If you delete your account, we will delete your account data and all associated testimonials within 30 days.
Billing records may be retained for a period required by applicable financial record-keeping regulations.
7. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict processing in certain circumstances
To exercise any of these rights, contact us via the details on our about page. We will respond within 30 days.
8. Cookies
Writ uses a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. Changes to this policy
If we make material changes to this policy we will notify you by email or via a notice in the dashboard before the changes take effect.
10. Contact
For privacy-related questions or to exercise your rights, contact us via the about page.