Privacy Policy

Write4Me is a hybrid SaaS and marketplace where employers are matched with skilled writers, manage content production end-to-end, and pay through built-in escrow. This policy covers your use of the Write4Me website, web app, and progressive web app (PWA), regardless of how you sign in.

Account information

When you create an account, we collect your name, email address, and a securely hashed password (managed by our authentication provider). If you sign in with Google, we receive the basic profile information Google shares (name, email, profile photo) under the scopes you approve. If you sign up with email and password, we additionally process a one-time verification code (OTP) and metadata about your verification attempts to protect your account.

Profile information

Depending on whether you join as a writer or an employer, we collect profile details you provide:

• Writers: bio, date of birth, profile photo, country, timezone, languages, content types and industries you write for, writing tone, portfolio URLs, and ratings earned on completed tasks.
• Employers: company or brand name, logo, website URL, country, timezone, industry, employer type, and ratings received from writers.

Identity verification (KYC)

Writers complete identity verification to qualify for paid work and payouts. Verification is performed by our KYC provider, Didit. Write4Me stores the verification status, the Didit session and vendor IDs, the verification date, and any failure reasons returned to us. The underlying identity documents (passport, government ID, selfie, etc.) are submitted to and retained by Didit, not by Write4Me.

Workspace and task content

When you use the platform, we collect the content you create: workspace details, task briefs, written submissions (stored as rich-text documents), comments and feedback threads, attachments, member roles, and invitation records. This content is essential to providing the service.

Payment information

Payments are processed by PayPal — subscriptions, wallet top-ups, and writer payouts. We store the identifiers PayPal returns to us — such as subscription IDs, order and capture IDs, and payout email addresses — together with an immutable ledger of transactions on our platform (top-ups, escrow holds and releases, withdrawals, platform fees). We do not see or store full card numbers, bank account numbers, or other sensitive payment credentials — those are handled directly by PayPal under its PCI-DSS compliant systems.

Communications and notifications

If you opt in to push notifications, we store the push subscription endpoint and associated cryptographic keys your browser provides so we can send you alerts. We also keep delivery logs (event type, timestamp, status) and your notification preferences.

Device and usage data

Like most web services, our hosting and authentication infrastructure (Supabase and Vercel) may automatically log technical information such as your IP address, browser type, request paths, and timestamps. We use these logs for security, fraud prevention, debugging, and service reliability.

We use the information described above to:

• Operate the platform — create your account, build your profile, and keep you signed in.
• Match employers with the best-fit writers for each task using profile and preference data.
• Process payments through escrow, including top-ups, releases, refunds, and writer withdrawals.
• Verify writer identities so payouts can be made safely and in line with applicable regulations.
• Send transactional and product notifications you have requested or that are necessary to operate the service.
• Detect, prevent, and respond to fraud, abuse, security incidents, and policy violations.
• Comply with legal, tax, accounting, and regulatory obligations.
• Improve the platform, including diagnosing issues and shaping product decisions.

We do not sell your personal information. We share information only with the service providers required to run Write4Me and only to the extent necessary for them to perform their service:

• Supabase — database, authentication, and file storage.
• PayPal — subscription billing, wallet top-ups, payment processing, and writer payouts.
• Google — OAuth sign-in (only if you choose to use it).
• Didit — identity verification (KYC) for writers.
• Vercel — application hosting and edge delivery.

We may also disclose information when required by law, to enforce our terms, or to protect the rights, safety, or property of Write4Me, our users, or the public.

We take security seriously. Data is encrypted in transit using TLS 1.3 and at rest using AES-256 (managed by our infrastructure providers). All database tables are protected by row-level security policies that enforce who can read and modify each record. Authentication uses short-lived JWT access tokens (15-minute lifetime) with refresh tokens that expire after 7 days. Escrow operations are atomic database transactions with row-level locking so funds cannot be double-spent.

No system is perfectly secure, but we work to follow industry best practices and to remediate issues quickly if they arise.

Write4Me is an offline-first PWA, which means we make limited use of your device’s storage to keep the app fast and usable without a network connection:

• Authentication cookies set by Supabase to keep you signed in across page loads.
• IndexedDB (managed via Dexie.js) to cache your drafts, tasks, comments, and other workspace data so the editor and app work offline. Pending changes are queued locally and synced to our servers when connectivity returns.
• A service worker that caches the app shell, static assets, and selected API responses for fast, offline-capable loads.

We do not use third-party advertising cookies or cross-site tracking. Local data is cleared when you sign out or uninstall the app, and you can clear it manually at any time through your browser’s site settings.

Depending on where you live, you may have rights over your personal data, including the right to:

• Access the personal information we hold about you.
• Request a copy of your data in a portable format.
• Correct inaccurate or incomplete information.
• Request deletion of your account and associated personal data.
• Withdraw consent where we rely on it as a legal basis.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at privacy@write4me.com. We will respond within the timeframe required by applicable law.

We retain your account and profile information for as long as your account is active. When you delete your account, we remove or anonymize your personal data, with limited exceptions: transaction ledger entries are retained in an immutable form to meet our legal, tax, and accounting obligations, and certain backups and security logs are retained for the period required to operate those systems. Locally cached data on your device is cleared when you sign out.

Write4Me is delivered through global infrastructure. Your information may be processed in any region where our sub-processors operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Write4Me is not intended for, and we do not knowingly collect personal data from, anyone under 18 years of age. Identity verification for writers requires a date of birth that meets this threshold. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you through the app or by email. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@write4me.com.