Privacy Policy
What data we collect, how we use it, and the rights you have over your information.
Last updated: September 15, 2026
1. Overview
WritingZap ("we," "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
2. Data We Collect
Account Information
- Name, email address, password (hashed)
- Role (writer or employer)
- Profile information you provide (bio, location, links, etc.)
Verification Data
- LinkedIn profile URL or published byline URL
- Verification results (verified/not verified) - we do not store copies of identity documents
Content
- Writing samples, portfolio content, job listings
- Messages sent through the contact form
Usage Data
- Log data (IP address, browser type, pages visited)
- Cookies (first-party only for session management)
3. How We Use Your Data
- To provide and operate the Platform
- To verify your identity as part of our trust program
- To display your public profile and portfolio
- To facilitate connections between writers and employers
- To process payments (via Stripe - we do not store card details)
- To send transactional emails and, with consent, marketing communications
- To maintain security and prevent fraud
4. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe - payment processing
- Email service providers - transactional and marketing emails
- Law enforcement - when required by law
5. Your Rights
For All Users
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
California Residents (CCPA/CPRA)
You have the right to know what data we collect, request deletion, and opt out of any data sales (we don't sell data). Contact us to exercise these rights.
EU/UK Residents (GDPR)
You have rights under GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing is legitimate interest and, for marketing, consent.
6. Data Retention
We retain your data while your account is active. Upon deletion request, we remove personal data within 30 days, except where required by law or legitimate business purposes.
7. Security
We use industry-standard security measures including encryption in transit (TLS), hashed passwords, and access controls. No system is 100% secure; we cannot guarantee absolute security.
8. Cookies
We use first-party cookies for session management and authentication only. See our Cookie Policy for details.
9. Children
The Platform is not intended for users under 18. We do not knowingly collect data from minors.
10. Changes
We will notify you of material changes via email. Continued use after changes constitutes acceptance.
11. Contact
For privacy inquiries, contact us at our contact page or email [email protected].