Legal
Privacy policy
Last updated 14 October 2026
Summary
WritersAPI passes your prompts to AI providers and returns their answers. We do not keep the text of your prompts or the content we return. We keep a record of each request (who, when, which model, how many tokens, what it cost) so we can route, bill and fix problems.
Who is responsible
PRNow (https://prnow.io/) operates WritersAPI and is responsible for the data described here. Contact: hello@writersapi.com.
What we collect
- API key holders: your site's name and address, and a contact email, given when a key is issued.
- Request records: the key used, time, task, requested and serving model, options such as template and web search, token and image counts, cost, latency, and which models were tried. Not the prompt or the output.
- Your provider keys, if you bring your own: stored encrypted and used only for your requests.
- Dashboard accounts (our team only): name, email, a hashed password, and a log of sign-ins and changes.
- Website visitors: standard server logs (IP address, browser, pages) for security, kept briefly. The public website sets no tracking or advertising cookies.
Where your prompts go
To answer a request we send its prompt and options to one or more AI providers, which may change between requests because of routing and fallback: DeepSeek, Google (Gemini), OpenRouter (for OpenAI models) and Black Forest Labs (FLUX). With web search on, the provider may also run searches based on your prompt. Each provider handles the data under its own privacy terms and may be located outside your country. Don't send personal or sensitive data you aren't allowed to share with them.
Why we use data
- to run the service: authenticate keys, route requests, enforce limits and budgets;
- to bill hosted usage and show each site its usage;
- to detect and fix failing models and abuse.
We don't sell data, and we don't use your prompts or outputs to train models.
How long we keep it
Request records are deleted automatically after the retention period set by our team (180 days by default). Account and key details are kept while the key is active and deleted on request after it ends.
Security
Traffic is encrypted in transit. API keys are stored only as hashes; provider keys are encrypted at rest. Dashboard access is limited to our team, with strong passwords, lockout after repeated failures and an audit log.
Your rights
Depending on where you live, you can ask to see, correct, export or delete your data, or object to how we use it. Email hello@writersapi.com and we will reply within 30 days. You can also complain to your local data protection authority.
Changes
We will update the date above when this policy changes, and tell key holders by email about significant changes.