Privacy Policy

1. Overview

WolfScribed ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

• Account information: Email address and password (stored securely via Supabase Auth).
• Billing information: Payment details are handled entirely by Stripe. We never see or store your full card number.
• Usage data: Number of analyses run per month, plan tier, and timestamps — used to enforce plan limits and improve the service.
• Submitted text: Text you paste or upload is sent to the Anthropic API to generate feedback. It is not stored permanently on our servers after the analysis is complete.

3. How We Use Your Data

• To provide and operate the Service
• To enforce plan limits and process billing
• To send transactional emails (account confirmation, billing receipts)
• To improve the Service based on aggregate, anonymized usage patterns

We do not sell your data, use your writing to train AI models, or share your content with third parties except as described in Section 4.

4. Third-Party Service Providers

We use the following third-party services to operate the Service:

• Supabase — database and authentication. Your email and account data are stored here.
• Anthropic — AI analysis. Your submitted text is sent to Anthropic's API to generate feedback. Anthropic's privacy policy governs their handling of API inputs. Anthropic does not use API inputs to train models by default.
• Stripe — payment processing. Stripe handles all billing data under their own privacy policy.
• Vercel — hosting and infrastructure.

5. Security Infrastructure

We take reasonable technical measures to protect your data, including:

• Encryption in transit: All traffic is served over HTTPS. Connections not using HTTPS are refused.
• Row-level security: Your documents and account data are stored in Supabase with row-level security policies enforced at the database layer, ensuring that your data is only accessible to your own authenticated session.
• DDoS and bot protection: All traffic passes through Cloudflare, which provides DDoS mitigation, a web application firewall, and active bot management.
• AI crawler blocking: Known AI training crawlers are explicitly blocked at both the Cloudflare layer and via our robots.txt. We do not permit third parties to scrape your content.
• Responsible disclosure: Security researchers can report vulnerabilities to us at [email protected] or via our security.txt.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

6. Data Retention

Account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Submitted text is not retained after analysis is complete.

7. Cookies

We use cookies solely for authentication session management (via Supabase Auth). We do not use advertising or tracking cookies.

8. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws, including the right to access, correct, or delete your personal data. To exercise these rights, contact us at the address below.

9. Children's Privacy

WolfScribed is not intended for children under 13. We do not knowingly collect data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service.

11. Contact

Questions or data requests? Contact us at [email protected].