This page explains how WordCrafter handles your content and account. The Privacy Policy is the legal source for everything here, and it applies where the two differ.
Where your content lives
Your content, research, business context and settings are stored on Google Cloud Platform, in the United States, which also holds the backups.
Other services process data to run WordCrafter: Stripe for payments, SendGrid for email, and the AI providers (OpenAI, Anthropic, Google and DeepSeek) for AI requests. The sub-processors list names every one, what it does and where it processes data.
What is sent to AI providers
When the AI works on your content, the text it needs is sent to the provider of the model doing the work: your request, the relevant parts of your draft, and any context it uses, such as your research or business context. See Is my content used to train AI models? for how providers treat that data.
Your account and sign-in
Passwords are stored as salted hashes, never in a readable form.
Your session is kept in secure cookies that scripts on the page cannot read.
Payment cards are handled by Stripe.
Your API keys
Keys you connect are encrypted before they are stored. Once a key is saved, the LLM API Keys page shows only its first and last four characters, and the full key is never sent back to your browser. See Bring your own API keys.
Who can see your account
You. A WordCrafter account belongs to one person, and there are no shared seats.
WordCrafter support, when helping you. Support can see and change most things in your account, including your billing details and invoices (view only). They can see which AI providers you have connected and the masked key on the LLM API Keys page, but they cannot read a saved key, and cannot add, replace or delete one. They cannot change your password, your email address, your profile details or your billing, and cannot sign you out of every device.
People you share a brief with. A content brief's share link lets anyone with the link read that brief until you revoke it. See Content briefs.
How long data is kept
While your subscription is active, your data is kept.
After your subscription ends, whether you canceled, you canceled a free trial, or a payment could not be taken, your account becomes read-only: you can sign in, read everything and export it, including all at once with Export everything in Settings. Your content is kept for 90 days, and we email you 7 days before it is deleted. After the 90 days, your documents, research, briefs, projects, context library, uploads, Agent Studio settings and saved API keys are deleted. Your login, profile, billing history and usage records are kept, so you can sign in and subscribe again. See Managing your subscription.
When you delete your account, your content and profile are deleted, your login is removed, and any active plan is canceled at once, without a refund. Support conversations linked to your account (such as chats you started while signed in, with their messages, attachments and any email replies in those chats) are deleted too. Your billing history and usage records are kept. Other emails you send to support, and chats you start while signed out (unless you then sign in from the same browser), are held under the email address they came from, even if it is your account's address, and are not linked to your account. They can be kept for up to 360 days after account closure, for bug investigation or legal defense, before they are deleted or anonymized. To have them deleted sooner, tell support the email address. Short notifications that we post to our internal team chat about your account, bookings, billing, research activity and support conversations may remain there after deletion.
Backups are encrypted and kept for 30 days on a rolling basis, so deleted content can remain in them for up to 30 days before it is gone.