The Short Version (Plain English)
- I collect your email and name. That's it for personal data. I need them so you can log in and so I can send you account-related emails.
- I don't sell your data. Not to advertisers, not to data brokers, not to anyone. Period.
- Your content passes through AI APIs. When you generate an article, your prompts and keywords are sent to third-party language model providers (like OpenAI or Google Gemini) for processing. These providers have their own data handling policies, linked below.
- You can delete your account and data. Email me, and I'll wipe everything within 30 days.
1. Who Is Responsible for Your Data
Cluster Writer is operated by a sole proprietor ("I", "me"). I act as the data controller for information collected through this platform.
2. What Data I Collect
2.1 Account Information
When you register, I collect:
- Email address — used for authentication, account recovery, and transactional notifications.
- Display name — used within the platform interface.
2.2 Usage Data
I automatically collect:
- Generation logs — timestamps, article types, and credit consumption records. These logs do not store the full text of your generated content after delivery.
- Technical metadata — browser type, IP address (anonymized after 90 days), and session duration. Collected for security monitoring and service improvement.
2.3 Payment Information
Payment processing is handled entirely by third-party processors (e.g., Gumroad, Stripe). I do not store credit card numbers, bank account details, or any financial credentials on my servers.
3. How I Use Your Data
| Data Type | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Email address | Account authentication, transactional emails | Contract performance |
| Display name | In-app identification | Contract performance |
| Generation logs | Credit tracking, abuse prevention | Legitimate interest |
| Technical metadata | Security, debugging, service improvement | Legitimate interest |
I do not use your data for:
- Targeted advertising.
- Profiling for marketing purposes.
- Training proprietary AI models.
4. Third-Party AI API Data Processing
Crucial Data Transmission Notice
When you use the Service to generate content, your prompts, keywords, and specific content directives are transmitted to third-party AI APIs. Make sure not to enter sensitive personal information in prompts.
How data is handled by external providers is governed by their respective processing policies:
- OpenRouter & AI Models: OpenRouter Terms & Privacy
- OpenAI (GPT Models): OpenAI Privacy Policy
- Anthropic (Claude Models): Anthropic Privacy Policy
- Google (Gemini API): Google Gemini Terms
5. Data Sharing
I share your personal data with no one, except:
- AI API providers — strictly for content generation as described in Section 4.
- Payment processors — to handle billing (Gumroad receives payment info directly).
- Law enforcement — only when compelled by a valid legal order in the applicable jurisdiction.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion request + 30 days for backup purges |
| Generation logs | 12 months, then automatically deleted |
| Technical metadata | 90 days (IP addresses are anonymized), session details cleared in 6 months |
| Payment records | As required by local tax codes (typically 5 to 7 years) |
7. Your Rights (GDPR & General)
If you are located in the European Economic Area (EEA), the United Kingdom, or any jurisdiction with equivalent data protection laws, you have the right to request:
- Access — Get a copy of all personal data held about you.
- Rectification — Request corrections of inaccurate information.
- Erasure ("Right to be Forgotten") — Delete your account and associated data.
- Data Portability — Receive a structured, machine-readable export of your data.
- Restriction/Objection — Limit or object to the processing of your data.
To submit a request, contact me at [email protected].
8. Cookies
The platform uses strictly necessary session cookies for user authentication. I do not load any advertising cookies, tracking scripts, or third-party marketing tags.
9. Children's Privacy
The Service is not intended for individuals under 16. If I discover that personal data has been submitted by a minor under 16, I will purge it from our systems immediately.
10. International Data Transfers
Your data is processed globally, primarily inside the United States (where major AI API infrastructure resides). I use appropriate Standard Contractual Clauses (SCCs) to govern safe transfers.
11. Security Measures
Security safeguards include:
- End-to-end encrypted transit (SSL/TLS).
- Salted & securely hashed password structures.
- Highly restricted backend dashboard/DB access layers.
12. Changes to This Policy
I may update this policy periodically. Material adjustments will be notified to you via email at least 14 days before taking effect.
13. Contact
If you have questions about our data practices, please reach out directly: