Last updated 3 October 2026
Privacy Policy
This policy explains what Handwriter collects, why, and what you can do about it. Handwriter is run by Aditya, an individual in India. We collect as little as we can and never sell your data.
What we collect
- Account details: your email address, the name you give us (optional), your password, stored only as a one-way hash, and when you agreed to these terms and this policy.
- Your documents: the text you enter, the settings you choose, and the pages generated from them, so you can view and download them again.
- Payments: what you bought, the amount and the payment reference. Your card, UPI or bank details go directly to our payment partner, Razorpay, under its own privacy policy; we never see or store them.
- Technical data: a sign-in cookie (see below), and IP addresses kept briefly in memory to prevent abuse.
Cookies and storage
- One cookie keeps you signed in. It's essential: it's set only when you sign in, page scripts can't read it, and it lasts up to 60 days or until you sign out.
- Your browser keeps a few things on your device: your unsaved draft and its settings, your light or dark theme, your printer alignment, and whether you've closed the "install the app" banner. They never leave your device, and clearing this site's data in your browser removes them.
- When you pay, Razorpay's checkout may set its own cookies, under its privacy policy.
- No analytics, advertising or tracking cookies. There's nothing to opt out of.
Why we use it
To provide the service (generating, storing and delivering your pages), to manage your account and purchases, to prevent fraud and abuse such as account sharing, to answer you when you contact us, and to meet legal obligations. Your email address is used for your account: sign-in codes, password resets, and gifts or giveaway prizes your account receives. If you win a giveaway we email you, and any public list of winners shows only part of your address. We don't send marketing emails without asking you first, and we never sell your address. We do not use your documents to train AI models, and we do not read them except when you ask us to help with a problem or the law requires it.
Who processes it
We use trusted providers to run Handwriter: cloud hosting (Google Cloud and Cloudflare), a database host (Neon), Razorpay for payments, and Brevo (Sendinblue SAS) to deliver our emails, such as sign-in codes and password resets. They process data only on our behalf. Some of their servers may be outside India. We may disclose data if required by law or a valid order of a court or authority.
How long we keep it
Your account and the documents you unlock are kept until you delete them. Documents you never unlock are deleted automatically 14 days after you create them. Deleting your account (from the Account screen in the app) deletes your documents and personal details; payment records are kept as long as tax and accounting law requires.
Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable law, you can ask to access, correct or erase your personal data, withdraw consent, or raise a grievance. Most of this you can do yourself in the app; for anything else, email [email protected].
Security
Connections are encrypted, passwords are hashed, documents are private to your account, and download links expire. No system is perfectly secure, so please use a strong password you don't use elsewhere.
Children
Handwriter is not intended for children under 18 without a parent's or guardian's consent.
Changes and contact
We'll update this page if our practices change; the date at the top shows the latest version. Questions or grievances: [email protected].