Privacy Policy

Information We Collect

We collect information you provide when creating an account or using the Service:

• Account data: Name, email address, hashed password
• Usage data: Agent runs, session interactions, feature usage
• Payment data: Processed by our payment provider — we never store raw card details
• Communications: Messages sent via contact forms or email

How We Use Your Information

• To provide, operate, and improve the Service
• To process payments and manage subscriptions
• To send transactional emails (receipts, password resets, important notices)
• To analyse anonymised usage patterns to improve agent quality
• To comply with legal obligations and prevent fraud

AI & Your Content

Your content is processed in real-time to generate outputs and is not permanently stored beyond your active session.

Session & Download Data

Agent results are stored in your server-side session to enable CSV/Excel/PDF downloads. Session data is automatically cleared after inactivity (typically 24 hours) and is not accessible to other users.

Cookies & Tracking

We use:

• Strictly necessary cookies: Authentication tokens and session management
• Analytics cookies (optional): Anonymised usage statistics — you can opt out

We do not use advertising cookies or sell cookie data to third parties.

Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• OpenAI — AI processing (bound by OpenAI's data protection terms)
• Payment processor — Billing and subscription management
• Cloud hosting — Infrastructure and storage

Data Retention

Account data is retained while your account is active. After account deletion, personal data is removed within 30 days. Anonymised usage statistics may be retained indefinitely.

Your Rights (GDPR & CCPA)

You may have the right to:

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion ('right to be forgotten')
• Portability: Receive your data in a portable format
• Objection: Object to certain types of processing

Contact privacy@writerpilots.com to exercise these rights.

Data Security

We use HTTPS/TLS encryption, bcrypt password hashing, regular security audits, and strict access controls. In the event of a breach, we will notify affected users within 72 hours.

Children's Privacy

WriterPilots is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided data, contact us immediately.

Contact & Data Requests

Privacy enquiries and data subject requests: privacy@writerpilots.com. We respond to all verifiable requests within 30 days.