Privacy Policy | Writesonic

Privacy Policy

Last updated May 13, 2026

1. Overview

This Privacy Policy explains how Writesonic, Inc. ("Writesonic", "we", "us", "our") collects, uses, shares, and protects personal information in connection with our products, services, and websites, including the Writesonic AI Search Visibility Platform, writesonic.com, and any other Writesonic products and domains we operate (together, the "Services").

This Policy applies to:

This Policy does not govern personal information that our business customers ("Customers") submit to the Services as Inputs or content they manage through the Services. For that personal information, the Customer is the controller and Writesonic acts as a processor under our Data Processing Agreement. As between Writesonic and the Customer, the Customer's own privacy notice governs the Customer's collection and use of personal information relating to its end users.

By using the Services, you acknowledge that your personal information will be handled as described in this Privacy Policy. If you do not agree with the practices described in this Policy, please do not use the Services.

2. Personal Information We Collect

We collect personal information in three ways: (a) information you provide directly, (b) information collected automatically through your use of the Services, and (c) information from third parties.

Category Examples Source Why we collect it
Account information Name, work email, password, company name, role, country You, when you sign up or are added by an admin Create and operate your account; authenticate; provide support
Billing information Billing contact, billing address, last 4 of card, invoice history; full card data is held by our payment processor and not by us You, your finance team, our payment processor Charge fees; remit taxes; meet accounting obligations
Profile and preferences Preferences, settings, in-product configurations, brand and competitor inputs You and your Authorized Users Provide and personalize the Services
Inputs and Outputs Prompts, queries, brand configurations, agent instructions, tracked URLs, generated text, images, audio, video You and your Authorized Users Provide the AI Features (see §4)
Usage and device data IP address, device identifiers, browser type and version, OS, page-view and click events, referrers, session duration, error logs Automatic, via our Services and analytics tools Operate, debug, and secure the Services; analytics; product improvement
Cookies and similar tech Session cookies, preference cookies, security cookies, analytics cookies, and (with consent) advertising cookies Automatic, see §11 Authentication, preferences, security, analytics, and (with consent) advertising
Communication content Support tickets, sales correspondence, recordings of meetings (where you consent), survey responses You Respond to inquiries; provide support; train our support team
Marketing information Form submissions, content downloads, event registrations, newsletter subscriptions, contact data from data providers You and from licensed B2B data providers Send communications you've signed up for; account-based marketing
Recruiting information CV, work history, references, interview notes You and from recruiters or third-party tools Evaluate applications
Third-party integration data OAuth tokens and metadata from integrations you enable (for example, Google services, CMSs, ad platforms, AI platforms) The third-party service, with your authorization Provide the integration

The Services are not intended for the collection or processing of special-category personal data (as defined under applicable data protection laws), including information relating to health, biometrics, race or ethnicity, political opinions, religious or philosophical beliefs, trade union membership, sex life, or sexual orientation, unless expressly agreed by Writesonic in writing. You should not submit such information, or government-issued identification numbers or similar sensitive information, through the Services without Writesonic's prior written approval.

3. How We Use Information

We use personal information to:

Where we rely on legal bases under the GDPR or UK GDPR, we rely on:

You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. AI Features and Your Data

The Services include AI Features that use machine-learning and generative-AI models, including (a) models developed or fine-tuned by Writesonic, and (b) third-party foundation models accessed through providers that include OpenAI, Anthropic, Microsoft Azure OpenAI Service, Microsoft Azure for Anthropic models, custom models hosted by Writesonic on Microsoft Azure and Amazon Web Services, Stability AI, OpenRouter, Google Cloud Platform, and other model providers selected from time to time depending on the relevant use case (collectively, "Model Providers"). The applicable Model Provider for a given AI Feature may vary based on capability, performance, cost, region, and availability. We host the Services on Microsoft Azure. We may update or change our hosting and infrastructure providers from time to time, and will update this Privacy Policy or provide notice where required by applicable law.

4.1 What we send to Model Providers

When you use AI Features, we send Inputs to the relevant Model Provider, receive Outputs, and return them to you in the Services. We may also send a limited amount of operational metadata (for example, a request identifier or model parameters).

4.2 What Model Providers do with that data

Each Model Provider has its own data-handling terms. The summary below reflects the providers' published policies and the configurations we use.

Provider Training on customer data Default retention Configuration we use
OpenAI (direct API) Not used to train OpenAI models. See OpenAI API data controls. Up to 30 days for safety and abuse monitoring under the standard API. Where eligible and approved, we use OpenAI's Zero Data Retention (ZDR) on supported endpoints.
Anthropic (direct API) "Anthropic may not train models on Customer Content from Services." See Anthropic Commercial Terms and Anthropic DPA. Trust-and-safety logs may be retained for a limited period. We use Anthropic's commercial API under their Commercial Terms and DPA.
Microsoft Azure OpenAI Service Not used to train OpenAI's or Microsoft's models. See Data, privacy, and security for Azure Direct Models in Microsoft Foundry. Up to 30 days of abuse-monitoring retention by default, with content logging. Where we are eligible, we use Microsoft's Modified Abuse Monitoring to disable content logging (verifiable as ContentLogging=FALSE).
Microsoft Azure for Anthropic models (Microsoft Foundry) "By default, Anthropic will not use your inputs or outputs from commercial products to train their models." See Data, privacy, and security for use of Anthropic Claude models in Microsoft Foundry. For these deployments, Anthropic (not Microsoft) is the processor. Per Anthropic's terms; Anthropic Claude on Microsoft Foundry is not covered by the Azure OpenAI Zero Data Retention program. We rely on Anthropic's Commercial Terms and DPA for these deployments.
Custom models on Microsoft Azure or AWS We control these deployments; customer data is not used to train any model. Per our internal retention schedule. Tenant-isolated deployments under Writesonic's cloud accounts.
Stability AI, OpenRouter, Google Cloud, and other providers We select providers and configurations that prohibit training on customer data and that meet our security and privacy requirements. Per the relevant provider's policy. We review provider terms before onboarding; configurations vary by use case.

4.3 Use of Customer Data to train Writesonic models

We do not use Customer Data to train or fine-tune any general-purpose, foundation, or large-language model offered by Writesonic or by any Model Provider. However, we may use de-identified Inputs, Outputs, and Usage Data, that does not identify any Customer or any individual, to operate, secure, debug, evaluate, and improve the Services, including the quality and safety of AI Features.

4.4 Free trials and free tier

The no-training commitment in §4.3 applies equally to Inputs, Outputs, and Usage Data generated under any Trial or free tier. We do not sell that data and we do not use it to train or fine-tune any general-purpose, foundation, or large-language model. We may use de-identified Trial data for the Service-improvement purposes set out in §4.3.

4.5 What you should not submit

You should not submit Inputs unless you have all necessary rights, consents, and permissions to do so, or if such Inputs violate applicable law, this Privacy Policy, our Terms of Service, or applicable Model Provider policies. AI-generated Outputs may be inaccurate, incomplete, misleading, or biased, and should be independently reviewed and evaluated before being used or relied upon.

5. How We Share Information

We share personal information in the situations below.

Recipient category Examples Why
Sub-processors Cloud hosting (Microsoft Azure, AWS), Model Providers (OpenAI, Anthropic, Azure, others), CRM, helpdesk, error monitoring, analytics, billing, email Provide and operate the Services
Affiliates Writesonic group entities Internal operations, support, sales, billing
Integrations you enable Google services, CMSs, ad platforms, social platforms, third-party AI platforms Provide the integration you authorized
Professional advisers Lawyers, auditors, accountants Run the business; comply with law
Authorities and others Regulators, law enforcement, courts Comply with valid legal process; protect rights, safety, security
Buyers and successors In a merger, financing, acquisition, restructuring, or sale of all or part of the business Continuation of the business

We do not sell personal information for money. Some advertising-cookie activity may qualify as "sale" or "sharing" under specific U.S. state laws; you can opt out under §10. We do not knowingly transfer personal information of children under 18.

6. International Transfers

Writesonic is headquartered in the United States. When you use the Services, your personal information may be transferred to, stored in, and processed in the United States and other countries where we, our Affiliates, or our sub-processors operate.

For transfers of personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been deemed adequate by the relevant authority, we rely on Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum, and other lawful transfer mechanisms, as set out in our Data Processing Agreement.

7. Data Retention

We retain personal information only as long as necessary for the purposes for which it was collected, and as required by applicable law.

Type Retention
Active account information For the duration of the account, plus the period required by law
Customer Data after account deletion Up to 30 days, then permanent deletion (subject to the DPA)
Billing and tax records 7 years, or as required by tax law in the relevant jurisdiction
Support tickets 3 years from resolution
Marketing-list data Until you unsubscribe or 24 months of inactivity, whichever is sooner
Application server access logs 90 days
Security audit logs 1 year
Error and crash reports 90 days
Cookies See cookie table in §11

We may retain information longer where required to comply with legal obligations, defend legal claims, or address security or fraud incidents.

8. Security

We implement administrative, technical, and physical safeguards designed to protect personal information. We are SOC 2 Type 2 audited and publish details about our security program at our trust center: writesonic.trust.site.

While no method of transmission or storage is completely secure, we maintain safeguards designed to protect personal information. If we become aware of a security incident affecting personal information, we will investigate the incident and provide notifications as required by applicable law and our contractual obligations.

9. Your Privacy Rights

The rights available to you depend on where you live and the laws that apply.

9.1 GDPR and UK GDPR (EEA, UK, Switzerland)

You have the right to:

9.2 California (CCPA and CPRA)

If you are a California resident, you have the right to:

We do not sell personal information for monetary consideration. Some online advertising practices qualify as "sharing" under the CPRA; you can opt out via §10.

9.3 Other U.S. states

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, New Hampshire, Delaware, New Jersey, Minnesota, Maryland, or another state with a comprehensive privacy law, you have rights similar to those above (access, correction, deletion, portability, and opt-out from targeted advertising and certain profiling). You may also appeal a denial of your request by replying to our response or contacting support@writesonic.com.

9.4 How to exercise your rights

Email support@writesonic.com or use the in-product privacy controls where available. We may need to verify your identity before responding. We will respond within the time required by applicable law (generally 30 days under GDPR and 45 days under CCPA, with extensions where allowed). You may use an authorized agent where the law permits.

10. Your Choices for Cookies, Advertising, and Analytics

11. Cookies and Similar Technologies

We and our service providers use cookies, pixels, SDKs, and similar tracking technologies. The categories we use:

Category Purpose Example tools
Strictly necessary Authentication, security, load balancing, fraud prevention Session cookies, CSRF tokens
Functional Remember preferences and settings Locale, in-product UI state
Analytics Understand how the Services are used; product improvement Google Analytics, Plausible, Microsoft Clarity
Marketing and advertising (with consent where required) Measure marketing campaigns; serve and measure cross-site advertising Google Ads, Meta (Facebook), LinkedIn Ads
Referral and attribution Track referrals and partner attribution FirstPromoter
Sales and intelligence Identify accounts visiting our site for B2B outreach Unify
Developer infrastructure Code hosting and developer-facing pages GitHub

You can manage cookies through your browser, the in-product cookie banner, or by following the opt-out instructions of each vendor:

Some analytics tools we use, such as Plausible, are designed to operate without setting persistent tracking cookies.

12. Children

The Services are not intended for individuals under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact support@writesonic.com and we will take appropriate action.

13. Changes to This Policy

We may update this Policy. The "Last Updated" date at the top of this page reflects the most recent version. For material changes, we will provide additional notice (for example, in the Services or by email to the account owner) before the change takes effect. Continued use of the Services after the effective date of changes constitutes acceptance of the updated Policy.

14. Contact Us

For privacy questions or to exercise your rights, contact us at support@writesonic.com.

You can also reach us at: