Privacy Policy
Effective May 5, 2026
Who we are
gritwrite is a web app operated by Outprice LLC, a Nevada limited liability company based in Las Vegas, Nevada ("Outprice," "we," "us"). This Policy explains what we collect, why, how we use it, who we share it with, and your rights.
Information you provide
- Account info: email address, optional name, hashed password (we never store your password in plain text).
- Brand voice: the tone, target customer, banned phrases, and example copy you save.
- Listing inputs: the product titles, descriptions, tags, and CSVs you paste or upload.
- Billing: when you subscribe, our payment processor (Stripe) collects your payment details directly. We never see or store your full card number. We store a Stripe customer ID and subscription metadata.
- Communications: support emails, replies, feedback you send us.
Information collected automatically
- Cookies: a session cookie to keep you signed in and a signed cookie to count rewrites for anonymous visitors before signup. Session cookies expire after 30 days.
- Server logs: request URL, IP, user agent, timestamps. Used to debug, prevent abuse, and meter usage. Retained for up to 30 days.
- Usage counters: rewrite count per period for plan enforcement.
How we use your information
- To operate and provide gritwrite.
- To generate rewrites you request.
- To enforce plan quotas and prevent abuse.
- To send transactional email (signup verification, magic-link login, password reset, billing receipts).
- To respond to your support requests.
- To improve product quality through aggregate analytics.
We do not sell your data. We do not use your inputs or outputs to train public AI models. We do not show advertising.
Sub-processors
We rely on a small set of vendors to operate the service. Each receives only the data it needs and is bound by its own contractual obligations:
- Anthropic — language model that generates rewrites from your inputs.
- Vercel — web hosting and edge runtime.
- Railway — managed Postgres database.
- Stripe — payment processing for paid plans.
- Resend — transactional email delivery.
Data retention
- Account data: kept while your account is active and for 90 days after deletion.
- Listing inputs and rewrites: kept while your account is active. You can delete saved projects individually from the dashboard.
- Server logs: 30 days.
- Billing records: seven (7) years to meet accounting and tax obligations.
Your rights
Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, to obtain a copy in portable format, or to object to certain uses. Email privacy@gritwrite.com with the request, and we'll respond within 30 days.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
EEA / UK residents (GDPR): you have the rights of access, rectification, erasure, restriction, data portability, and objection. The lawful bases we rely on are contract performance (operating the service), legitimate interests (security, analytics, abuse prevention), and consent (where required).
Security
We use TLS in transit, encrypted storage at the database and host level, and OWASP-aligned application security practices. Passwords are stored as argon2id hashes. Sessions are signed with a server-side secret. Despite best efforts, no internet service is 100% secure; if you believe your account has been compromised, contact privacy@gritwrite.com immediately.
Children
gritwrite is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has provided us with information, contact privacy@gritwrite.com and we will remove it.
International transfers
We are based in the United States, and the service is primarily hosted in the United States. By using gritwrite you acknowledge that your information will be transferred to and processed in the U.S. and other countries where our sub-processors operate.
Changes to this Policy
We'll post material changes here and notify you by email at the address on your account at least 14 days before they take effect.
Contact
Outprice LLC
Las Vegas, Nevada
privacy@gritwrite.com