At ArticleWizard, accessible from https://articlewizard.app (the “Service”), we are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data privacy laws. This Privacy Policy describes how we collect, use, and process your personal data.
1. Data Controller
The Data Controller responsible for your personal data is:
GSoftwareLabHohe Str. 7
04107 Leipzig
Germany
Email: awsup@gsoftwarelab.atlassian.net
2. Data We Collect and Why
We collect only the personal data necessary to provide, secure, and improve our AI article generator.
| Category | Data & purpose | Legal basis (GDPR) |
|---|---|---|
| Account & Authentication | Email address, name, Google user ID, profile picture (from Google sign-in). To create, secure, and manage your account, track your credits, and let you log in. | Art. 6(1)(b) GDPR (performance of contract) |
| Usage & Credit Data | Credit usage, generation timestamps, purchase history, project and draft history. To operate the credit-based Service, show your history, and prevent fraud. | Art. 6(1)(b) GDPR & Art. 6(1)(f) GDPR (legitimate interest) |
| Generation Input & Output | Keywords, outlines, prompts, and generated articles. To send your prompt to AI sub-processors and return the generated text. | Art. 6(1)(b) GDPR |
| Payment Data | We do not store card details. Our payment processor (Stripe) collects billing details, email, transaction IDs, subscription status, and invoice records. To process credit purchases, top-ups, subscriptions, and recurring billing. | Art. 6(1)(b) GDPR & Art. 6(1)(c) GDPR (legal obligation) |
| WordPress Connections | Site URL, username, and the Application Password you create in WordPress. The password is stored encrypted and is never shown again. To publish your articles to your own WordPress site when you ask us to. | Art. 6(1)(b) GDPR (performance of contract) |
| Technical Data | IP address, browser type, operating system, crash/debug logs. To ensure security, fight abuse (spam/bots), and troubleshoot errors. | Art. 6(1)(f) GDPR (legitimate interest) |
| Email Communications | Email address, name, delivery status, suppression status and the minimum metadata needed to operate the email service. We do not use tracking pixels. To send lifecycle emails, product updates and optional promotions, and to honor unsubscribe requests. | Art. 6(1)(b) GDPR for account emails, Art. 6(1)(f) GDPR for product updates, or consent where required |
| Support Requests | Name, email address, message, topic, page path, account ID (when signed in) and Jira ticket metadata. Guest email addresses are passed to Jira to create a portal customer without verification. Hashed IP addresses are stored for abuse prevention; we do not store the raw address with your request. To answer your support request by email and to limit spam and abuse. | Art. 6(1)(b) GDPR & Art. 6(1)(f) GDPR (legitimate interest) |
3. Sharing Your Data (Sub-processors)
We do not sell your personal data. To provide the Service, we share data with the following categories of service providers:
- AI model providers: to generate your articles, your input keywords and outlines are securely sent to AI APIs. Your personal account ID is not shared; only the text inputs needed for generation are processed.
- Authentication: Google sign-in is used for social login.
- Hosting: secure hosting infrastructure for the application and its databases.
- Payment processor: Stripe processes purchases; we never see or store your card details.
- Analytics: Google Analytics 4 helps us understand how the Service is used. It is loaded only after you accept analytics cookies.
- Error monitoring: Sentry processes error and performance data when the Service fails. Account details, cookies, request bodies and URL query parameters are disabled in the Sentry SDK.
- Support ticketing: Atlassian Jira Service Management stores support requests and sends reply notifications by email. Name, email address and message content are shared for this purpose.
- Bot protection: Cloudflare Turnstile verifies guest support requests and may process IP address and browser signals to distinguish humans from automated traffic.
- Email delivery: Cloudflare Email Service sends lifecycle, campaign and promo emails. Your email address and the message content are shared with Cloudflare for delivery and suppression handling.
International transfers: if we transfer your data outside of the European Economic Area (EEA), we do so based on adequacy decisions or standard contractual clauses (SCCs) to ensure equivalent protection.
4. Data Retention
We retain your personal data for as long as you maintain an active account with ArticleWizard.
- Drafts and generations: stored until you delete them, or until your account is closed.
- Inactive accounts: if an account remains inactive for 24 months, we may delete the account and its associated history.
- Invoices and subscription records: kept as required by applicable tax laws and for billing reconciliation (Art. 6(1)(c) GDPR).
5. Cookies and Tracking
We use essential cookies to keep you logged in and to store your wizard progress and your cookie choice. These cookies are required for the Service to work.
With your consent, we use Google Analytics 4 to understand how visitors use Article Wizard. Google Analytics may set analytics cookies such as _ga and _ga_* and collects usage data such as pages viewed, interactions, approximate location derived from the IP address, and device information. We do not send your name, email address, or article content to Google Analytics.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can accept or decline analytics cookies at any time with effect for the future. Your choice is stored for 180 days.
Google Ireland Limited and Google LLC may process data outside of the European Economic Area (EEA). Transfers are based on adequacy decisions or standard contractual clauses (SCCs).
6. Email Communications
We send lifecycle emails such as a welcome message and a congratulations email after your first finished article. With your account we may also send product updates, tips and occasional promotions. Cloudflare Email Service delivers these messages on our behalf.
- No tracking: our emails do not contain tracking pixels. We measure campaign performance through coupon redemption and purchases, not through individual opens.
- Unsubscribe: every promotional email contains an unsubscribe link and RFC 8058 one-click headers. You can also open the email preferences page from that link at any time.
- Suppression list: we keep your email address on a suppression list after you unsubscribe, including after account deletion, so that we do not contact you again by mistake.
- Account emails: essential account and security messages are separate from promotional email and are not controlled by the unsubscribe setting.
Legal basis: performance of our contract for account-related emails (Art. 6(1)(b) GDPR), and legitimate interest or consent for product updates and promotions (Art. 6(1)(f) or Art. 6(1)(a) GDPR).
7. Your GDPR Rights
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct incorrect or incomplete data.
- Erasure (“right to be forgotten”): request deletion of your account and associated generation history (exceptions apply to billing data required by tax law).
- Data portability: request an export of your projects and account data.
- Object / restrict: object to processing based on legitimate interests.
- Withdraw consent: where you gave consent (e.g. newsletters), withdraw it at any time.
To exercise these rights, contact us at awsup@gsoftwarelab.atlassian.net. If you believe we have infringed your rights, you have the right to lodge a complaint with your local data protection authority.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will inform you of any significant changes by posting the new policy on our website and, if feasible, sending an email notification. Our Terms of Service apply together with this policy.