Privacy Policy

Overview

WhatToWrite is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights. The service is intended for users 13 and older and is operated in the United States.

Note: This policy provides the framework for data handling. For jurisdiction-specific legal questions, consult an attorney.

What we collect

• Account data: Email address, display name (optional).
• Saved dates: Names of people, dates, and occasion types you add.
• Saved messages: Text of messages you save to your account.
• Generation inputs: Occasion, tone, length, and optional personal details you enter. Personal details are not logged in identifiable server logs.
• Technical data: IP address (for rate limiting), browser type, usage events.
• Consent records: When and what you agreed to.

How we use your data

• To provide the message generation and personalization service.
• To send reminder emails when you opt in (with unsubscribe in every email).
• To authenticate your account.
• To understand aggregate usage patterns via privacy-friendly analytics.

AI providers and third parties

Message generation uses external AI services. When you generate a message, your inputs are sent to our AI provider (Groq) for processing. We do not sell your data to any third party. We also use Resend for transactional email delivery.

Email communications

We only send emails when you explicitly opt in. Every reminder email includes a working unsubscribe link. We comply with CAN-SPAM: our postal address and an unsubscribe mechanism are included in all marketing emails.

Your rights

• Access: View your saved data in your account dashboard.
• Delete: Delete individual items or your entire account from account settings.
• Opt-out: Use the unsubscribe link in any email or turn off notifications in settings.
• California (CCPA): We do not sell or share personal information for behavioral advertising. Contact us to request what data we hold.

Children

WhatToWrite is not directed to children under 13. If you believe a child has provided data, contact us and we will delete it.

Security

We use HTTPS, secure httpOnly session cookies, and server-side API keys. We minimize data retention and do not log personal details from generation inputs in identifiable form.

Contact

Questions or data requests: privacy@whattowrite.com