1. What we collect
- Account info: email address and password (hashed with bcrypt) when you register.
- Writing samples: text you paste into the DNA training flow. We store these to extract your writing style and personalize rewrites.
- Rewrite content: input text and output text when you use the rewrite feature. This powers semantic caching and quality scoring.
- Usage data: rewrite count, plan, timestamps — used to enforce plan limits and improve the service.
- Payment info: handled entirely by Stripe. We never see or store your card number.
- Analytics: anonymized product usage events via PostHog (page views, feature interactions). No personally identifiable information is sent.
2. How we use it
- Authenticate your account and enforce plan limits.
- Extract your Writing DNA profile and personalize rewrite output.
- Improve the AI models and service reliability.
- Send transactional emails (billing receipts, account alerts) — no marketing without consent.
3. Data sharing
We do not sell your data. We share it only with:
- LLM providers (Google, Anthropic) — your rewrite input is sent to generate output. These providers have their own data policies.
- Stripe — payment processing only.
- PostHog — anonymous analytics only.
- Resend — transactional email delivery.
4. Data retention
We retain your account data while your account is active. You can delete your Writing DNA profile at any time from the dashboard. Deleting your account removes all associated data within 30 days.
5. Security
All data is transmitted over TLS. Passwords are hashed with bcrypt. JWT tokens expire after 15 minutes. We use short-lived access tokens and never store them in cookies accessible to JavaScript.
6. Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing support@writingtwinai.com. We will respond within 30 days.
7. Chrome extension
The Chrome extension reads text from the active browser tab (Gmail compose window, LinkedIn editor, Slack message box) only when you explicitly click the “Humanize” button. It does not continuously monitor your browsing. Text is sent to our API over HTTPS and is subject to the same data handling described above.
8. Changes
We will notify you of material changes to this policy by email or by posting a notice on the dashboard. Continued use after changes constitutes acceptance.