Privacy Policy

Last updated: [DATE]

📝 Template — review before publishing. This is a solid starting point written to reflect how EchoWrite actually works, but it isn't legal advice. Have a lawyer confirm it fits your business and jurisdiction, and fill in every [bracketed] field.

This policy explains what EchoWrite ("we", "us", operated by [your legal entity], [address/country]) collects, why, and what choices you have. It applies to echowrite.net and the EchoWrite app.

What we collect

Account details — your email address, and (if you use Google or Apple sign-in) the basic profile info those providers return.
Your content — the writing samples you use to train a voice, and the drafts you submit to be rewritten, along with the rewrites we produce.
Usage data — your plan, rewrite counts, saved voices and rewrite history, plus standard technical logs (IP, browser, timestamps).
Payment data — handled by our payment provider (Lemon Squeezy). We don't see or store your full card details.

How we use it

To provide the core service — building your voice fingerprint and rewriting your drafts.
To operate your account, enforce plan limits, and process payments.
To keep the service secure and to improve it.
To contact you about your account or important service changes.

AI processing

To generate rewrites, the samples and drafts you submit are sent to our AI provider, Anthropic, via its API. Under Anthropic's commercial API terms, this content is not used to train their models. We use it only to return your result and to save it to your history so you can find it again.

Who we share it with

We don't sell your data. We use a small set of processors to run the service:

Supabase — database and authentication.
Cloudflare — hosting and delivery.
Anthropic — AI rewriting.
Lemon Squeezy — payments.

Cookies & local storage

We use essential cookies/local storage to keep you signed in and remember your session. We don't use them for third-party advertising.

Retention & deletion

We keep your account content while your account is active. You can delete individual voices and rewrites in the app at any time. To delete your account and associated data, email us at [support email] and we'll action it within [X] days, subject to any records we must keep by law.

Your rights

Depending on where you live (including under the Australian Privacy Principles and, if applicable, the GDPR), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us to exercise these rights.

Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we take reasonable steps to safeguard your information.

Children

EchoWrite isn't intended for anyone under [16/18]. We don't knowingly collect data from children.

Changes

We may update this policy; we'll change the date above and, for material changes, notify you.

Contact

Questions? Email [support email] or see our contact page.