Privacy policy

This policy explains what InfinityWriter collects when you use the website and the service, why, and what you can ask us to do with it. We keep it short because we collect little.

Who we are

InfinityWriter is operated by ECO Management Group LLC ("ECO Management Group", "we", "us"), the company responsible for the personal data described in this policy. Reach us through the contact form.

What we collect

Your account

Your name, email address and a hashed version of your password (we never store the password itself). Your plan, credit balance and account settings.

Billing

Payments are handled by Stripe. We receive a customer and subscription reference and the status of your subscription. We never see or store your card number.

Sites you connect

The address of each site, the access token used to publish to it, the connector plugin version, and the results of connection checks (DNS, TLS, REST API).

What you create

The keywords, instructions and templates you enter, the articles we generate, and product information synced from your site to write about it.

Usage and security

Records of generations, credits used and AI requests (size, duration, success — not their full text), so we can bill fairly and fix problems. To stop abuse we record the IP address of requests to rate-limited forms for up to 24 hours. When a request is refused for trying to attack the platform, we keep the text of that request and the network part of the IP address (for example 203.0.113.0) so the decision can be reviewed.

Free SEO Checker

When you test an address with the free SEO Checker, our server fetches that page (and, for a whole-site test, its robots.txt, sitemap and a few of its pages) to analyse it. The address and the result are shown to you and are not saved. We count requests per IP address for an hour so the tool cannot be abused. If you are signed in, your tests are saved to your account so you can reopen them.

Free tools

The free tools at /tools work in your browser, apart from a few that need our server: loading a page you name, testing a robots.txt, and writing meta descriptions with AI. For those, the address or text you enter is processed to give you the result (the AI text is sent to the AI service that writes it) and is not saved. We count requests per IP address for an hour so the tools cannot be abused.

Visits to this website

When you open a page of this website we count the visit on our server, without cookies or tracking scripts: the page, the site you came from, your device type and browser family, the country (worked out from the network part of your IP address, for example 203.0.113.0), and a one-way hash of your IP address and browser that changes every day, so a visit is not counted twice. We do not build profiles or follow you between sites. These records are kept for 13 months.

Contact form

Your name, email, topic and message, and the network part of your IP address, so we can reply and spot spam.

Cookies and browser storage

A cookie that keeps you signed in, a cookie that remembers your privacy choice, and — only if you allow it — one interface preference (whether the sidebar is collapsed) kept in your browser. Google Analytics counts visits to our public pages (never inside the app) with cookies. In Europe it runs only if you allow it; elsewhere it is on until you switch it off in "Cookie settings". Google receives the page address without anything after "?", your browser details and a shortened IP address. No advertising or cross-site tracking cookies. Every item, with how long it lasts, is listed in our Cookie Declaration, and you can change your choice at any time from the "Cookie settings" link in the footer.

Readers of your published articles

If you use article tracking, articles on your site load a small image from us that counts page views and product-link clicks for your reports. Readers are identified only by a one-way hash of their IP address and browser that changes every day, together with the network part of their IP address (to show a country) and their device type. We do not build profiles or follow readers between sites. For your readers, you decide whether to use tracking and you are responsible for telling them about it.

How we use it

• To run the service: write, score, optimize and publish your articles, and show you reports.
• To bill you and keep your credits correct.
• To keep the platform secure and stop abuse.
• To send service emails such as password resets. We do not send marketing email without your consent, and we never sell your data.

Who processes it for us

• Hosting — the servers that run InfinityWriter and store its database.
• AI text generation — your keyword, instructions and the article being written are sent to our AI provider to produce the text.
• Stock images — the article's keyword is used to search a stock photo library.
• Payments — Stripe.
• Free tools and the SEO Checker — when you run one, we keep the address or topic you typed, the keyword and the score for 180 days, to see how the tools are used and to improve them. No account is needed and we store no IP address: a visitor is a one-way hash that changes every day.
• Country lookup — ip-api.com receives the network part of an IP address (never the full address) to name its country, for visit statistics.
• Email delivery — the provider that sends password resets and service messages.
• Sign in with Google — if you choose "Continue with Google", Google tells us your name and verified email address so we can create or open your account. We never see your Google password and we do not receive your contacts, mail or files. Google handles that sign-in under its own privacy policy.
• Rank Checker — the keyword and country you type are sent to a search-data provider so that it can run the Google search and return the results. Your domain is only used to find your position in them.
• Fonts — the typefaces are served from our own site, so opening a page does not contact Google or any other font provider.

Each receives only what it needs for that job.

How long we keep it

Account data and your articles for as long as your account exists. Rate-limit records for 24 hours. When your account is deleted (ask us and we will do it) we delete your account data and articles, except what we must keep for billing or legal reasons.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it. Reach us through the contact form. Depending on where you live, you may also complain to your data protection authority.

Security

Passwords are hashed, connections use HTTPS, and site tokens are only used to publish to your own sites. No system is perfectly secure, but we work to keep your data safe and will tell you if a breach affects you.

Children

InfinityWriter is not meant for anyone under 16 and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell signed-in customers about significant changes.