outwrite.ai ("we," "our," or "us") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our LLM-optimized content generation platform and services.
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Services.
outwrite.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide authentication services and account creation, and we do not use this data for any other purposes.
Email/Password Registration: When you create an account, we collect your email address, full name, and encrypted password.
Google OAuth: If you sign in with Google, we receive your email address, full name, and Google user ID. We only use this information for authentication and account creation - no other Google data is accessed or stored.
Profile Data: We store your user ID, email, full name, avatar URL, subscription tier, subscription status, and billing period information.
Generated Content: All content you create, including titles, content body, content type, SEO scores, readability scores, keyword density analysis, and workflow metadata.
Content Projects: Project names, descriptions, target keywords, target audience, content type, status, priority levels, and due dates.
Content Meta: Meta descriptions, meta keywords, and SEO optimization data for your content.
Performance Analytics: Content performance scores, recommendations, and optimization metrics.
Detailed Usage Tracking: We track every action you take on our platform including content generation events, content optimization requests, photo searches, meta description generation, and subscription-related events.
System Data: Browser type, device information, IP address, session duration, pages visited, and feature usage patterns.
Performance Monitoring: Error logs, load times, and technical performance metrics to improve our service.
Connection Details: WordPress site URLs, site names, authentication types, and usernames.
Encrypted Credentials: WordPress passwords and application passwords are encrypted using industry-standard encryption before storage.
Taxonomies: WordPress categories and tags that you use, along with usage frequency and last used dates.
Billing Information: Processed through Stripe, including customer ID, subscription status, billing cycles, and payment history.
Usage Limits: Monthly content generation counts and subscription tier limits to enforce plan restrictions.
Business Information: Company names, value propositions, brand voice, and brand guidelines you provide.
Marketing Data: Target personas, competitive messaging, content goals, and messaging frameworks.
Authentication Cookies: Session tokens and JWT authentication cookies to keep you logged in.
Preference Cookies: Theme preferences, language settings, and user interface customizations.
Analytics Cookies: Usage patterns and feature adoption metrics (anonymized where possible).
We do not sell, rent, or trade your personal data. However, to provide our services, we share certain data with trusted third-party providers under strict data processing agreements:
Hosts our database and provides authentication services. All your account, content, and usage data is stored on Supabase servers in the United States.
Processes payments and manages subscriptions. Receives billing information, email addresses, and payment details necessary for subscription management.
Your content prompts and generation requests are sent to AI providers to generate optimized content. No personal identification information is included in these requests.
Your image search queries are sent to Pexels to find relevant stock photos. No personal data is shared beyond the search terms you provide.
Alternative AI model provider for content generation. Receives content generation requests without personal identification data.
We may disclose your information when required by law or in good faith belief that such action is necessary to:
In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the new entity. You will be notified of any such change and your options regarding your data.
When you use our content generation features, your prompts and content inputs are sent to AI providers (OpenAI, Google AI, etc.) to generate responses. While we don't include personal identification data in these requests, please be mindful of including sensitive business information in your content prompts.
We retain your account information (profile, subscription data) as long as your account remains active or as needed to provide services, resolve disputes, and comply with legal obligations.
All generated content, content projects, performance analytics, and related data are retained while your account is active. Upon account deletion, this data is permanently removed within 30 days.
Usage events and analytics data may be retained for up to 2 years for service improvement and fraud prevention purposes. This data is anonymized after 6 months.
WordPress credentials and connection details are immediately deleted when you disconnect a WordPress site or delete your account.
Payment information is processed and retained by Stripe according to their data retention policies. We only store subscription status and billing period information, which is deleted upon account termination.
In some cases, we may be required to retain certain data for longer periods to comply with legal obligations, resolve disputes, or enforce our agreements.
We have established procedures for detecting, responding to, and notifying users of security incidents. In the event of a data breach affecting personal information, we will notify affected users within 72 hours and relevant authorities as required by law.
While we implement robust security measures, no system is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access due to circumstances beyond our reasonable control.
Your data is primarily processed and stored in the United States through our service providers:
For users outside the United States, including EU/EEA residents, we rely on:
For EU/EEA users, we comply with the General Data Protection Regulation (GDPR), including:
Through Your Account: Most data management can be done directly in your account dashboard, including profile updates, content deletion, and account termination.
Contact Us: For complex requests or questions, email us at support@outwrite.ai with "Privacy Rights Request" in the subject line.
Response Time: We will respond to requests within 30 days (or as required by applicable law).
Identity Verification: We may request additional information to verify your identity before processing requests.
Some rights may be limited by:
Our services are designed for business and professional use and are not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we have collected such information, please contact us immediately.
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
We do not sell or share personal information as defined by the CCPA. We do not use or disclose sensitive personal information for purposes other than those specified in the law.
We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements.
If you disagree with material changes to this policy, you may discontinue using our services and delete your account. Continued use after notification constitutes acceptance of the updated policy.
Email: support@outwrite.ai
Address: 40 Hummock Rd., Quincy, MA 02171
Business Hours: Monday-Friday, 9:00 AM - 5:00 PM EST
Privacy Requests: Include "Privacy Rights Request" in the email subject
Data Protection Questions: Include "Data Protection Inquiry" in the subject
Security Incidents: Include "Security Incident" in the subject for urgent matters
For EU/EEA residents, if you're not satisfied with our response to your privacy inquiry, you have the right to lodge a complaint with your local data protection authority.
We commit to responding to all privacy-related inquiries within 30 days of receipt. For urgent security matters, we aim to respond within 24-48 hours.
Last updated: January 15, 2025
Version: 2.0
Policy ID: OUTWRITE-PP-2025-001