Privacy Policy

This Privacy Policy explains how Wghostwrite (“we,” “us,” or “our”) collects and uses personal information when you visit our website or use our LinkedIn writing studio. For privacy questions or requests, email weeklyghostwriterprivacy@gmail.com.

1. Information we collect

• Account information: your account identifier, email address, and profile information made available by our authentication provider, Clerk, or a sign-in provider you choose.
• Writing and workspace content: your role, expertise, LinkedIn goals, writing samples, sample titles and source types, uploaded sample filenames, tweets extracted from text you paste, audience and voice preferences, interview answers, saved transcripts, generated posts, edits, approvals, and publishing schedules.
• LinkedIn connection information: when you connect LinkedIn, your member identifier, available basic profile information, access permissions, encrypted access token and expiry, and publishing results such as post identifiers and links.
• Billing and usage records: checkout and membership identifiers, subscription status, billing periods, publishing usage, monthly generation-credit usage, and non-expiring purchased generation-credit balances. We do not store full payment-card numbers or security codes.
• Technical and support information: request and error logs, information you send when contacting us, and technical information processed by our hosting and authentication providers, such as IP addresses and browser information.
• First-party analytics: pseudonymous visitor and session identifiers, page categories, campaign tags and referring domains, onboarding progress, and product-operation outcomes. After sign-in, these may be linked to your account identifier to understand conversion and continued use. Analytics event properties do not include your writing, email address, payment-card information, or access tokens.

2. How we use information

We use information to create and secure your account, save your work, generate and transcribe content you request, publish posts you approve and schedule when LinkedIn publishing is connected and available, manage subscriptions and usage limits, respond to support and privacy requests, prevent abuse, and meet legal obligations. We also use restricted, aggregate analytics to understand where people encounter difficulties and improve the product.

Where applicable law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing the service, compliance with legal obligations, and consent where required. You can withdraw consent for an optional connection or feature, although this may prevent that feature from working.

3. AI drafting and voice recordings

When you paste a whole copied X/Twitter page, that page text is sent temporarily to OpenAI through Replit AI Integrations so AI can extract your tweets and ignore page filler such as navigation, timestamps, and counts. We store the extracted tweets, not the copied-page filler. When you request drafts or an AI edit to an existing draft, we also send the relevant interview answers, extracted tweets, saved draft and edit prompt, and your saved style profile, including writing samples. Saving your profile alone does not trigger AI generation. Your saved inputs and generated posts are stored persistently in our database so you can return to them in your studio until you delete them or your account.

Uploaded writing samples are processed to extract text for your review. We do not retain the original sample file; the text you choose to save, its title, source type, and filename are stored with your account. Extracted tweets are stored persistently to provide provenance and resume functionality. Only upload or paste writing you have permission to share, and remove confidential or sensitive details first.

Voice recording is optional. A completed recording is uploaded for transcription and may be converted using temporary server files. We do not keep recordings as permanent workspace assets. A transcript is saved as interview content when you choose to save it. AI providers may retain submitted information under their applicable terms and policies; temporary handling by our app does not mean zero retention by providers. Do not submit confidential third-party information unless you have permission to do so.

4. LinkedIn access and publishing

Connecting LinkedIn is separate from signing in to Wghostwrite. We use LinkedIn’s official authorization and publishing APIs, not your LinkedIn password or browser session cookies. The integration requests basic identity access and permission to publish on your personal profile. It does not read your feed, connections, or private messages.

LinkedIn access tokens are encrypted at rest. Disconnecting in Settings removes our stored access token, pauses publishing, and clears pending live schedules. You can also revoke access in LinkedIn’s settings. Disconnecting or deleting a draft here does not delete posts already published on LinkedIn; manage those directly on LinkedIn. Approved content sent to LinkedIn is subject to your post’s visibility and LinkedIn’s policies.

5. Service providers and sharing

We use providers to deliver the service, including:

• Replit: application hosting, database infrastructure, and the AI integration service.
• Clerk and your selected sign-in provider: authentication, account security, and session management.
• OpenAI: requested text generation and audio transcription through Replit.
• Whop: hosted checkout, payment processing, and subscription management. Payment details are handled by Whop and its payment providers.
• LinkedIn: account authorization and publishing when you connect your account.
• Google Fonts: delivery of website fonts, which involves requests from your browser.

Providers process information under their applicable terms and privacy policies. We may also disclose information when required by law, to protect rights and security, or in connection with a business transfer subject to applicable protections. We do not sell personal information or share it for cross-context behavioral advertising.

6. Cookies and similar technologies

We and our authentication and hosting providers use cookies or similar technologies to maintain sessions, secure account connections, prevent abuse, and support the service. Interface preferences may also be stored in cookies. We use the Whop Pixel to measure page views, link visits to purchases, and attribute conversions to advertising. Whop may use cookies or similar technologies for these purposes. You can manage cookies through your browser, but blocking necessary cookies may prevent sign-in or connected features from working.

Our first-party browsing analytics uses a visitor cookie and browser session storage. It respects Do Not Track and Global Privacy Control signals. You can also disable it below. Campaign tags should never contain personal or confidential information. Analytics is not a session recording service.

7. Retention and security

Saved workspace content is retained to provide your account and writing history until you delete eligible content or request deletion. Canceling a subscription does not automatically delete your account or workspace. We retain billing, usage, security, and request records as needed for their purposes, including accounting, resolving disputes, enforcing usage limits, and meeting legal requirements. There is no single fixed retention period for all categories.

Deletion may not immediately remove copies in provider backups or records that must be retained for legal or security reasons. Provider retention is governed by the applicable provider’s practices. We use access controls, encrypted LinkedIn tokens, and secure connections to help protect information, but no service can guarantee absolute security. Providers may process information outside your country, where data-protection laws may differ.

8. Your choices and privacy requests

You can edit your profile, delete eligible drafts, pause publishing, disconnect LinkedIn, and manage your subscription in the studio. Full account or workspace deletion is currently handled by request, not a self-service deletion button.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to processing, or withdraw consent. To exercise these rights or ask about retention, email weeklyghostwriterprivacy@gmail.com, preferably from your account email, and describe your request. Do not send passwords, access tokens, or payment-card details. We may need to verify your identity before responding and will handle requests as required by applicable law. You may also have the right to complain to your local data-protection authority.

A deletion request is separate from subscription cancellation. You can manage cancellation in Billing; tell us if you need help with both. We cannot remove information that other users have copied or content retained independently by LinkedIn.

9. Children’s privacy

The service is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.

10. Policy updates and contact

We may update this policy as the service or legal requirements change. The updated policy will appear on this page with a new “Last updated” date. For questions about this policy or how Wghostwrite handles your information, contact weeklyghostwriterprivacy@gmail.com.