This policy explains what data Write & Grow collects, why, who else receives it, and how long it is kept. It covers writeandgrow.com, the Write & Grow app, the SEO Monitor, and the speed service used by the Astute Speed and Astute SEO Toolkit WordPress plugins. We don't sell personal data.
What We Collect
| Data | Why |
|---|---|
| Account details: name, email address, password (stored only as a secure hash), the team members you invite and their roles | To run your account and let your team sign in |
| Website connections: each site's address and the access you give us, such as a WordPress application password, stored encrypted | To publish and update articles on your sites |
| Your content: topics, articles, images, fact-check reports and settings | To write, check, illustrate and publish articles for you |
| Search data, if you use the SEO Monitor: Search Console clicks, impressions, rankings and index status, and page speed results for your sites | To show how your sites perform and suggest what to write next |
| Usage and billing records: what was generated, its cost, your plan and payments | To apply your plan's allowances and bill you correctly |
| Technical logs: IP address, browser and error logs | To keep the service secure and fix problems |
Card and payment details are handled by our payment provider. We don't see or store full card numbers.
The Speed Service for Astute Speed
The Astute Speed plugin only contacts the speed service after a site administrator connects the site and agrees. Nothing about the site's visitors or users is ever sent.
- Connecting: the site's address and its WordPress, PHP and plugin versions. To confirm the request really comes from that site, the service reads a one-time code back from it.
- Critical CSS: the address of one sample page. The service opens it as an ordinary visitor would and keeps the resulting CSS for two days at most, long enough for the plugin to collect it.
- Better image compression: the image file. It is compressed and sent back straight away, and not kept.
- Usage: how many critical CSS runs and images the site used each month, to apply its allowance.
The site gets a key, and we store only a one-way hash of it. Disconnecting in the plugin switches the key off.
Who Else Receives Data
We use these kinds of providers to run the service. Each receives only what it needs for its task:
- AI model providers (for example Together AI) receive article topics, research notes and article text to write, revise and fact-check articles, and image descriptions to draw pictures.
- Search and research providers (for example Tavily and Serper) receive search queries and the addresses of pages to read.
- Google provides Search Console and PageSpeed data for sites you connect to the SEO Monitor. You give our service account access in your own Search Console and can remove it at any time.
- Hosting and email providers store the service and send account emails.
- Payment providers, including cryptocurrency payment gateways, process payments. A cryptocurrency payment is recorded on its public blockchain, which we can't change or remove.
We may also share data where the law requires it, or to protect our users or the service from fraud or abuse.
Cookies
The app uses cookies needed to sign you in and keep your session secure. If writeandgrow.com uses analytics, it is Google Analytics, measuring visits to our own pages. It doesn't track your site's visitors.
How Long We Keep Data
- Account data and content: while your account is open. When you close it, we delete it within 30 days, apart from billing records we must keep by law.
- Speed service: images are not kept; critical CSS is deleted two days after it is made; usage counts are kept for billing.
- Technical logs: only as long as needed to keep the service secure and fix problems.
Your Rights
You can ask to see, correct, export or delete your personal data, or object to how we use it. Many of these you can do yourself in your account. For anything else, email us. We reply within 30 days.
Security
Connections are encrypted (HTTPS). Passwords are hashed, and site access details and speed service keys are stored encrypted or hashed. Access to production systems is limited to the people who run the service.
Children
Write & Grow is not meant for anyone under 18, and we don't knowingly collect their data.
Changes
We may update this policy. When we make an important change, we'll tell account owners before it takes effect. The date at the top shows the latest version.
Contact
Privacy questions and requests: hello@writeandgrow.com.
Questions About This Policy?
Send us a message and we’ll reply by email.