Privacy policy

For your account, Writine is the controller. For the conversations in your workspace, you are the controller and we are the processor acting on your instructions.

In practice that means questions about your own account come to us, and questions from your website visitors go to you.

• your name and email address, to create and secure the account
• session records so you can see and revoke where you are signed in; we hold no password, because sign in uses an emailed link
• your workspace name, members and settings
• billing records such as plan, invoices and the payment provider reference; card numbers never reach us
• operational logs needed to run and secure the service, including IP addresses for rate limiting and abuse prevention

When someone opens the widget we store the messages they send, the files they attach, an email address if they leave one for an offline reply, and a coarse location derived from their IP address so you can see where a visitor is.

A visitor is identified by a credential their browser holds, not by an account. We do not build profiles of them across other websites, and we do not use advertising trackers.

To perform our contract with you, to meet legal obligations such as tax records, and for our legitimate interest in keeping the service secure and working. Where we rely on consent, you can withdraw it.

A small number of providers, each doing one job: hosting and managed database in the cloud region we operate in, email delivery for verification and notification messages, and payment processing.

They act on our instructions under contract. We do not sell personal data, and we do not share it for advertising.

• account data, while your account exists
• conversations, until you delete them or delete the workspace; a retention window may remove resolved conversations sooner if you set one
• billing records, as long as tax law requires
• operational logs, for a short period, then discarded

Deleting a workspace deletes its conversations and cannot be undone.

You can ask for a copy of your data, correct it, delete it, restrict or object to processing, and ask for it in a portable form. Write to privacy@writine.com and we will respond within one month.

If you are in the UK or EU and think we have handled your data badly, you can complain to your data protection authority. We would rather you told us first.

Data is encrypted in transit. Sign in uses an emailed single-use link rather than a password. Access to production is limited to the people who need it, and each service reaches only its own data.

Privacy questions and requests go to privacy@writine.com.