Updated January 14, 2026

Privacy Policy

This policy explains how Spinwrite collects, uses, and protects your information when you humanize drafts with our service.

1. Information we collect

We collect account details you provide, usage analytics, and summaries of the text you humanize. Draft content is encrypted in transit and stored only to provide history, unless you choose to delete it.

2. Google user data

When you sign in with Google, we access your email address and basic profile information (name and profile picture if available) solely for authentication and account creation. We do not access your Google Drive, Gmail, contacts, calendar, or any other Google services. Your Google data is used only to create and identify your Spinwrite account.

3. How we use information

We use your data to: (a) authenticate your identity and manage your account, (b) process humanization requests and store your history, (c) track usage against your subscription limits, (d) communicate product updates and support responses, and (e) monitor for abuse and ensure service quality. We never sell your information to third parties.

4. Data sharing

We share data only with service providers essential to operating Spinwrite: Supabase (authentication and database hosting), Polar (payment processing), and OpenAI (text humanization). These providers receive only the minimum data required for their specific function. We do not share, sell, or transfer your Google user data or humanization content to any other third parties for advertising, analytics, or any unrelated purposes.

5. Data storage and protection

Your data is stored on secure servers provided by Supabase with encryption at rest (AES-256) and in transit (TLS 1.2+). Access to production systems is restricted to authorized personnel only, following the principle of least privilege. We conduct regular security reviews and maintain audit logs of data access. Your humanization history and Google account information are protected by row-level security policies ensuring only you can access your own data.

6. Cookies

Essential cookies keep you signed in and secure. Optional analytics cookies are disabled by default and only enabled with your consent.

7. Data retention and deletion

Humanization history is retained for as long as your subscription is active. You can delete individual entries at any time from your account dashboard. To request complete deletion of your account and all associated data (including any Google-derived information), contact privacy@spinwrite.app. Upon account deletion, we remove all your data from our active systems within 30 days. Backup copies may persist for up to 90 days before automatic purging.

8. Your rights

You have the right to: (a) access a copy of your personal data, (b) correct inaccurate information, (c) delete your data and account, and (d) export your humanization history. To exercise these rights, contact privacy@spinwrite.app. We respond within 30 days subject to applicable laws. You may also revoke Spinwrite's access to your Google account at any time via your Google Account permissions settings at https://myaccount.google.com/permissions.

9. Security

Spinwrite encrypts data in transit and at rest, enforces least-privilege access, and runs regular security reviews. No method of transmission is 100% secure, so please use strong passwords.

10. International transfers

If data leaves your region, we rely on standard contractual clauses or equivalent safeguards to protect it.

11. Children

Spinwrite is not directed at individuals under 16 and we do not knowingly collect their data. If you believe a minor has provided information, contact us for removal.

12. Updates

We may revise this policy to reflect new features or legal requirements. Material changes will be notified via email or in-app notice.