Privacy Policy & CCPA/CPRA Notice

1. 100% U.S. Sovereign Infrastructure & Sub-Processors

Writs is engineered for U.S. workplace compliance teams and legal practitioners. All application compute, vector databases, and AI inference run on 100% American infrastructure:

• Application Hosting: Vercel Inc. (US-East, Washington, D.C. iad1) and Render (US-East, Ohio region).
• AI Reasoning & Document Vision OCR: OpenAI Inc. (U.S. API endpoints — zero model training on API inputs/outputs).
• Vector Search Index: Pinecone Systems, Inc. (AWS us-east-1, Virginia).
• Transactional Authentication Email: Resend, Inc. (U.S. infrastructure, sending from noreply@usewrits.com).

2. Categories of Information Collected

• Account & Authentication Data: Professional email address, hashed password or magic-link token, and TOTP two-factor verification state.
• Evidentiary Clickwrap Acceptance Logs (legal_acceptances): Email address, accepted Terms/Disclaimer/Privacy version, UTC timestamp, IP address, User-Agent, and accepted clause flags, retained as legal proof of contract formation and arbitration consent under the ESIGN Act.
• Research Queries & Workspace Documents: Questions submitted in the research console and documents voluntarily uploaded for statutory comparison, strictly scoped to your authenticated user account.
• Security & Rate-Limiting Logs: IP-based rate-limit counters to prevent brute-force authentication attempts and administrative audit logs (admin_audit_logs).

3. Zero Model Training & Strict Tenant Isolation

GO SAS does not sell, rent, or share your personal information or uploaded workspace documents with third parties for cross-context behavioral advertising, and never uses your queries or uploaded documents to train foundation AI models. Every conversation and document in the database is strictly scoped to the authenticated user's email address.

4. California Consumer Privacy Act (CCPA / CPRA) Rights

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.), California residents have the right to:

• Right to Know & Access: Request disclosure of the categories and specific pieces of personal information collected.
• Right to Delete: Request deletion of your personal information, conversation history, and uploaded documents (subject to statutory exceptions for evidentiary legal acceptance logs).
• Right to Correct: Request correction of inaccurate personal information.
• No Sale or Sharing: GO SAS does not “sell” or “share” personal information as defined by the CCPA/CPRA.
• Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA right.

To exercise your privacy rights, email privacy@usewrits.com.