Privacy Policy

We may process account information such as email address, display name (if you provide one), account role (for example user or admin), and account status (for example active or disabled).

When you use WriteBehavior features, we may process content you submit or store, including rough notes submitted for improvement, saved notes, manual Company Guidelines, uploaded Company Documents (such as PDF or DOCX files), and note Templates.

We may process authentication and session data needed to keep you signed in, basic usage events already collected by the product (such as AI generation usage counters), and operational error or security logs used to keep the service reliable.

To provide note-improvement features, user-provided note content (and related preferences such as guidelines, active company document text used for generation, and selected templates) may be sent to the configured AI provider for processing. That processing is performed to fulfill your request.

This policy does not claim that any AI provider retains, deletes, or uses your content for model training unless that claim is separately verified in your provider configuration and contracts.

Application data and private uploaded files may be stored using configured cloud infrastructure (currently including Supabase for authentication, database, and private file storage). Exact hosting regions and subprocessors should be confirmed for your deployment.

We process data to create and manage accounts, provide documentation-assistance features, store your content at your request, enforce access controls and policy acceptance, maintain security and reliability, and communicate about the service when needed.

We may share data with service providers that help operate WriteBehavior, such as hosting, authentication, database, storage, and AI processing providers, under contractual and technical controls appropriate to the service. We do not sell your personal information.

We retain account and content data for as long as your account remains active and as needed to provide the service. When account deletion is completed through the product’s deletion process, associated application data is removed according to that process. Residual backups or logs may persist for a limited operational period.

You may download a copy of your account data from Account Settings. The export is provided as a structured file containing profile information and user-generated content associated with your account at the time of export.

You may permanently delete your account from Account Settings. Completed deletion removes associated application data according to the product’s deletion process. Administrators may also complete previously queued deletion requests. Residual backups or logs may persist for a limited operational period.

We use authentication, role-based access, row-level security for user data, private storage for company documents, and server-side handling of API secrets. Security practices reduce risk but do not eliminate it, and they do not by themselves constitute HIPAA compliance.

WriteBehavior is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you access WriteBehavior from outside the country where the service is hosted, your information may be processed in other locations. Cross-border transfer terms will be finalized after legal review of the operating entity and hosting arrangement.

We may update this Privacy Policy. Material changes that require renewed acknowledgment will be presented in the product using the current policy version. The version and effective date appear at the top of this page.

Privacy questions or requests: support@writebehavior.com.