Legal

Privacy Policy

Effective date: August 14, 2026

This Privacy Policy explains how the operator of zephyrwrite.com and app.zephyrwrite.com (“we,” “us,” or “Operator”) collects, uses, and shares information when you use Zephyrwrite—the desktop writing app and the optional Zephyrwrite Cloud subscription.

Contact for privacy questions: Contact.

1. What Zephyrwrite is

Zephyrwrite is primarily a desktop application. Much of your writing stays on devices you control. Optional Zephyrwrite Cloud provides encrypted backups when you subscribe and choose to back up. Marketing is at zephyrwrite.com; accounts and billing are at app.zephyrwrite.com.

2. Information we collect

2.1 Account information

When you create an account, we collect your email address and related authentication data for magic-link sign-in. We use this to identify your account, send sign-in links, and communicate about licenses, subscriptions, and service notices.

2.2 Purchase and billing data

Payments are processed by Stripe. We receive limited billing metadata from Stripe (such as customer identifiers, subscription status, and payment outcomes). We do not store full payment card numbers on our servers. Stripe’s handling of payment data is governed by Stripe’s own privacy policy.

2.3 Cloud backup data

If you use Zephyrwrite Cloud, we store encrypted backup payloads and associated metadata needed to list, restore, and manage those backups (for example, project name, timestamps, and size).

2.4 Technical and usage data

Our servers may automatically receive standard technical data such as IP address, browser or app version, device type, and timestamps when you visit the websites or use account APIs. We use this for security, reliability, and debugging—not to profile your writing content.

2.5 Contact messages

If you write to us via Contact, we receive the email and message you submit so we can respond.

2.6 Local manuscripts

Manuscripts that remain only on your computer are not uploaded to us unless you use Cloud backup (or otherwise send content to us, such as in a support message). You own your manuscripts.

3. How we use information

We use information to:

• Provide accounts, licenses, and Cloud backups;
• Process payments and prevent fraud;
• Send magic links and essential service communications;
• Secure and improve the Service;
• Respond to contact requests;
• Comply with legal obligations.

We do not sell your personal information. We do not use the contents of your manuscripts for advertising.

4. Encryption — honest disclosure

Zephyrwrite Cloud uses server-side envelope encryption (Level 2). This is not zero-knowledge encryption. The Operator holds the keys used to encrypt and decrypt Cloud-stored backups as part of operating the service.

That means:

• Backups are encrypted at rest, which reduces risk from casual storage exposure;
• The Operator can decrypt Cloud backups when providing the service, troubleshooting, or if legally compelled;
• Cloud is not designed to hide your manuscripts from the Operator. If you need that property, do not enable Cloud backups.

5. When we share information

We share information only as needed to run the Service, including with:

• Stripe — payment processing and related fraud prevention;
• Hosting and infrastructure providers — to store account data and encrypted backups and to operate app.zephyrwrite.com;
• Email delivery providers — to send magic links and transactional mail;
• Professional advisors or authorities — when required by law or to protect rights, safety, and security.

Service providers are instructed to process data only for providing their services to us.

6. Retention

We retain account and billing records for as long as your account is active and as needed for legal, tax, and accounting requirements. Cloud backups are retained while your subscription and product design allow; when you delete backups or close an account, we remove or de-identify associated Cloud data within a reasonable period, except where retention is required by law.

7. Security

We take reasonable technical and organizational measures to protect account systems and backup storage. No method of transmission or storage is perfectly secure. Protect access to your email, since magic links depend on it.

8. Your choices

• You can choose not to create an account and use only local workflows where offered.
• You can decline or cancel Zephyrwrite Cloud; local files remain on your devices.
• You can contact us to request account-related corrections or deletion subject to legal limits.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

10. International users

If you access the Service from outside the Operator’s primary operating region, your information may be processed in countries where our providers operate. Those locations may have different data-protection laws than your own.

TODO — Governing-law jurisdiction: name the Operator’s legal seat and primary processing region once finalized; align with Terms of Service.

11. Changes

We may update this Privacy Policy. The effective date at the top will change when we do. Continued use of the Service after an update means you acknowledge the revised policy.

TODO — Refund policy cross-reference: when refund rules are published in Terms, note here whether refund requests require retaining limited billing records.

12. Contact

Privacy requests and questions: Contact on zephyrwrite.com.