Last updated: 13 July 2026
This page explains what personal data InWriting (getinwriting.com) holds and why. For anything privacy related, email privacy@getinwriting.com.
That is the full list. We also collect anonymous, cookieless page view counts and page speed timings (via Vercel) to see which pages are used and how fast they load. These aren't linked to you or your agreements. To show prices in your currency, we check which country your IP address is in; we don't keep a record of it. There are no advertising trackers, and the only cookies are the ones that keep you signed in.
The sender gave us your email address so we could send you their agreement. We use it only for that: sending you the agreement and the confirmation of your response. Your response and its time become part of the agreement record that both of you receive. The agreement page, including any attached file, is reachable by anyone holding the emailed link, so the record is as confidential as the link itself. Forward it only to people who should see the agreement.
To provide the service: signing you in, sending agreements, and keeping the timestamped record that both parties rely on. That record is the product. Our lawful bases under UK GDPR are performance of a contract (providing the service to account holders) and legitimate interests (keeping the record and contacting recipients on a sender's behalf). We may also email account holders about changes to the service. If you ask for updates about new features, we record when you asked and use it only for that; you can stop any time from your dashboard, and every update email says how. We do not sell personal data or share it with anyone except the service providers below.
Each processes data on our instructions under a data processing agreement. Some of this processing happens in the United States, covered by transfer safeguards approved under UK GDPR, such as the international data transfer addendum to the EU standard contractual clauses.
Agreement records are kept while the sender's account exists, since a record you can point back to later is the point of the service. Attaching a file is a Pro feature: attached files are kept while the account is subscribed to Pro. Some files attached before this was a Pro feature are on the free plan and are kept for 1 year from when they were attached. In every case, the file's name, size and fingerprint stay on the record after the file itself is removed. If you delete your account, we delete your data within 30 days. To delete your account, email us.
Under UK GDPR you can ask for a copy of your data and ask us to correct or delete it. You can also object to our holding it. Email privacy@getinwriting.com and we'll respond within a month. Where a request affects an agreement record that the other party relies on, we may need to balance both parties' interests. If you're unhappy with how we handle your data, you can complain to the ICO at ico.org.uk.
If we change how we handle personal data, we'll update this page and the date at the top. For significant changes we'll email account holders.