Privacy Policy

1. Who we are

WriteFlow is an article publishing platform operated by a small startup from Pakistan, available at getwriteflow.com (the “Service”). This Privacy Policy explains what information we collect, why we collect it, and the choices you have. Questions: contact us at support@getwriteflow.com.

2. Information we collect

• Account data: email address, display name, password (stored hashed by our auth provider), optional Google sign-in, avatar, bio, and social links you add to your profile.
• Content: articles, drafts, comments, and other material you create.
• Usage analytics: page views, read duration, scroll depth, referrer/traffic source, and similar engagement signals — used for your analytics dashboard, popularity scoring, and abuse prevention.
• Technical data: IP address (for rate limiting and security), browser/device information, and timestamps.
• Billing data: subscription status and customer identifiers from our payment provider. Full card details are never entered on or stored by WriteFlow.

3. How we use your information

• To provide, operate, and improve the Service.
• To display your profile and articles to readers.
• To power analytics dashboards, popularity scores, and recommendations.
• To send essential transactional email (password resets, account notices) — never marketing email without consent.
• To process subscriptions and prevent fraud/abuse.

4. AI features and third-party processing

When you actively use an AI feature (title/outline generation, grammar fixes, summaries), the text you select is sent to our AI processor (DeepInfra, OpenAI-compatible API) to generate a response. Text is not sent to the AI processor unless you invoke one of these features. We do not control how the processor uses data for its own purposes — please review their privacy policy.

We also rely on processors to run the Service: Supabase (database, authentication, file storage), Vercel (hosting), Creem (payments/subscriptions), Amazon Web Services SES (transactional email), Upstash (rate limiting — receives IP addresses to stop abuse), and — only with your consent — Google Analytics.

5. Payments

Paid plans are processed by Creem. Payments are subject to Creem's privacy policy and terms; we receive only the subscription outcome (for example, “Pro active”), not your card number.

6. Cookies

• Essential cookies: keep you signed in and secure your session. These are required and cannot be refused.
• Preference cookie (wf_consent): remembers your cookie choice for 180 days.
• Analytics cookies (Google Analytics): set only if you press “Accept all”. If you reject, no analytics script is loaded at all. You can change your mind anytime via “Cookie preferences” in the footer.

The full list of cookies we use, how long they last, and how to manage them is in our Cookie Policy. Embedded videos are click-to-load and are never fetched in the background.

7. Data retention and deletion

We keep your data while your account is active. You can delete your account from Settings at any time. Deletion removes your articles, comments, likes, bookmarks, follows, notifications, profile images we store, and closes your subscription so you are no longer billed. Some information may persist briefly in encrypted backups until they rotate, and records we must retain for legal or financial reasons (for example, payment receipts held by our payment provider) are retained accordingly.

8. Your rights

Depending on your location (including GDPR/UK GDPR and CCPA/CPRA where applicable), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can update most profile data in Settings and delete your account in Settings. To exercise any other right, contact us — we will respond within the timeframe required by applicable law. You may also withdraw analytics consent at any time through “Cookie preferences”.

9. Children

The Service is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

10. Changes and contact

We may update this policy; the effective date above will change when we do. Material changes will be announced in-app. Contact: support@getwriteflow.com.