Smartwriter.ai

The ToS mentions SmartWriter uses cookies for 'AI personalisation' and has 'proprietary algorithms,' but lacks explicit clarity on whether user content trains the AI model. The Privacy Policy does not address AI training on user data, only analytics and service improvement purposes. Language is vague regarding training scope.

“[ToS] SmartWriter uses social media cookies for scraping data which enables AI personalisation. Cookie are not shared or used in any other platform, they are not used for data aggregation, they are not used or accessed for any other purpose except by our servers to fetch data required for personalisation.”

The ToS grants a 'non-exclusive, fully paid-up and royalty-free license to process such content solely for the operation and maintenance of this Application.' This is narrowly scoped to service operation, but the phrase 'operation and maintenance' is somewhat broad and could permit secondary uses. License scope is moderate rather than explicitly restricted.

“[ToS] Users grant the Owner a non-exclusive, fully paid-up and royalty-free license to process such content solely for the operation and maintenance of this Application as contractually required.”

The Privacy Policy lists third-party services (Stripe, Google Analytics, Hotjar, Facebook, Webflow) but does not explicitly state whether user content (as opposed to usage data) is shared with these parties. The ToS states cookies are 'not shared or used in any other platform,' but broader data sharing policies are unclear. Sub-processor list is not published.

“[Privacy] The Data may be accessible to certain types of persons in charge, involved with the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner.”

The Privacy Policy states data is retained 'as long as required by the purpose' and 'for as long as needed to fulfill such purposes,' but does not specify concrete retention periods. No explicit deletion timeline is provided beyond 'within one month' for rights requests. Backup and account termination data cleanup are not addressed.

“[Privacy] Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.”

The ToS explicitly states users retain ownership of their content and the license granted is limited to 'operation and maintenance of this Application.' The vendor claims no ownership rights over user-generated outputs, and users are not restricted from asserting exclusive ownership.

“[ToS] Users acknowledge and accept that by providing their own content on this Application they grant the Owner a non-exclusive, fully paid-up and royalty-free license to process such content solely for the operation and maintenance of this Application as contractually required.”

Neither the ToS nor Privacy Policy mentions SOC 2, ISO 27001, GDPR compliance certification, HIPAA, or any formal security certifications. No trust page, security documentation, or Data Processing Agreement is referenced. The Privacy Policy mentions GDPR regulation in definitions but does not claim formal compliance.

“Not found in documents”