Privacy Policy

Account data: your name, email address, and company details you provide when signing up.

Site data: public content from websites you connect — page text, metadata, stylesheets, screenshots, and sitemap files — used to understand your product and design system.

Google Search Console data: when you connect your Google account, we access your Search Console properties with read-only permission (the webmasters.readonly scope). We read site lists, search analytics (queries, pages, clicks, impressions, CTR, position), and sitemap status.

Usage and analytics events: page views, clicks, and conversion events on pages we publish or instrument, collected via our tracking script.

To generate content opportunities, page drafts, and site audits specific to your product and market.

To score existing pages (keep / refresh / prune) using Search Console performance data combined with semantic analysis.

To publish and serve pages you approve, and to measure their views and conversions.

We do not sell your data. We do not use your Search Console data for advertising, market research across customers, or to train models shared with other customers.

Writely's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only request the read-only scope https://www.googleapis.com/auth/webmasters.readonly. We use this access solely to read your Search Console data and provide the audit, scoring, and indexing features described above.

We do not transfer Google user data to third parties except as required to operate the service (our hosting provider, Cloudflare, processes data on our behalf), and we never sell Google user data.

You can revoke Writely's access at any time at https://myaccount.google.com/permissions. On revocation we stop accessing your data; stored tokens are deleted within 30 days.

Page drafts are generated by AI models running on Cloudflare Workers AI. Prompts may include your site's public content, design tokens, screenshots, and Search Console performance signals. Prompts are processed transiently and are not used to train public models.

Generated pages are only published at URLs you approve. Nothing is injected into your sitemap or domain without your installation of our script or explicit publish action.

Cloudflare: hosting, Workers AI inference, browser rendering (screenshots), and D1 database storage.

Google: OAuth sign-in and Search Console read access.

We do not share your data with additional subprocessors without updating this policy.

Published pages, events, and OAuth tokens are stored in Cloudflare D1. Tokens are stored server-side and never exposed to the browser after the OAuth callback.

We retain site and event data while your account is active. You may request deletion of your data at any time by emailing legal@writely.ai; we delete within 30 days.

You may request access to, correction of, or deletion of your personal data at any time. Contact legal@writely.ai.

If you are in the EEA/UK, you have rights under GDPR including portability and objection; our lawful basis is performance of the contract and legitimate interest in operating the service.

We may update this policy as the product evolves. Material changes will be posted on this page with a new 'last updated' date.