Privacy policy

• Account information: your email and authentication details (if you set a password, we store only a one-way hash of it, never the password itself), and an optional display name.
• Project content: the voice samples, source material, briefs, positioning answers, and drafts you create.
• Usage data: counts of pieces generated, plan and billing status, and basic technical and log data such as IP address, browser type, and timestamps, used to run and secure the service.
• Payment information: handled by our payment processor. We do not store full card numbers.

We do not ask for and do not want sensitive personal data; please do not paste it into your drafts or sources.

• Provide and operate the service, including generating and revising your drafts.
• Process payments and manage your subscription.
• Provide support and send service messages, such as sign-in links, receipts, and limit notices.
• Secure the service and prevent abuse.
• Improve the service using de-identified, aggregated usage data, never your content in identifiable form.
• Comply with legal obligations.

To generate and revise drafts, your project content is sent to Anthropic, the provider of the AI models that power the service, and processed to return your draft. Under Anthropic’s commercial API terms, this content is not used to train their models. We do not use your content or output to train any model, and we do not sell it.

Spelling, grammar, and style checking runs entirely inside your browser. That text is never sent to a server for checking; it stays on your device.

We do not sell your data. We do not use your writing to train models. We do not share your drafts with other users. We do not publish or claim ownership of what you write.

We use cookies and local storage to keep your session and your work, and PostHog for product analytics, to understand which features are used and where people get stuck. We track behavior (pages visited, features used), never the content you write: screen recording is turned off, and your drafts and briefs are never sent to analytics. We do not run third-party advertising or behavioral retargeting. To opt out, enable “Do Not Track” in your browser, which we honor, or email hello@unwrite.ai.

When you are signed in, your projects and voice profiles are stored in a hosted database (Neon, a managed Postgres service in a United States region) so you can sign in from anywhere, and are also cached in your browser’s local storage for speed. If you use unwrite without signing in, your work lives only in your browser’s local storage on that device until you create an account, at which point it is moved to your account.

We use a small set of vendors to operate, each receiving only what it needs to do its job:

• Anthropic, for AI processing.
• A cloud host (Vercel), for running the application.
• A database provider (Neon), for stored projects and account data.
• A payment processor (Stripe), for subscriptions.
• An email provider (Resend), for sign-in links and receipts.
• An email-marketing provider (MailerLite), for the product-update and tips emails. Your email address is sent there to keep that list accurate, including when you turn those emails off or change plan, so it can hold a record that you are not to be emailed. Deleting your account erases it there.
• An authentication provider (Google), for signing in with a Google account.
• A rate-limiting service (Upstash), for protecting the service from abuse.
• Product analytics (PostHog), for understanding feature usage. Behavior only, never your writing.
• Error monitoring (Sentry), for capturing and fixing crashes.
• Team messaging (Slack), for routing support messages and waitlist signups to our team in real time. Only what you put in those forms; never your writing.

We share personal data only with the service providers above, when required by law or to protect rights and safety, and in connection with a business transfer such as a merger or acquisition, in which case this policy continues to apply. We never sell your personal data.

We keep your information for as long as your account is active or as needed to provide the service, then delete or de-identify it, except where the law requires longer retention, for example billing records.

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international data transfers.

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, delete, or restrict the use of your personal data, and to object to certain processing. To exercise any of these, email hello@unwrite.ai.

EU and UK (GDPR): we process personal data on the lawful bases of performing our contract with you, your consent, our legitimate interests in operating and securing the service, and compliance with law. You may withdraw consent and lodge a complaint with your supervisory authority.

California (CCPA/CPRA): we do not sell or share your personal data as those terms are defined. You have the right to know what we collect, to delete it, to correct it, and not to be treated differently for exercising these rights.

unwrite is not directed to children under 13, or the minimum age in your country, and we do not knowingly collect their data.

If this policy changes in a way that affects how your work is handled, we will update the date above and, for material changes, notify account holders by email.

Questions about this policy, or a request to access, correct, export, or delete your data, can be sent to hello@unwrite.ai, or by mail to:

unwrite, Inc.
1111 Oakfield Dr, Ste 115 PMB 2880
Brandon, FL 33511
ATTN: C. Orlando