Privacy Policy

Last updated October 10, 2026

This Privacy Policy describes how Pixel Port LLC, doing business as PureWrite ("PureWrite", "we", "our" or "us"), collects, uses, stores, and shares information when you use our websites, applications, APIs, and other services (collectively, the "Services"). Pixel Port LLC is the controller of the personal information described here.

Information We Collect

Account Information: When you create an account we collect your email address and, if you sign up with a password, a securely hashed version of that password (we never store the password itself). If you sign in with Google, we receive your name, email address, and profile picture from Google. If you sign in with an emailed link, we store a short-lived, single-use sign-in token.

Text You Submit (Signed-In Users): We do not store the text you submit for rewriting, humanizing, or AI detection, or the rewritten text we return. Your text is sent to our AI providers to produce the result and is discarded once the result is delivered to you. What we do keep:

• History: for paid accounts, run details only: the date and time, the mode, tone, and style you selected, word counts in and out, AI-detection scores, and which AI provider and model produced the result. History does not contain your submitted or rewritten text. Earlier versions of PureWrite saved the text of each run in history; that saved text is being deleted from our database.
• Documents: if you use the document workspace, each saved version of a document, including the full text before and after each rewrite and the rewrite settings used.
• Style Settings: any writing preferences and example text you save to personalize results.

The items above are stored in our database until you delete them or delete your account (see "Deleting Your Content and Account" below).

Free Tools Without an Account (Guests): If you use the AI detector or a free writing tool without signing in, your text is sent to our AI providers to produce the result and is not stored on our servers. To let you pick up where you left off after you sign up, your browser may keep a copy of your draft in its local storage on your device; you can clear it at any time by clearing your browser's site data. To prevent abuse, we keep rate-limit counters derived from a one-way hash of your IP address and the page you used.

Payment Information: Payments are processed by Stripe. Your card details are entered directly with Stripe and never reach our servers. We receive and store your Stripe customer ID, purchase and subscription records (plan, amount, status, dates, invoice numbers and links), and billing details Stripe provides for invoices.

Usage, Device, and Security Data: When you sign up, sign in, make a purchase, or use our tools while signed in, we keep a server-side access log containing your user ID, email address, Stripe customer ID, the action taken, the number of words processed, your IP address, browser user agent, approximate country, and a timestamp. This log does not contain the text you submitted. We use it to prevent fraud and abuse and to resolve billing disputes and chargebacks.

Offer and Marketing Sign-Ups: If you give us your email address through a discount or offer pop-up, we store that email address along with the offer code, the page or source where you signed up, your IP address, browser user agent, referrer, and campaign (UTM) parameters, and whether you went on to start or complete a checkout.

Communications: If you contact us (for example through our contact form or by email), we receive your name, email address, and the contents of your message, including any attachments or other information you choose to provide.

Analytics Data: We use PostHog to understand how the Services are used. This includes pages viewed, product events (such as starting a rewrite or viewing pricing), approximate location, browser and device information, and a pseudonymous device identifier. When you are signed in, we link these events to your account ID, email address, and name. With your consent, we may also record sessions (see "Cookies, Local Storage, and Consent" below).

How We Use Your Information

Information collected is used to:

• Operate, provide, maintain, and secure our Services, including generating the rewrites and detection results you request
• Create and manage your account and show you your run history and documents
• Process transactions, manage subscriptions and word balances, and issue invoices
• Communicate with you about your account, purchases, and our Services
• Send marketing emails, which you can unsubscribe from at any time
• Provide customer support
• Understand and improve how the Services are used
• Prevent fraud, abuse, and automated misuse, and resolve billing disputes and chargebacks
• Ensure compliance with our Terms of Service and applicable laws

AI Providers and Model Training

Text you submit for rewriting, humanizing, or AI detection is sent to one of our third-party AI model providers (OpenAI, Anthropic, or Google Gemini) to generate the result. We use these providers under their commercial API terms, which do not permit them to use your content to train their models. We do not use your text to train AI models either.

Sub-Processors and Information Sharing

We do not sell your personal information. We share it only with the service providers below, who process it on our behalf to deliver the Services, and in the limited cases described after the table.

We do not use advertising pixels or share your personal information with third parties for cross-context behavioral advertising.

As Required By Law: We may share information to:

• Satisfy any applicable legal process, law, governmental request, or regulation
• Investigate potential violations of this Privacy Policy and our Terms of Service
• Detect technical issues and prevent fraud or security issues, including providing evidence to our payment processor in billing disputes
• Protect the rights and safety of our users

Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the successor entity, which will remain bound by this Privacy Policy for the information transferred.

Cookies, Local Storage, and Consent

We use the following cookies and browser storage:

• Sign-in session cookie (next-auth.session-token and related security cookies): keeps you signed in for up to 30 days and protects sign-in forms against forgery. Strictly necessary.
• pw_country: stores your country code, derived from your IP address, for up to 30 days so we can display regional pricing. It is used for display only.
• pw_consent (cookie and local storage): remembers your choice in our consent banner for about 6 months, after which we ask again.
• PostHog: stores a pseudonymous device identifier and analytics settings in your browser so we can count visits and understand product usage. After you accept analytics this is kept in local storage; before you make a choice it is kept only for the current tab (or, where consent is required first, only in memory).
• Cloudflare Turnstile: when you sign up, sign in, use the free trial, or contact us, Cloudflare runs a bot check that may set its own cookies or use browser signals to tell humans from automated traffic.
• Stripe: Stripe's checkout pages and scripts may set their own cookies for payment processing and fraud prevention.
• Local preferences: your browser's local storage keeps small items such as a draft you started before signing in, and whether you dismissed a banner or pop-up.

Consent: Session recording only starts after you accept it in our consent banner. If you visit from the European Economic Area, the United Kingdom, or Switzerland, or if we cannot determine your country, we do not run analytics or session recording until you give consent. Elsewhere, basic product analytics (without session recording) may run until you decline. You can change your choice at any time from the consent banner or by clearing your browser's site data. In session recordings, all text on the page, including anything you type or paste, and all form inputs are masked, so the content you write is not captured.

Emails

Transactional emails are messages we need to send to provide the Services, such as sign-in links, purchase confirmations, and account, billing, and security notices. You cannot opt out of these while you have an account.

Marketing emails include tips, reminders about an offer you signed up for or a checkout you did not finish, and promotions. Every marketing email includes an unsubscribe link, and supporting email clients also show a one-click unsubscribe button. Unsubscribing takes effect immediately, does not require you to sign in, and does not affect transactional emails. You can also opt out by emailing [email protected].

Legal Basis for Processing Personal Information

If you are in the EEA, the UK, or Switzerland, we rely on the following legal bases:

• Contract: to create your account, process the text you submit, keep your run history, and process payments
• Legitimate interests: to secure the Services, prevent fraud and abuse, resolve billing disputes, and send marketing to existing customers about similar services, where those interests are not overridden by your rights
• Consent: for analytics and session recording, and for marketing where consent is required; you can withdraw it at any time
• Legal obligation: to keep records required by tax, accounting, and other laws

Security

We use technical, administrative, and physical safeguards designed to protect the information we collect, including encrypted connections (HTTPS), hashed passwords, access controls, and bot protection. However, no security system is impenetrable, and we cannot guarantee absolute security.

Data Retention

• Account information, run history, documents, and style settings: kept until you delete them or delete your account.
• Purchase and subscription records: kept in our database while your account exists. Stripe keeps its own payment records under its own legal obligations.
• Access and security logs: the access log described above is kept separately from your account and is not removed when you delete your account. It is retained for as long as needed for fraud prevention, resolving billing disputes and chargebacks, and meeting legal obligations.
• Offer sign-ups and email records: emails collected through offer pop-ups and records of reminder emails we sent are retained until you ask us to delete them, so that we can honor unsubscribe requests and avoid duplicate messages.
• Analytics data: retained by PostHog according to our account's retention settings.
• Text you submit and rewritten results: not stored on our servers, whether you are a guest or signed in (except documents and style example text you choose to save, as described above).

Deleting Your Content and Account

Individual history items: you can delete any run from your History page. If you cannot access the History page, email us and we will delete it for you.

Your whole account: you can delete your account from your dashboard settings. Deleting your account cancels any active subscription with Stripe and permanently deletes your account, history, documents, style settings, purchase records, usage records, and sign-in sessions from our database. The access and security log described above is kept, as explained under "Data Retention".

Your Rights

Access and Update: Registered users can sign in to view their run history, documents, and profile information.

EEA, UK, and Swiss Residents (GDPR): you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion of your personal information
• Receive your personal information in a portable, machine-readable format
• Object to processing based on legitimate interests, including direct marketing, and request restriction of processing
• Withdraw consent at any time, without affecting processing that happened before you withdrew it
• Lodge a complaint with your local data protection supervisory authority

California Residents (CCPA/CPRA): you have the right to know what personal information we collect, use, and disclose; to request deletion of your personal information; to correct inaccurate personal information; and not to be discriminated against for exercising these rights. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit. The categories of personal information we collect and the providers we disclose them to are described in this policy.

To exercise any of these rights, email us at [email protected] from the email address on your account. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.

International Data Transfers

We are based in the United States, and our Services and most of our providers operate in the United States. If you use the Services from outside the United States, your personal information will be transferred to and processed in the United States, which may have different data protection laws from your country. Where we transfer personal information from the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) or other lawful transfer mechanisms offered by our providers.

Minors

Our Services are intended for users aged 18 or older. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has submitted personal information to us, please contact us at [email protected] and we will delete it.

Third-Party Services

Our Services link to and integrate with third-party services, such as Stripe checkout and Google sign-in. Their handling of your information is governed by their own privacy policies.

Privacy Policy Changes

We may modify this Privacy Policy periodically to reflect changes in our practices or applicable laws. Material changes will be communicated via email or through a notice when you use our Services.

The current version of this Privacy Policy is always available at: https://purewrite.io/privacy

Last Updated: October 8, 2026