Writory

Privacy Policy

Last updated: June 2026

Writory ("we", "us", "our") is a product of See The Spark, based in the United Kingdom. This policy explains what personal data we collect when you use Writory, why we collect it, where it is stored, and the rights you have over it.

1. Data we collect

Account information

When you register we collect your name and email address. If you sign in with Google, these are provided by Google at sign-in. You may optionally add a Kindle email address and a writing style guide to your profile.

Book content

The text, chapter structure, and metadata you write in Writory is stored in our database, hosted in the United Kingdom. You retain full ownership of your writing.

Reading progress

If you read books on the platform we record which section you last read so you can resume where you left off.

Usage data

We log API requests (method, path, response time, correlation ID) for debugging and operational purposes. We do not use third-party analytics trackers.

2. Legal basis for processing (UK GDPR)

We process your personal data on the following bases:

  • Contract — to provide the Writory service you have signed up for (account management, content storage, email delivery).
  • Legitimate interests — to operate and improve the platform, maintain security, and investigate reports of harmful content.
  • Consent — where you have explicitly agreed, for example accepting these terms before creating content.

3. How we use your data

  • To provide and improve the Writory service.
  • To send transactional emails (account verification, Kindle delivery, book-share notifications).
  • To generate writing assistance and run content checks at your request. This sends portions of your writing to an AI provider — see section 4 and the note on international transfers in section 5.
  • To display aggregate, anonymised platform analytics to administrators.
  • To investigate and action reports of harmful or policy-violating content.

We do not sell your personal data or use it for advertising.

4. Third-party services

AI providers

When you use the AI writing assistant or trigger content generation, your writing and prompts are sent to an AI provider (Anthropic Claude or a self-hosted model configured by the platform). Anthropic is based in the United States — see section 5 on international transfers. Anthropic's privacy policy applies to API interactions.

Email

Transactional email is delivered via Postmark. Your email address and the content of transactional messages are shared with Postmark solely for delivery purposes.

Hosting

The application is hosted on Vercel and the database on Neon (PostgreSQL). Both are configured to store data in the United Kingdom. Each service is subject to its respective privacy policy.

5. International transfers

Your data is stored in the United Kingdom. However, when you use AI generation features your writing and prompts are transmitted to AI providers whose servers may be located in the United States or other countries outside the UK. These transfers are necessary to provide the generation service you request. Where we transfer data internationally we ensure appropriate safeguards are in place (such as standard contractual clauses or adequacy decisions) in accordance with UK GDPR.

If you do not wish your writing to be sent to an AI provider, do not use the AI generation features.

6. Data retention

Your account and books remain on the platform until you delete your account. When you delete your account your personal information is anonymised and your books are removed from public view. Server logs are retained for up to 90 days.

7. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your account and personal data. You can do this directly from your account settings at any time.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights contact us at privacy@writory.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

Writory uses a single session cookie to keep you logged in. No third-party tracking cookies are used.

9. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email and require you to re-accept the updated terms within the app before continuing to use Writory.