Privacy Policy

WriteGap (“we”, “us”, “our”) operates the WriteGap service at writegap.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your data.

1. Who we are

WriteGap is a SaaS product built for indie founders and small SaaS teams. If you have any questions about this policy, contact us at hello@writegap.com.

2. What data we collect

Account data

When you sign up, we collect your email address and a password (hashed — we never store it in plain text). This is managed by Supabase Auth.

Site data

During onboarding you provide your site URL and optionally a product description. We store this to run your weekly keyword analysis.

Google Search Console data

If you connect Google Search Console (optional), we request read-only access to your GSC property. We use this data to identify quick-win keywords and track ranking improvements. We store an OAuth token in our database to refresh data weekly. You can revoke this access at any time from your Google account settings or from WriteGap settings.

Usage data

We collect basic usage logs (API requests, errors) for debugging purposes. We do not use third-party analytics trackers.

3. How we use your data

• To generate your weekly keyword brief and article drafts
• To send you weekly brief emails and scheduled article reminders (you can unsubscribe at any time)
• To manage your subscription and process payments via Lemon Squeezy
• To debug errors and improve the service

We do not sell your data. We do not use your data to train AI models.

4. Third-party services

WriteGap relies on the following third-party services to operate:

• Supabase — database and authentication (EU region)
• Anthropic (Claude) — AI generation of briefs and drafts
• DataForSEO — keyword volume and competitor data
• Google Search Console API — ranking data (only if you connect it)
• Resend — transactional email delivery
• Lemon Squeezy — subscription billing and payment processing
• Vercel — hosting and infrastructure
• Railway — pipeline infrastructure

Each of these providers has their own privacy policy and data processing terms.

5. Data storage and security

Your data is stored in Supabase (EU region). We use row-level security to ensure users can only access their own data. All connections are encrypted via HTTPS/TLS.

6. Data retention

We retain your data as long as your account is active. If you delete your account, we delete your site data, briefs, and drafts within 30 days. Email addresses may be retained for up to 90 days for legal and billing purposes.

7. Your rights

Regardless of where you are located, you have the following rights:

• Access — request a copy of all data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and data
• Portability — request your data in a machine-readable format
• Objection — object to processing for marketing purposes

To exercise any of these rights, email us at hello@writegap.com. We will respond within 30 days.

8. Cookies

WriteGap uses only essential cookies — a session cookie to keep you logged in. We do not use advertising or tracking cookies.

9. Children

WriteGap is not directed at children under 16. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. We will notify you by email if we make material changes. Continued use of the service after changes constitutes acceptance.

11. Contact

For any privacy-related questions: hello@writegap.com