Privacy Policy

Last updated: 14 September 2026

This Privacy Policy explains what personal information BlogWriting.Ai ("we", "us", "our") collects, how we use it, and the choices you have. It applies to everyone who creates an account or otherwise uses the Service.

1. What we collect

• Account information: your email address and authentication details, handled through Supabase Auth.
• Billing information: your subscription plan and billing history. Card details are collected and stored by Stripe directly — we don't see or store full card numbers.
• Content you provide: keywords and topics you research, writing samples, answers to the Service's questions about your business and experience, Writing Profiles, and the articles, images and briefs the Service generates for you.
• Connected-service credentials: if you connect a WordPress site or a social media account, the credentials or access tokens needed to publish on your behalf, stored encrypted.
• Usage information: basic technical data needed to operate and secure the Service (e.g. sign-in activity, error logs).

2. How we use it

• To provide the Service — running research, generating content, applying your Writing Profile and prior answers to future articles, and publishing where you've asked us to.
• To operate your account — authentication, billing, enforcing plan limits, and customer support.
• To improve the Service's reliability and quality.
• To meet legal obligations and enforce our Terms of Service.

We do not sell your personal information.

3. Who we share it with

We share information with the third-party providers that make the Service work, each acting under their own terms as a processor of the data we send them:

• Supabase — hosting, database, authentication.
• Stripe — payment processing and billing.
• Anthropic — AI text generation (your keywords, brief, writing samples and answers are sent to generate your content).
• OpenAI — AI image generation.
• Search data providers (e.g. SerpAPI, Tavily) — used to research the real search results your brief is based on.
• Google Cloud — application hosting.
• WordPress and social platforms you connect — only if and when you choose to connect them, to publish content on your behalf.

We do not otherwise sell or rent your information to third parties for their own marketing purposes.

4. Cookies and similar technology

The Service uses essential cookies and browser storage needed to keep you signed in and remember basic preferences. Stripe may set its own cookies during checkout. We don't currently run third-party advertising trackers on the app itself. [Placeholder — confirm final cookie usage and any consent-banner requirement with counsel, especially for EU/UK visitors.]

5. Data retention

We retain your account and content data for as long as your account is active, so the Service can keep working the way it's meant to (remembering your answers, your Writing Profiles, your history). If you delete your account, we'll delete or anonymise your personal data within a reasonable period, except where we need to retain limited records for legal, accounting, or fraud- prevention purposes. [Placeholder — exact retention periods to be confirmed.]

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Contact us using the details below to exercise these rights. [Placeholder — jurisdiction-specific rights (GDPR/CCPA/Australian Privacy Act, etc.) to be confirmed by counsel.]

7. Security

We use reasonable technical and organisational measures to protect your information, including encryption of connected-service credentials and industry-standard hosting practices. No system is completely secure, and we can't guarantee absolute security.

8. International transfers

Our service providers may process data outside your own country. Where that happens, we rely on those providers' own safeguards for cross-border data transfer. [Placeholder — confirm mechanism (SCCs, etc.) with counsel if relevant.]

9. Children

The Service is not directed at children and is not intended for use by anyone under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new "Last updated" date.

11. Contact

Questions about this policy or your data: [support/privacy contact email — to be confirmed].