How We Protect Your Data
We use practical safeguards to protect account details, billing records, uploaded content, and AI-generated drafts.
Encryption
The website and checkout flow use HTTPS. Payment details are entered on Stripe-hosted checkout pages, not collected by WritSpark.
Infrastructure
We use established cloud and payment providers and limit production access to authorised personnel.
Access Controls
Administrative access is restricted, reviewed, and protected with strong authentication where available.
Data Rights
We respond to privacy, deletion, and access requests through the contacts listed in our Privacy Policy.
Data Privacy
Your content is never used to train AI models without explicit opt-in consent. You retain full ownership of all generated content.
Incident Response
If we identify a security incident affecting personal data, we assess it promptly and notify users or regulators where legally required.
Data Handling Practices
We follow the principle of least privilege. Access to customer data is restricted to authorised personnel who need it to operate or support the service.
- Customer content is separated between accounts
- Operational backups are used where technically appropriate
- Deletion requests are handled under our Privacy Policy
- No customer content is used for model training without explicit consent
Application Security
We review dependencies, keep framework versions current, and use secure defaults for payment handling by directing payments through Stripe Checkout.
- Dependency updates and vulnerability review
- Least-privilege access for administrative accounts
- Payments processed by Stripe; card details are not collected by WritSpark
- HTTPS is used for the website and checkout flow
Certifications & Compliance
No SOC 2 Claim
We do not currently claim SOC 2 certification.
UK GDPR / GDPR
Our Privacy Policy explains data rights, legal bases, transfers, and retention.
Stripe Checkout
Payment details are entered on Stripe-hosted checkout pages.
No ISO Claim
We do not currently claim ISO 27001 certification.
Report a Vulnerability
We appreciate responsible reports from security researchers. If you discover a vulnerability, please email us with enough detail to reproduce and assess the issue.
security@writspark.com
Please do not include secrets or personal data beyond what is necessary to explain the issue.