eWriting.net

Privacy Policy

Last updated 12 October 2026

Operator details are being finalised. Until they are published here, contact us through the support form in your account.

What we collect

  • Account data: your name, email address and a password hash (scrypt). We never store your password itself.
  • Website connections: the URL of each website you connect and the credential you give us for it (a WordPress Application Password, a Joomla API token, or Google authorization tokens for Blogger and Search Console). These are encrypted with AES-256-GCM before they are stored and are only decrypted on our server to talk to your website. They are never sent to your browser.
  • Your content: articles, drafts, revisions, SEO fields, images you upload or generate, and copies of your websites' posts, categories and tags that we sync so the product can work (internal links, audits, duplicate prevention).
  • Activity records: what was published, changed or attempted on your websites and by whom (including the AI agent and automations), kept as an audit log.
  • Search data: if you connect Google Search Console, the clicks, impressions, CTR and positions Google reports for your site.
  • Technical data: IP address and browser details of sign-ins (to show your sessions and limit abuse), and error reports with secrets removed.

What we use it for

Only to provide the service you asked for: writing and editing content, connecting to and changing your websites on your instruction or under rules you set, sending you service emails (password resets, invitations, alerts), billing, security and support. We do not sell data, and we do not use your content to train AI models.

Service providers

We use these providers to run the service. They process data on our behalf, only as needed for each function:

  • Hetzner Online (Germany) — servers and backups.
  • Cloudflare — network delivery and protection of the website.
  • Anthropic — AI writing and the AI agent. Article text and instructions you submit are sent to Anthropic's API to generate responses.
  • Replicate — AI image generation (FLUX). The image description is sent; generated images are stored by us.
  • Stripe — payments. Card details go directly to Stripe; we never see or store them.
  • Google — only if you connect Blogger or Search Console.
  • Your email provider for service emails.

Cookies

We use one strictly necessary cookie to keep you signed in, and one to remember which workspace you last used. We do not use advertising or analytics cookies.

Retention

We keep your data while your account exists. When you delete your account, your workspaces' data is deleted from the live database; encrypted backups roll off within 14 days (daily) and 8 weeks (weekly). Disconnecting a website deletes its stored credential immediately and, where the platform allows it, revokes it.

Your rights

You can download a copy of your data and delete your account from Settings at any time. You can also ask us to access, correct or delete personal data, or object to processing, through the support form. If you are in the EU or UK you may complain to your data protection authority.

Security

Credentials are encrypted at rest, passwords are hashed, every request is checked against your workspace membership and role, and backups are encrypted before they leave the server. No system is perfectly secure; we will tell affected users promptly if a breach affects their data.

Changes

We will post changes here and, for significant ones, notify account owners by email.