How SKYERA F.Z.E collects, uses, shares, and protects personal data when you use ToolsforWriting.com, including AI tools, accounts, and paid subscriptions.
SKYERA F.Z.E ("Skyera", "we", "our", or "us") operates ToolsforWriting.com (the "Service"). We are the data controller for personal data processed in connection with the Service, except where we act as a data processor on your instructions.
Registered office: Office C1-1F-SF0324, Ajman Free Zone C1 Building, P.O. Box 932, Ajman, United Arab Emirates.
Contact for privacy matters: [email protected].
This Policy applies to personal data we collect when you visit our website, create an account, use any tool (including AI Tools), subscribe to Pro, contact us, or interact with marketing emails we send. It does not apply to third-party websites linked from the Service.
When you create an account we collect your name, email address, password hash (for email/password sign-up) or OAuth identifier (for sign-up via Google or Twitter/X), a user ID we generate, email-verification status, account role, and the timestamp, version, IP address, and user-agent of your acceptance of our Terms and Privacy Policy.
When you use a tool we may process:
If you subscribe to Pro we receive from Stripe a customer ID, a subscription ID, the plan and billing period, status (active, past-due, canceled, etc.), period start and end dates, and cancellation flags. We do not receive or store full card numbers, CVV codes, or full bank details. Stripe processes payment data as an independent controller in accordance with Stripe's privacy notice.
We automatically collect IP address, user-agent, browser language, referrer, timestamps, and basic device information when you interact with the Service. We use this data to operate the Service, secure it against abuse, debug errors, and produce aggregate analytics.
We use first-party authentication cookies (Better Auth session tokens) and, with your consent, analytics cookies (Google Tag Manager / GA4) and advertising-measurement cookies (Google Ads conversion tracking for our own campaigns). We do not use cookies for personalized advertising or remarketing. See our Cookie Policy for details and opt-out controls.
If you opt in, we add your email address to our marketing list (currently delivered via Resend) to send product updates, writing tips, and Pro offers. Transactional emails (account verification, password reset, billing receipts) are sent regardless of marketing preference because they are required to provide the Service.
We process account data, tool usage data, saved documents, and subscription data to authenticate you, run the tools you request, deliver Outputs, manage subscriptions, and provide customer support. Legal basis: performance of the contract you entered into when you accepted our Terms (GDPR Art. 6(1)(b)).
We process tool usage metadata, IP address, and account identifiers to enforce monthly quotas, calculate billing, detect and prevent fraud and abuse, secure the Service, monitor uptime, and debug errors. Legal basis: our legitimate interest in operating a secure, sustainable service (GDPR Art. 6(1)(f)).
We analyse aggregate, de-identified usage statistics to understand which features are valuable and to inform our roadmap. Legal basis: legitimate interests (Art. 6(1)(f)). We do not use your Inputs or Outputs to train our own machine-learning models.
If you opt in during sign-up or in your account settings, we send marketing emails. Legal basis: your consent (Art. 6(1)(a)). You may withdraw consent at any time using the unsubscribe link in any marketing email, in your account settings, or by emailing us.
In regions where consent is legally required (EEA, UK, Switzerland), we set non-essential cookies (analytics and advertising measurement) only after you accept them via the cookie banner. Legal basis: your consent (ePrivacy Directive and GDPR Art. 6(1)(a)). Advertising measurement is limited to conversion tracking of our own campaigns; we do not enable personalized advertising or remarketing.
We process personal data when required by law, including for tax records, responding to lawful requests from public authorities, and enforcing our Terms. Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)).
We share personal data with the following categories of recipients:
We require sub-processors to provide appropriate technical and organizational measures to protect personal data and to act only on documented instructions where they act as processors.
We do not sell personal data and we do not share it for cross-context behavioral advertising. We do not engage in "sharing" or "selling" as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We use Google Ads solely to measure the performance of our own campaigns (conversion tracking); we keep Google Consent Mode's ad_personalization signal denied for every visitor, so your data is not used for personalized advertising or remarketing.
Skyera is established in the United Arab Emirates and several of our sub-processors are located in the United States. When personal data is transferred to a country that has not been recognized by the European Commission or the UK as offering an adequate level of protection, we rely on appropriate safeguards — typically the EU Standard Contractual Clauses (and the UK Addendum) entered into with the relevant sub-processor, supplemented by technical and organizational measures.
Where required by Article 27 of the GDPR, we will appoint an EU representative. Until then, EEA data subjects may contact us at [email protected] for any matter arising under the GDPR.
We keep personal data only for as long as needed for the purposes set out above:
After the relevant period we delete, anonymise, or aggregate the data. Backups are rotated and deleted on a defined schedule.
If the GDPR or UK GDPR applies to you, you have the right to:
If you are a California resident, you have the right to know what personal data we collect, the categories of sources and recipients, the purposes of processing, and to request access to and deletion of your personal data, subject to legal exceptions. You also have the right not to be discriminated against for exercising these rights.
Email us at [email protected] from the email associated with your account. We may need to verify your identity before acting on the request. We will respond within the period required by applicable law (generally 30 days under the GDPR). There is no charge for reasonable requests; we may charge a reasonable fee or refuse requests that are manifestly unfounded or excessive, as permitted by law.
We implement appropriate technical and organizational measures designed to protect personal data, including encryption in transit, encrypted storage of sensitive identifiers, access controls, audit logging, principle-of-least-privilege role management, and regular review of our infrastructure. No internet-based service is perfectly secure; if you become aware of a vulnerability, please contact us at [email protected].
In the event of a personal-data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and affected users in accordance with applicable law.
The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe we have collected personal data from a child under 16, contact us at [email protected] and we will delete it.
When you use an AI Tool, the text you submit (Input) and selected operation parameters are transmitted to one or more of Anthropic, Google, or Perplexity to generate an Output. We do not pre-process your Input by injecting other users' data or account-identifying details into the model prompt.
We do not use your Inputs or Outputs to train, fine-tune, evaluate, or benchmark our own machine-learning models. We use the API endpoints of our AI providers under configurations that do not opt in to provider model-training programs. Provider terms still permit limited retention for abuse detection and safety as described in their documentation.
AI outputs can be wrong, fabricated, biased, or out of date. We log a request ID and metadata to debug errors and improve reliability, but we cannot guarantee accuracy. Do not submit information you would not be willing to share with a US-based AI provider and do not act on an Output without independent verification.
The Service is not designed for the processing of special categories of personal data under Article 9 of the GDPR (e.g., health, biometric, racial, religious, political data) or of payment-card, government-issued ID, or other regulated data. Do not submit such data unless absolutely necessary; if you do, you are responsible for ensuring you have a lawful basis to do so.
We may update this Policy from time to time. We will indicate the latest version and effective date at the top of this page. If a change is material we will notify you by email or in-product notice. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
For questions about this document or to exercise your rights, contact us via our contact page or by email.