Legal
Last updated: October 5, 2026
This Privacy Policy describes how WriteMyCardAI collects, uses, discloses, and protects personal information when you use our website and services.
We collect information you provide directly, including account details such as email and name, optional writer profile details you save in settings (such as information about yourself, preferred writing style, and signature name), card-generation inputs and generated card history, support messages submitted through our contact form, and payment-related metadata tied to token purchases. We do not store full payment card numbers. We also collect technical and security information such as IP address, browser data, and request logs needed to operate and protect the service, and basic product usage events such as when a card is copied or downloaded.
We use information to provide and maintain the service, authenticate users, generate and store card outputs, manage token balances, process payments, respond to support requests, prevent abuse and fraud, enforce our Terms, and improve product reliability and performance. We do not sell your personal information.
Depending on your location, we process personal information based on contractual necessity (to provide the service), legitimate interests (security, service quality, fraud prevention), consent (where required), and legal obligations.
We share information only as needed to run the service, including with infrastructure and database providers, payment processors (such as Stripe), AI providers used for generation, bot-abuse protection services (such as Cloudflare Turnstile), and email delivery providers. We may also disclose information if required by law, legal process, or to protect rights, safety, and security.
We retain data for as long as needed to provide the service and meet legal, operational, and security requirements. Account records and card history are retained while your account is active. You can delete your account at any time from Settings; deletion is immediate and permanent, removes your account, saved cards, and history, and forfeits any unspent tokens. To prevent repeat claims of the free signup token, we keep one item after deletion: a keyed one-way hash of your email address and the date the free token was claimed. The hash cannot be turned back into your email address and is not linked to any other data about you. We delete it 24 months after the claim. Backup or audit records may be retained for a limited period where reasonably required.
We use administrative, technical, and organizational safeguards designed to protect personal information. Passwords are stored in hashed form, not plain text. No security method is perfect, and we cannot guarantee absolute security.
We use browser local storage to keep you signed in (authentication tokens) and to remember preferences such as your theme choice. Third-party services we rely on, such as payment processing and bot protection, may set their own cookies as part of providing their functionality. We do not use browser storage for cross-site advertising tracking.
Your information may be processed in jurisdictions different from your own. Where required, we use appropriate safeguards for cross-border data transfers.
Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. You may also have the right to appeal decisions related to privacy requests. You can delete your account yourself from Settings; the only thing kept afterwards is the email hash described in Data Retention, which we use solely for fraud prevention. For any other request, contact us using the details below.
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can remove it.
We may update this Privacy Policy from time to time. We will post updates on this page and revise the "Last updated" date. Your continued use of the service after updates means you accept the revised policy.
For privacy questions or requests, contact us at support@writemycardai.com or through our Contact page.
