Privacy Policy
Plain answers about what data the Service touches, why, and the controls you have.
Documents never stored
Encrypted in transit
Self-serve data export & deletionIn short
- Your documents are never stored — they are processed in memory and returned to you.
- We record word counts, not words, to enforce daily limits.
- Pro requests use only zero-data-retention AI providers, and Pro is completely ad-free.
- We never sell your data and never use your writing to train AI models.
- You can download or delete everything yourself from your Account page.
Overview
AI Writing Assistant ("we", "us", or the "Service") is an online collection of AI‑powered writing tools available at aiwritingassistant.net. This Privacy Policy explains what information the Service receives when you use it, why that information is needed, who it is shared with, how long it is kept, and the choices and rights you have.
This policy applies to everything on aiwritingassistant.net — the writing tools, accounts, the help pages, and paid subscriptions. If you have any question about it, email us at info@aiwritingassistant.net.
Your writing content
The text you put into a writing tool is the most sensitive thing you share with us, so it gets the strictest treatment:
- Your documents are never stored on our servers. When you run an AI‑powered tool, your text and the settings you chose are sent over an encrypted connection to our application server, processed in memory to produce the result, and returned to your browser. We do not keep a copy of your document.
- AI processing uses external model providers. To generate results, our server forwards your text to third‑party AI model providers through the OpenRouter routing service. On the Pro plan, requests are restricted to providers with zero‑data‑retention policies, meaning those providers state they do not store or train on the content they process.
- A short‑lived correction cache. The Grammar Checker keeps a short‑lived cache of correction fragments keyed by a cryptographic hash, so paragraphs you have not changed are not sent for processing again. The cache does not contain your document as a whole and expires automatically.
- Only word counts are recorded. To enforce daily plan limits we record how many words a request contained — not the words themselves.
- Word Counter is fully local. It runs entirely in your browser and never sends its text anywhere.
Please don't submit passwords, payment card numbers, government identifiers, health records, classified material, or content you are not authorized to process. The Service is not designed for regulated or highly sensitive data.
Information we collect
Apart from the writing content described above, the Service handles these categories of information:
| Category | What it includes | When |
|---|---|---|
| Account data | Name, email address, a cryptographic hash of your password (never the password itself), email verification state, avatar color, theme preference, email‑updates preference, plan, and plan expiry date. | When you create an account |
| Sign‑in with Google | If you choose Google sign‑in, Google shares your name, email address, and profile picture with us to create or access your account. We do not receive your Google password. | Optional |
| Usage & operational data | Daily word and request totals, the tool used, timestamps, processing route and latency, failure counts, a pseudonymous session identifier, and — for guests — a privacy‑preserving hash of your IP address used only to enforce free limits. Telemetry never includes your submitted text. | When you use the tools |
| Payment data | Paid checkout is operated by a dedicated payment provider acting as the seller of record. We receive your plan, payment status, and subscription period — never your full card number. See the Billing & Refunds policy. | If you buy Pro |
| Support messages | Emails you send to info@aiwritingassistant.net and our replies. | If you contact us |
| Cookies & local storage | Essential session cookies and local preferences. Detailed in the Cookie Policy. | While browsing |
How we use information
- To provide the Service — process your text, return results, keep you signed in, and remember preferences like dark mode.
- To enforce plan limits fairly — daily word totals, request counts, and rate limits, using word counts and (for guests) an IP hash.
- To keep accounts secure — verification emails, password reset links, sign‑in throttling after repeated failures, and session management.
- To operate paid plans — activate Pro after verified payment and return your account to a free plan when a subscription ends.
- To respond to support requests.
- To keep the Service reliable — aggregate, text‑free operational metrics such as error rates and latency.
- To show advertising on free plans — see the Advertising section below. The Pro plan is completely ad‑free.
- To comply with law where we are legally required to.
We do not sell your personal information, and we do not use your documents to train AI models.
Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (providing the tools, accounts, and subscriptions you request), legitimate interests (service security, abuse prevention, fair limit enforcement, and aggregate reliability metrics), consent (optional email updates, and advertising cookies where consent is required), and legal obligation (records we must keep by law).
Third parties we work with
We share only what each provider needs to do its job:
| Provider | Purpose | What they process |
|---|---|---|
| AI model providers (via OpenRouter) | Generating tool results | The text of the request being processed. Pro requests use only zero‑data‑retention providers. |
| Payment provider (seller of record) | Checkout, invoicing, taxes, refunds for Pro | Billing details you enter at checkout; we never see full card numbers. |
| Optional Google sign‑in; advertising (AdSense) shown on free plans only | Sign‑in: your basic Google profile. Advertising: cookie‑based ad data as described in the Cookie Policy. | |
| Hosting provider | Running the website and application server | The infrastructure the Service runs on, including server logs. |
Some providers may process data outside your own country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses offered by the provider.
How long we keep data
- Documents: not stored — processed in memory only.
- Grammar correction cache: short‑lived and keyed by hash; expires automatically.
- Daily usage counters: reset each calendar day; aggregate operational records are kept only as long as needed for security, troubleshooting, abuse prevention, and legal obligations.
- Account data: kept while your account exists. Deleting your account removes your account record and active sessions immediately.
- Support emails: kept as long as needed to handle the request and for a reasonable period afterwards.
Security
We protect the Service with encrypted transport (HTTPS with HSTS), hashed passwords and one‑time tokens, HttpOnly and SameSite‑protected session cookies, sign‑in throttling after repeated failed attempts, single‑use password‑reset links that expire after one hour, restricted administrative access, request rate limits, and a content security policy in the browser. No internet service can promise perfect security, but we design the Service so that the most sensitive thing — your writing — is not stored at all.
Your rights and controls
You can exercise the most important rights yourself, instantly, from your Account page:
- Access / portability: download a copy of your account data as a file.
- Correction: update your name and preferences at any time.
- Deletion: permanently delete your account, which removes your account record and signs out all sessions.
Depending on where you live, you may also have rights to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority. California residents: we do not sell or share personal information as defined by the CCPA/CPRA. To exercise any right, or ask a question, email info@aiwritingassistant.net — we respond to verified requests within the timelines required by applicable law.
Advertising
To keep the free plans free, pages may show advertising served by Google AdSense — but only for guests and free accounts. Pro subscribers never see ads and no advertising code loads for them. Where the law requires it, ads are shown only with your consent, and Google's use of advertising cookies is described in our Cookie Policy and Google's own privacy documentation.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If the law of your country sets a higher minimum age for consenting to online services, that higher age applies. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy as the Service evolves. The "Last updated" date at the top identifies the current version, and meaningful changes will be reflected there before they take effect. Continued use of the Service after a change means the updated policy applies.
Contact
Privacy questions, rights requests, or anything unclear: info@aiwritingassistant.net. We're glad to explain anything in this policy in plain language.