Privacy Policy
Last updated: October 19, 2026
1. Data Controller
WritSpark is a product/trading name of CHIMISMART LTD. CHIMISMART LTD is the data controller for personal data processed through the WritSpark website and services. We are registered in England and Wales under company number 16995660, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
2. Personal Data We Collect
- Contact data: name, email address, company, enquiry subject, and message.
- Checkout data: email address, plan purchased, billing address, payment status, Stripe transaction references, and invoice information. Full card details are handled by Stripe.
- Account and content data: login details where accounts are enabled, uploaded brand materials, prompts, generated drafts, preferences, and support history.
- Technical data: IP address, browser, device, pages visited, timestamps, referrer, and security logs.
3. Legal Bases Under UK GDPR/GDPR
- Contract: to provide paid access, support, account features, and AI-assisted content tools.
- Legal obligation: to keep tax, accounting, consumer rights, and compliance records.
- Legitimate interests: to secure the service, prevent fraud, respond to enquiries, improve reliability, and understand basic website usage.
- Consent: where we ask for optional marketing consent or optional cookies/technologies that legally require consent.
4. How We Use Personal Data
- To provide WritSpark access, content generation features, support, and customer communications.
- To process payments, refunds, fraud prevention, tax, and accounting records.
- To maintain website security, diagnose bugs, prevent abuse, and improve service reliability.
- To send service notices and, where permitted, marketing messages you can opt out of.
5. Subprocessors
We use the following subprocessors to operate WritSpark:
| Subprocessor | Purpose |
|---|---|
| Stripe | Payment processing, checkout, fraud prevention, invoices, and payment records |
| Vercel | Website hosting and privacy-focused web analytics |
| Cloudflare | DNS, security, caching, and static site delivery |
| OpenAI | AI model processing for content generation where AI features are enabled |
6. Retention Periods
| Data | Retention |
|---|---|
| Contact enquiries | Up to 24 months after the last response unless needed for legal claims |
| Checkout and billing records | Up to 7 years for tax, accounting, fraud prevention, and legal obligations |
| Account and support records | For the life of the account, then up to 24 months unless longer retention is legally required |
| Uploaded content and generated drafts | For the life of the account or access period, then deleted or anonymised within 30 days after a verified deletion request where technically practical |
| Security logs | Usually up to 12 months unless needed to investigate abuse, fraud, or security incidents |
7. International Transfers
Some subprocessors may process data outside the UK or European Economic Area. Where required, we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement/Addendum, EU Standard Contractual Clauses, or equivalent transfer mechanisms.
8. Your Rights
Depending on your location and the data involved, you may have rights to access, correct, delete, restrict, object to processing, request portability, and withdraw consent. Email privacy@writspark.com to exercise these rights.
If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO). If you are in the EEA, you may complain to your local data protection authority.
9. Children
WritSpark is not intended for children or anyone under 18. We do not knowingly collect personal data from children.
10. Contact
CHIMISMART LTD
71-75 Shelton Street, Covent Garden
London, WC2H 9JQ, United Kingdom