Privacy Policy

Last updated 31 October 2026

This policy explains what information Typewit Organization, based in Bangladesh and operating TypeWit (“we”, “us”), collects when you use typewit.com, how we use it, and the choices you have. Typewit Organization is responsible for this processing (the data controller where that term applies). Questions: [email protected].

What we collect

Account information

• Your email address, and your password if you sign up with email (stored only as a secure hash).
• If you use Continue with Google: your name, email address and Google account ID, which Google shares when you sign in.
• If you use Continue with Discord: your Discord account ID, email address and basic profile details, such as your username and avatar, shared for authentication. Discord sign-in does not connect Google Docs or grant access to your Discord messages, servers or contacts.
• Your name, if you choose to give it, so the app can greet you.
• Your country and the month and year you were born, to check that you are old enough to use TypeWit where you live, and whether a parent or guardian needs to buy Pro for you. We never ask for the day.
• Which version of the Responsible Use Agreement you accepted, and when.

Your Google Docs connection

• When you connect Google Docs, Google gives us access tokens for the drive.file permission. This only covers documents TypeWit creates or that you choose. We store these tokens encrypted.
• The title, ID and link of each document you write into.

Text and activity

• The text and supported formatting you submit for each session, its steps, selected rhythm, timing, simulated corrections and pauses, and your approval (including a fingerprint of the exact submitted content). Paused Pro edits replace the remaining approved content and update settings; already entered text and activity remain part of the session record.
• An activity log of execution, approvals, settings changes, pauses, resumes and stops. Temporary typo, false-start and final-review actions can be written into your chosen document and remain in Google or Microsoft history even after correction. Pro playback reads the same stored execution actions; it does not obtain extra Google history or publish a recording. Writing-hours settings include your selected IANA time zone, hours and optional weekdays.

Billing

• If you subscribe to Pro or buy a Day Pass, Stripe processes your payment. For passes we keep the checkout/payment identifiers, activation and expiry, and any refund status to provide and reconcile access. We receive your Stripe customer ID, your plan and subscription status. We never see or store your card number.
• To make sure each person gets one free trial, we keep a record of trial use linked to a normalised form of your email address.

Technical information

• Our hosting providers keep standard server logs (such as IP address, browser type and time of request) for security and troubleshooting.
• We store your sign-in session, unsent drafts (including supported formatting), and optional pace preferences in your browser’s local storage. Drafts and .docx conversion are processed locally until you submit a session. Clear browser storage on shared devices. We don't use advertising or analytics cookies.

How we use it

• To provide TypeWit: create your account, connect Google, and enter your approved text into your documents.
• To show your progress and activity log, and to notify you when a session finishes or stops.
• To run billing, apply plan limits and prevent free-trial abuse.
• To keep TypeWit secure, fix problems and answer support requests.

We don't sell or rent your personal information, and we don't use your text for advertising or to train AI models.

Google user data

TypeWit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google access only to create documents and insert the text you approve. We don't read other files in your Drive, and no person at TypeWit reads your documents unless you ask us to for support, it's needed for security, or the law requires it.

Who we share it with

We share information only with service providers that help us run TypeWit, and only as much as they need:

• Supabase: database, sign-in and server functions.
• Netlify: production website hosting. Vercel: preview and test website hosting.
• Google: sign-in, document picking and Google Docs, at your request.
• Discord: optional sign-in, at your request. Discord processes its consent and authentication flow; we do not send your session text to Discord.
• Microsoft: the Word host document and add-in APIs when you use Word. We do not store a Microsoft password or OAuth token.
• Stripe: payments and subscription management.
• Resend: notification emails, if email notifications are turned on.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or TypeWit.

How long we keep it

We keep your account, sessions and activity log while your account is open, so you can see your history. You can delete finished sessions at any time, or delete your whole account in Settings: that removes your sessions, their text and logs, your notifications and your Google connection straight away. If you ask us by email instead, we do it within 30 days. We keep records we must keep by law (such as billing records), and, if you used the free trial, your email address (lower-cased) and the date of the trial, so a trial can only be used once. Short-lived records are deleted automatically: read notifications after 90 days, and security and duplicate- request records after 2 to 90 days.

Session settings include any writing-block lengths, scheduled rests and writing hours you choose. We store these with the session to schedule entry and resume it after rests. This does not add access to your other documents or change the retention periods above.

Your choices and rights

• Turn email notifications on or off from Settings.
• Manage or disconnect Google accounts from Connected accounts in your dashboard, or revoke access in your Google Account under Security, Third-party access. Disconnecting stops active sessions and removes stored access credentials; it does not erase your documents, their history or existing session records.
• Ask for a copy of your data, a correction, or deletion by emailing [email protected].

Depending on where you live, you may have additional rights under local privacy laws. Contact us and we'll help.

Processing grounds and international services

Where data-protection law requires a legal basis, we process information to perform our contract with you, meet legal obligations, and pursue legitimate interests in service security, fraud prevention and support, subject to your rights. We seek consent where required. Providers may process data outside your country under applicable contractual and legal safeguards. Contact us for details or to exercise access, correction, erasure, restriction, portability or objection rights where available, or to withdraw consent without affecting earlier lawful processing. You may complain to your local data-protection authority.

Account deletion removes live application records; provider backups, legally required billing records and limited fraud-prevention records may remain for their applicable retention periods. Deleting TypeWit records does not delete Google or Microsoft documents or their version history; manage those with the provider. Do not submit sensitive data you lack authority to process.

Security

We use encryption in transit, encrypt Google tokens at rest, and restrict each account to its own data. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you.

Children

TypeWit isn't for children under 13, or for anyone below the age of digital consent in their country (up to 16 in parts of the EU and EEA). After you create an account, we check your country and month and year of birth before you can use the dashboard. We don't knowingly keep information about anyone below that age. If we learn that we have, we delete the account. A parent or guardian who thinks this has happened can email [email protected].

Changes

If we change this policy, we'll update the date above and, for significant changes, let you know by email or in the app.

Contact

Email [email protected] with any questions about privacy.