Privacy Policy

1. Overview and Core Philosophy

AuthorityWriter ("we", "us", "our", or the "Platform") operates an autonomous search engine optimization and publishing engine for digital publishers, content networks, e-commerce storefronts, and software companies. We design our entire software infrastructure around an immutable premise: your content strategy, competitive keyword research, domain analytics, internal link graphs, and private credentials belong exclusively to you.

Unlike legacy AI platforms that harvest customer data to train public foundation models, AuthorityWriter maintains a strict Zero-Training Data Architecture. We do not use your proprietary articles, customer prompts, domain metrics, sitemap topologies, or CMS media to train, fine-tune, or validate any public or shared machine learning models.

This Privacy Policy explains our practices regarding the collection, storage, encryption, processing, and transfer of personal information, credentials, and search telemetry when you access or use AuthorityWriter websites, APIs, webhooks, or browser extensions.

2. Categories of Information We Collect

We practice rigorous data minimization, collecting only the specific data points required to execute our autonomous research, drafting, CMS publishing, and search console indexing protocols:

3. Google Search Console & Google API Services User Data Policy

AuthorityWriter provides an optional, 1-click integration with Google Search Console via OAuth 2.0. This allows our system to prompt automated Googlebot crawling upon article publication and display search impression telemetry directly inside your dashboard.

4. How We Use and Process Your Information

We utilize collected data strictly in fulfillment of our contractual commitment to provide autonomous SEO services:

• • Calibrating Keyword Harvester Algorithms: Computing mathematical keyword difficulty thresholds against your live backlink authority to prevent wasted publication credits on unwinnable search terms.
• • Autonomous Content Generation: Producing comprehensive, structured EEAT articles featuring uncapped word counts, comparison data tables, JSON-LD schema scripts, and contextual media.
• • Internal Linking Mesh Construction: Crawling your verified XML sitemaps to intelligently weave natural in-text links from newly generated content back to your existing pillar pages.
• • Direct CMS Auto-Publishing: Communicating with WordPress, Shopify, Webflow, or custom webhooks to publish articles or stage drafts according to your scheduled cadence.
• • Account Administration & Security: Sending transactional billing notifications, subscription receipts, critical security alerts, and technical support responses.

5. Enterprise AI Processing & Sub-Processors

To deliver humanized, domain-grounded prose at scale, AuthorityWriter routes content generation requests through dedicated, enterprise-tier language inference engines and cloud infrastructure:

All external AI inference partners are bound by strict contractual enterprise agreements containing explicit Zero Data Retention (ZDR) and Zero Model Training clauses. Your input queries, generation prompts, and resulting articles are discarded immediately following pipeline completion and are never stored or reviewed for training public models.

6. Payment Processing & Financial Safeguards

AuthorityWriter utilizes certified PCI-DSS Level 1 payment processing partners (including Stripe and Polar) to process subscription billing.

When purchasing a website subscription ($10/month per domain), your financial data (such as full 16-digit credit card numbers, CVV security codes, and expiration dates) is transmitted directly to our payment partners via encrypted tokenization. AuthorityWriter's servers never capture, view, process, or store raw cardholder data. We maintain only high-level billing records: billing address, card brand, last 4 digits, expiration month/year, and transaction receipts.

7. Cookies, Session Tokens & Local Storage

We believe in a tracker-free web experience. We use only strictly necessary first-party cookies and session storage mechanisms essential to application security and authentication:

• • Authentication Sessions: Secure, HTTP-only, SameSite-restricted cookies that maintain your authenticated dashboard session across page transitions.
• • Cross-Site Request Forgery (CSRF) Tokens: Cryptographic tokens preventing unauthorized external web requests from executing actions on your account.
• • UI Preferences: Local storage flags for dashboard view toggles, sidebar state, and theme settings.

We do not use intrusive third-party cross-site advertising trackers, behavioral fingerprinting scripts, or third-party pixel beacons.

8. Cryptographic Security & Storage Architecture

We implement multi-layered administrative, operational, and technical safeguards engineered to protect your domain credentials and generated content:

9. Data Retention, Portability & Account Deletion

You retain absolute sovereignty over your account data. We enforce explicit lifecycle retention policies:

• ✓ Immediate Export: You can download all generated articles, metadata outlines, and schema blocks in raw Markdown, JSON, or clean HTML at any time directly from the dashboard.
• ✓ Immediate Integration Revocation: Disconnecting a website or deleting a CMS connection instantly purges all stored API tokens and OAuth credentials from our active database.
• ✓ Graceful Account Purging: Upon subscription cancellation or account deletion request, your historical data is held in inactive status for 30 days to facilitate accidental cancellation recovery, after which all databases, backups, and site caches are permanently purged.

10. Global Privacy Rights (GDPR, CCPA/CPRA, UK DPA)

Regardless of your physical location, AuthorityWriter extends core privacy protections aligned with global privacy standards, including the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act, and the California Consumer Privacy Act as amended by the CPRA:

To exercise any of these statutory rights, submit a written verification request to our compliance team at [email protected]. We respond to all verified inquiries within 30 days without surcharge.

11. International Data Transfers

AuthorityWriter operates globally with primary cloud server infrastructure located in the United States and the European Union. If you access our Service from outside these jurisdictions, please be aware that information we collect will be transferred to, processed, and stored in our secure data centers.

When transferring personal data originating in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure adequate protection through standard contractual safeguards, including European Commission Standard Contractual Clauses (SCCs) and adherence to recognized international cross-border transfer frameworks.

12. Children's Privacy Protection

AuthorityWriter is an enterprise and business-oriented SaaS platform engineered exclusively for commercial publishers, marketing professionals, and website owners aged 18 and older. We do not knowingly solicit, collect, or process information from individuals under the age of 18. If we become aware that personal data of a minor has been collected without verified parental consent, we take immediate corrective steps to delete such records permanently.

13. Policy Modifications and Notification Protocol

As search engine technologies, algorithmic indexing frameworks, and international privacy laws evolve, we may update this Privacy Policy periodically.

When material changes are made, we will notify registered workspace owners via email to the primary administrative address on file and post an announcement in the dashboard at least 14 calendar days prior to the modifications taking effect. The "Last Updated" timestamp at the top of this page will reflect the latest version date.