Privacy Policy

Last updated: 11/15/2025

1. Information We Collect

Account Information

• Email address (via Clerk authentication)
• Name (if provided during sign-up)
• Authentication tokens

Usage Data

• Statistical data you upload (CSV files, text inputs)
• Generated write-ups and analysis results
• Project names and metadata
• Credit usage and payment history

Technical Data

• IP address and location (approximate)
• Browser type and version
• Device information
• Usage patterns and timestamps

2. How We Use Your Information

• Provide the Service: Process your statistical data and generate write-ups
• Billing: Process payments and manage credits
• Improve AI Models: Use anonymized data to improve our algorithms
• Communications: Send service updates, security alerts, and marketing (with consent)
• Security: Detect and prevent abuse, fraud, and security threats

3. Third-Party Services

We use the following third-party processors:

OpenAI

• Purpose: Generate AI write-ups and parse data
• Data shared: Your statistical data and analysis requests
• Privacy policy: OpenAI Privacy Policy

Convex

• Purpose: Database and backend infrastructure
• Data shared: All user data (projects, analyses, outputs)
• Privacy policy: Convex Privacy Policy

Clerk

• Purpose: Authentication and user management
• Data shared: Email, name, authentication data
• Privacy policy: Clerk Privacy Policy

Stripe

• Purpose: Payment processing
• Data shared: Payment information (securely handled by Stripe)
• Privacy policy: Stripe Privacy Policy

Vercel

• Purpose: Hosting and infrastructure
• Data shared: Technical logs and usage data
• Privacy policy: Vercel Privacy Policy

4. Data Retention

• Account data: Retained until you delete your account
• Projects and analyses: Retained indefinitely unless you delete them
• Payment records: Retained for 7 years (legal requirement)
• Usage logs: Retained for 90 days

5. Your Rights (GDPR Compliance)

If you are in the EU/EEA, you have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Data Portability: Export your data in a machine-readable format
• Object: Object to certain processing activities
• Withdraw Consent: Withdraw consent for data processing

6. Data Deletion

To delete your account and data:

1. Email us at support@statswriter.com
2. We will delete all your data within 30 days
3. Some data may be retained for legal/accounting purposes (payment records)

7. Cookies and Tracking

• We use essential cookies for authentication (Clerk)
• We use analytics cookies (Vercel Analytics) - can be opted out
• We do not use advertising cookies
• Third-party services may use their own cookies

8. Data Security

• Data encrypted in transit (HTTPS/TLS)
• Data encrypted at rest (Convex encryption)
• Authentication via secure OAuth (Clerk)
• Payment data never stored (handled by Stripe)
• Regular security audits and updates

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

10. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions or to exercise your rights, contact us at:

• Email: support@statswriter.com

13. Data Protection Officer

For EU users, you can contact our Data Protection Officer at: dpo@statswriter.com