1. Information We Collect
We collect information you provide directly, information generated automatically when you use the service, and information from third parties.
1.1 Account & Profile Data
When you register or update your account, we collect your name, email address, password (hashed), company name, and billing address.
1.2 Usage & Log Data
We automatically collect data about how you interact with Writnova: pages visited, features used, search queries entered, articles generated, keywords tracked, IP address, browser type, device identifiers, and timestamps.
1.3 Content You Provide
When you use Writnova's tools, you may submit website URLs, keyword lists, article briefs, and other content. We process this data solely to deliver the service to you.
1.4 Payment Data
Billing and payment information (card number, billing address) is collected and processed directly by our payment processor, Stripe, Inc. Writnova stores only a tokenized reference and the last four digits of your card. We never store full card numbers.
1.5 Communications
When you contact our support team or respond to emails, we retain the content of those messages to resolve your inquiry and improve the service.
1.6 Third-Party Integrations
If you connect Writnova to Google Search Console or other third-party services, we receive data from those services under the permissions you grant during the OAuth flow.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Writnova platform and its features.
- Process payments and manage your subscription.
- Send transactional emails (receipts, password resets, security alerts).
- Send product updates and marketing emails — you can opt out at any time.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
- Conduct analytics and research to understand usage patterns and improve product quality.
We do not use your content (articles, keywords, site data) to train AI models without your explicit consent.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where:
- Retention is required by applicable law (e.g., tax records for 7 years).
- Data is needed to resolve an open dispute or enforce our agreements.
- Anonymised or aggregated data that cannot be used to identify you — this may be retained indefinitely for product analytics.
6. Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted via TLS 1.2+.
- Data at rest is encrypted using AES-256.
- Passwords are hashed using bcrypt with a per-user salt.
- Access to production systems is restricted to authorised personnel using multi-factor authentication.
- We conduct regular security audits and vulnerability assessments.
No method of transmission over the Internet is 100% secure. If you suspect your account has been compromised, contact us immediately at [email protected].
7. Your Rights
Depending on your location, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Restriction: Request restriction of processing in certain circumstances.
- Withdrawal of consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. GDPR — EU/EEA Users
If you are located in the European Union or European Economic Area, Writnova acts as the data controller of your personal data. Our legal bases for processing are:
- Contract performance: Processing necessary to deliver the Writnova service you subscribed to.
- Legitimate interests: Security, fraud prevention, and product improvement — balanced against your rights.
- Consent: Marketing emails and optional analytics cookies.
- Legal obligation: Where required by EU or member-state law.
International transfers of data outside the EEA are made under the EU Standard Contractual Clauses (SCCs) or other approved mechanisms. You have the right to lodge a complaint with your local data protection authority.
9. CCPA — California Users
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Right to Know: What categories of personal information we collect and how we use it.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out: Opt out of the "sale" of personal information. Writnova does not sell personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email [email protected] with "CCPA Request" in the subject line.
10. Children's Privacy
Writnova is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at [email protected] and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a prominent notice in the application at least 14 days before the change takes effect. The updated policy will be posted at Writnova.com/privacy-policy with a revised effective date. Continued use of Writnova after the effective date constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:
For urgent security concerns, email [email protected].