What we keep
Your notes. The title and text of each note, and the images you add to it, are stored under your account, and only your account can read them. Deleting a note deletes it from the database; its images are deleted within two days once no note of yours uses them. Deleting your account deletes them all. Images are kept as files in a storage bucket run by Railway.
Chat conversations. Your messages, the replies and any passage you attached are stored with the note they belong to, and only your account can read them. Deleting a conversation or its note deletes them.
How suggestions are used. For each suggestion we record whether it was shown, accepted, partly accepted or dismissed, how long it took to arrive and how long it was, and when you pause or resume suggestions, with a random number for each visit to the editor so we can see them per visit. These records do not contain the suggestion or your writing. We use them to compare and improve suggestions, and delete them after 12 months. We also keep the model’s confidence in each suggestion (a number, with your account number) to decide which ones are worth showing, deleted after 12 months too.
Test sets. Only if you turn on “Help improve suggestions” in Settings, we also keep the text around the cursor and each suggestion, to measure suggestion quality. It is off unless you turn it on, and turning it off deletes everything kept so far. Each sample is deleted after 90 days in any case.
Your plan and usage. We count your suggestions and chat messages each day, for your plan’s limits, and how much each AI request costs us; daily counts are deleted after 35 days, cost records after 13 months. If you pay for Writer, we keep your Stripe customer number and your subscription’s status and renewal date, never your card.
How you found us. When you first visit, your browser notes the campaign tag in the link you followed, or the website that sent you, and any creator’s code in the link, and tells us once you sign up. We keep it with your account to see which places bring writers who stay. It is never shared.
What you mainly write. When you first open the app, we ask what you mainly write. We keep your answer, or that you skipped it, with your account to see which kinds of writers Flowwrite helps most. It is never shared.
Invites. If you sign up through someone’s invite link, we note who invited you, so we can give you both your free month.
Your email address. We keep your account’s email address, once your sign-in has verified it, to email you about your account: a welcome when you sign up, your invite, your plan starting, being set to end or ending, a free month from an invite, and your account being deleted.
The waitlist. If you join it, we keep your email address and which kind of computer you write on, and email you once to confirm, then again when your invite is ready.
Server logs. Each request to our servers is logged with its route, status, timing and your account number. Logs never hold your notes, chat messages, searches or suggestions.
What we send to others
Sign-in. Accounts are handled by Auth0, which keeps your email address and sign-in details. We receive your name and email address from it.
Suggestions. To suggest the next words, the text just before and after your cursor (up to about 2,000 characters before and 500 after) is sent to an AI model provider, currently OpenAI. Your other notes are not sent.
Chat. When you send a chat message, the text of the note you’re on (up to about 16,000 characters), any passage you attached and the recent conversation are sent to the same provider. Your other notes are not sent.
OpenAI doesn’t train its models on what we send it, and may keep it for up to 30 days to detect abuse before deleting it.
Payments. Writer is sold through Stripe, which is the merchant of record: it takes your payment, sends your receipts and handles sales tax and VAT. We don’t see or store your card.
Email. Our emails are sent through Mailgun, which receives your email address and what the email says. They carry no open or click tracking.
Error reports. When something fails on our servers, a report goes to Sentry with what code failed, the route and your account number. When the app crashes in your browser, it sends Sentry what code failed, which kind of page you were on, and your browser and system versions. Reports never hold your notes, chat messages, searches or suggestions.
Usage analytics. To see how Flowwrite is used, the app tells Mixpanel which kind of page you open (the front page, a note, Settings, never which note) and when you join the waitlist, sign in, create a note, accept a suggestion or start checkout. Each event comes with a random number for your browser, your sign-in id once you’re signed in, your browser, system and screen size, the site that sent you here with any campaign tags in the link, and the country and city worked out from your IP address. Events never hold your notes or their titles, chat messages, searches, suggestions, your name or your email. Mixpanel keeps them after you delete your account: email us to have them removed.
Storage. Your notes, conversations and account details are stored in a Postgres database run by Neon. Its backups, kept so the database can be restored, still hold deleted data until they expire.
What stays in your browser
Your browser’s local storage keeps your sign-in session, your light or dark theme, whether you paused suggestions, and how you found us with any creator or invite code in the link you arrived by, so they can be sent when you sign up, and Mixpanel’s random number for your browser with any events not sent yet. There are no advertising trackers, and fonts load from our own site, not a font service.
Questions and deletion
To delete your account and everything in it, use Delete account in Settings: your notes, images, conversations, usage records and samples are deleted, Writer ends at once, your sign-in is removed, and we email you to confirm. Only your account number is kept, for two days, to turn away sign-ins made before, then it’s deleted too. To ask about your data, email hello@flowwrite.ai.