Last updated: September 11, 2026
At rewriteai, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
We collect information in the following ways:
We do not sell your personal data. We may share information with:
All payment card data is processed securely by Waffo, our PCI-DSS certified payment provider and Merchant of Record. rewriteai does not store, transmit, or process raw payment card data on its servers.
rewriteai is the data controller for all personal information collected through the Service. Our contact details are:
We retain your personal data only for as long as necessary to provide the Service and fulfill the purposes described in this policy. The following table summarizes retention periods:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account data | Until account deletion + 90 days | Contractual |
| AI input text | Processing only; not stored | Legitimate interest (service delivery) |
| Payment records | Minimum 7 years | Legal obligation (tax/accounting) |
| Usage & device logs | 12 months | Legitimate interest (security) |
| Marketing data | Until consent withdrawn | Consent |
After these periods, data is deleted or anonymized. You may request immediate deletion at any time (subject to legal retention requirements for payment records).
Depending on your jurisdiction, you may have the following rights regarding your personal data. We commit to responding to all rights requests within the timeframes below:
| Right | Response Timeframe | How to Exercise |
|---|---|---|
| Access | 30 days | support@rewriteai.tech |
| Rectification | 30 days | Account settings or email |
| Erasure ("right to be forgotten") | 30 days | support@rewriteai.tech |
| Restriction | 30 days | support@rewriteai.tech |
| Data portability | 30 days | support@rewriteai.tech |
| Objection to processing | Immediately; 30 days to resolve | support@rewriteai.tech |
| Withdraw consent | Immediately effective | Account settings or email |
| Lodge complaint with supervisory authority | N/A (you may contact your local DPA at any time) | Your local data protection authority |
For EU/UK residents: You have the right to lodge a complaint with your local data protection authority (DPA) at any time. We encourage you to contact us first at legal@rewriteai.tech.
We use cookies and similar technologies. For details, see our Cookie Policy.
| Cookie Type | Purpose | Duration | Required |
|---|---|---|---|
| Authentication | Keep you logged in | Session / 30 days | Yes |
| Security | Fraud prevention | 12 months | Yes |
| Analytics | Understand usage patterns | 12 months | No |
| Marketing | Targeted advertising | 90 days | No |
We may send you service-related and promotional communications. You can opt out at any time:
We will stop marketing communications within 30 days of your opt-out request.
Your information may be transferred to and processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to your local laws. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, and we only transfer the minimum data necessary.
We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
In the event of a data breach that affects your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 hours of becoming aware of it, in accordance with applicable data protection law.
Our services are not directed to individuals under the age of 13 (or 16 in certain jurisdictions such as the EU/UK). We do not knowingly collect personal information from children under these ages. If we learn we have collected such information, we will promptly delete it. Parents or guardians who believe their child has provided us with personal data may contact us at support@rewriteai.tech.
We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
For questions or concerns about this Privacy Policy, data subject rights requests, or to lodge a complaint, please contact us: