Legal
Privacy Policy
Last updated May 20, 2026
What we collect
When you create an account, we collect your email address. When you write and Proof documents, we store your writing, revision checkpoints, word counts, and writing time. When you subscribe to Proofwriter Pro, Stripe processes your payment information — we never see or store your card details. We also collect basic usage data (page views, feature interactions) through Vercel Analytics to improve the product.
How we use it
Your email is used to send your magic link sign-in and, if you opt in, a welcome message. Your writing is stored securely in our database and used solely to power your dashboard and Proof pages. A cryptographic fingerprint (SHA-256 hash) of each Proofed document is submitted to the OpenTimestamps network and permanently anchored to the Bitcoin blockchain — this hash cannot be used to reconstruct your writing. Payment and subscription data is managed through Stripe.
Who can see your writing
Unproofed drafts are private and visible only to you. When you Proof a document, the resulting proof page (proofwriter.app/proof/...) becomes publicly accessible to anyone with the link — this is intentional and central to how the product works. You control when you Proof.
Google API Services
Proofwriter offers an optional feature that lets Pro subscribers export their documents directly to Google Docs. If you choose to use this feature, you will be asked to authorize Proofwriter to access your Google account using the limited "drive.file" scope. This scope grants Proofwriter permission only to create and manage files that Proofwriter itself creates in your Google Drive — it cannot read, modify, or delete any other files in your Drive. We store your Google OAuth access and refresh tokens securely in our database solely to perform this export on your behalf. We do not share these tokens or use them for any other purpose. You can revoke Proofwriter's access to your Google account at any time by visiting your Google Account permissions page (myaccount.google.com/permissions) or from your Proofwriter account settings. Proofwriter's use of Google API Services data complies with the Google API Services User Data Policy, including the Limited Use requirements.
Third-party services
Proofwriter uses Supabase for database and authentication, Stripe for payments, OpenTimestamps and the Bitcoin network for blockchain anchoring, Vercel for hosting and analytics, and Google Drive API (optional, for document export). Each of these services has its own privacy policy governing how they handle data.
Data retention
Your documents and account data are retained for as long as your account is active. You can delete individual documents from your dashboard. To request full account deletion, email help@proofwriter.app. Note that blockchain-anchored hashes cannot be removed from the Bitcoin blockchain — they contain no personal information or writing content.
Contact
Questions about this policy? Email help@proofwriter.app.