Privacy Policy

1. Who we are

Literary Agents (“we,” “us”) is an AI writing service operated by Segla Productions LLC, a limited liability company based in California, United States. It lets you converse with AI writing companions that work in the styles of great literature. This policy explains what we collect, why, and the choices you have. It applies to writewiththegreats.com and every service we operate under this name.

2. What we collect

We keep collection to what the product needs to function:

• Account information. Your email address, sign-in timestamps, and the session records needed to keep you signed in. If you choose Google sign-in, Google also gives us your name, profile image, and a provider identifier so we can connect that sign-in to your account. We use passwordless methods, so we never hold a password for you.
• Conversations. The messages you send and the replies the AI generates, stored so your conversation history works. If you use the service without an account, your messages are processed to generate a reply but are not stored on our servers. If you choose “Publish,” a frozen, pseudonymous copy of that exchange becomes available to anyone with its public link until you withdraw it.
• Usage and billing. Message counts (for the monthly allowance), your plan, and — if you subscribe — your Stripe customer and subscription identifiers. Your card number goes to Stripe directly and never touches our servers.
• Technical data. IP addresses and similar request metadata, used for rate limiting, abuse prevention, and security logs; and the cookies described below.
• Optional measurement data. If you choose “Allow measurement,” we store the consent date and policy version, the broad page category where you arrived, referring hostname, campaign source/medium/name, and a Google click identifier when one is present. Funnel events record that the reading desk or chat was started, an account was created, or checkout/payment succeeded. Those first-party records never contain your writing, prompts, email address, IP address, user agent, a raw URL, or a full referrer. Event idempotency keys are private HMAC values rather than raw source identifiers, and the optional attribution value sent to Stripe is an HMAC epoch key rather than our raw attribution database ID. While an Allow request is pending, your browser may temporarily persist a random retry token. We never store that raw token on our servers; we store only a domain-separated HMAC of it. The same choice enables Vercel Web Analytics page views. Vercel may process the event time, a fixed page category, referring URL, approximate location, device type, browser, and operating system for aggregate reports. Before a page view is sent, we remove query strings and fragments from our page URL, replace article and share identifiers, signed verdict payloads, and auth callback details with fixed categories, and exclude the internal dashboard entirely. We do not send Vercel custom analytics events.
• Newsletter information. If you ask for our letters, we store your email address, signup source, confirmation status, and confirmation or unsubscribe timestamps so we can honor that request. Newsletter membership is separate from your product account.

We run no advertising pixels. Vercel Web Analytics is our only aggregate traffic script, it loads only after you opt in, and we do not build cross-site advertising profiles.

3. How we use information

To provide the service: generating replies, keeping your history, metering the free and paid allowances, processing subscriptions, publishing an exchange only when you ask us to, sending letters you explicitly requested, preventing abuse, and answering support email. We also use aggregate, de-identified counts (such as total messages and opted-in page views per day) to operate and improve the service. With your permission, we also measure which of our own links and advertisements lead to signups and paid subscriptions. We do not use this information to target you individually, and we do not sell it.

4. AI processing — and no training on your content

To generate a reply, the messages in your current conversation are sent to our configured model provider, which processes them and returns the response you see. We do not use your conversations to train AI models, and we engage model providers on API terms under which your content is not used to train their models either.

5. Subprocessors

We share personal information only with the vendors that run the service, each bound by its own data-protection terms:

• Vercel — application hosting and opt-in aggregate Web Analytics
• Neon — database hosting
• Stripe — payments and subscription billing
• Resend — sign-in links and, on a separate sending stream, letters
• Google — optional account sign-in, when you choose it
• Model providers — AI inference (Anthropic, Together AI, or Fireworks AI, depending on configuration)

Beyond these, we disclose information only if the law requires it or to protect the rights, safety, or integrity of the service and its users.

6. Cookies and measurement choice

First-party cookies keep you signed in, protect temporary sign-in requests, and meter the anonymous free trial. If you choose “Allow measurement,” one signed first-party cookie connects the broad first-touch campaign information above to later funnel events, and a second first-party cookie remembers that choice. When you allow, both use only the remaining 89-day measurement epoch, which is less than 90 days. A declined preference may instead persist for 180 days and performs no measurement. The server sets allowed cookies only after the measurement row exists, and neither later page loads nor another browser can silently create or renew the epoch. After expiry, another explicit Allow is required. The browser temporarily persists the random retry token described above so an Allow retry cannot create a duplicate if the first response was lost; it clears that token after a successful Allow or successful decline/delete. Declining does not change any product feature. If a deletion request fails, a temporary first-party retry marker keeps measurement declined and retries the deletion on a later page load. If you choose Google sign-in, Google may use cookies on its own pages to complete that request. We use no third-party advertising cookie and do no cross-site tracking.

The same Allow choice enables Vercel Web Analytics, which uses no analytics cookie. Vercel derives an anonymous visitor hash from an incoming request. That hash resets each day and cannot recognize a visitor across different days or websites; its session identifier is discarded after 24 hours. A returning person may therefore count as a new visitor on another day, and longer journeys cannot be reconstructed as one persistent session. We receive aggregate page-view reports, not a persistent person-level profile, and do not join Vercel's daily visitor hash to our first-party attribution ledger. Declining stops future Vercel page views immediately because consent is checked before every event, including after the script has already loaded.

7. Retention and deletion

We keep your data while your account is active. You can delete individual conversations in the app at any time; deletion removes them from our production database. Withdrawing a published exchange removes it from public view; its withdrawn record remains until account deletion so the old link stays withdrawn. Unsubscribing from the newsletter stops future letters. To delete your account and everything in it, email hello@writewiththegreats.com from your account address — we complete deletion requests within 30 days, after which residual copies age out of encrypted backups on our providers’ standard schedules. Raw attribution records, including click identifiers, and every linked funnel event become unusable when their 89-day application epoch expires. A daily deletion job normally removes them together by day 90. A scheduler, deletion-route, or database outage can delay physical removal until the job recovers; an expired record remains ineligible for measurement during that delay. A successful measurement-withdrawal request promptly deletes those records and clears the account’s acquisition source. If the request fails, measurement stays declined in that browser and the retry marker causes another deletion attempt later. If you withdraw while signed in, we retain only the withdrawal timestamp on your account so a stale Allow cookie on another browser cannot restart measurement; a later explicit Allow clears that timestamp and starts a new 89-day epoch. Stripe may retain the pseudonymous epoch key already attached to a subscription, but it no longer resolves to a record in our database after successful deletion. Vercel retains anonymous aggregate Web Analytics points under its service schedule. Withdrawing consent stops future page views, but an earlier anonymous point cannot be located by your browser or account and therefore cannot be selectively deleted. Billing records are retained as required by tax and accounting law.

8. Your rights (GDPR and CCPA)

Wherever you live, we honor the core rights: access to your data, a copy of it in a portable format, correction, deletion, and objection to processing. If you are in the EU/EEA or UK, our legal bases are performance of a contract (running the service you signed up for), legitimate interests (security and abuse prevention), and consent for optional campaign and aggregate traffic measurement. You can withdraw that consent above as easily as you gave it. If you are a California resident, the CCPA gives you the rights to know, delete, and correct; we do not “sell” or “share” personal information as those terms are defined in the CCPA, and we honor requests without discrimination. Exercise any of these by emailing hello@writewiththegreats.com; we may need to verify the request came from your account address.

9. Security

All traffic is encrypted in transit (TLS); data is encrypted at rest by our hosting providers; access to production systems is limited to the operator. Webhooks are signature-verified and API routes are rate limited. No system is perfectly secure — if a breach affects your personal information, we will notify you as the law requires.

10. Children

The service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy in a material way, we will update the date at the top and, for significant changes, notify account holders by email. Continued use after a change means you accept the updated policy.

12. Contact

Questions, requests, complaints: hello@writewiththegreats.com. See also our Terms of Service.