Last updated: April 29, 2026 · Effective: April 29, 2026

This policy explains how WriteFlow collects, uses, stores, and deletes data when providing writing generation, Worldview, chapter memory, account, and payment services. This policy covers only privacy and data handling; for usage rules, refunds, account suspension, and disclaimers, please see the Terms of Service.

• Email address: used for registration, login, email verification, password reset, and account notifications.
• Password: WriteFlow does not store plaintext passwords, only a password hash used for login verification.
• Username, avatar, and invite code: stored only when you actively set or use the relevant features.
• Login session: a session token is generated after login to identify whether you are signed in.

• Novel text: including your input, plot guides, AI-generated output, and generation history.
• Worldview content: including world name, description, platform/tag locks, character cards, items, factions, locations, and other settings.
• Chapter content: including chapter outlines, chapter statuses, chapter generation records, chapter summaries, and recent prose paragraphs.
• Writing Memory: including the summaries, state tracking, foreshadowing, echoes, mysteries, character states, relationship values, and next-chapter suggestions you confirm and save.
• Generation parameters: including platform style, tags, length, Pro parameters, Worldview toggle, and minimal metadata needed for debugging.

• IP addresses: WriteFlow generally does not use IP for user profiling; Cloudflare, payment platforms, AI service providers, or security logs may briefly process IP addresses for network transmission, security, risk control, and incident investigation.
• Frontend error logs: when a page error occurs, the error type, message, code location, page path, and browser environment may be reported for bug fixes; novel body text is not proactively included.
• Quota and billing ledger: including precharges, extra charges, refunds, check-in rewards, invite rewards, payment top-ups, balances, and fields required for billing export.
• Feedback content: text, issue descriptions, and contact information you actively submit through the in-app feedback feature.

WriteFlow uses Cloudflare Pages Functions and Cloudflare D1 to store and process accounts, Worldview data, Writing Memory, history records, billing ledgers, and operational logs. Cloudflare D1's official security documentationindicates support for encryption in transit and at rest; specific security capabilities are based on Cloudflare's public statements.

By default, generation requests are sent to the DeepSeek API. If you enable a custom API, requests are sent to your specified third-party OpenAI-compatible service provider. The data sent may include your input text, Worldview cards, chapter context, Writing Memory, prompts, and necessary parameters. How third-party providers store, audit, or process these requests is governed by their own policies. DeepSeek's official privacy policyalso notes that downstream developers should disclose their data handling practices to end users.

WriteFlow uses Afdian to handle payment redirects and payment confirmation. During payment, Afdian processes payment-required information such as orders, payment accounts, and payment statuses. WriteFlow locally stores order numbers, products, amounts, payment statuses, and top-up records for credit granting, billing queries, and exception reconciliation.

• WriteFlow does not use your novel text, character cards, settings, chapter content, or Writing Memory to train WriteFlow's own models.
• WriteFlow does not sell your creative content or provide your private creative content to advertisers for profiling.
• The default AI service provider and your chosen custom API service provider may process request content according to their own policies; WriteFlow cannot make commitments on behalf of third parties regarding their training, retention, or audit rules.
• If you do not want content sent to the default AI service provider, you may use a custom API or refrain from submitting sensitive text.

• View and correct: you can modify your username, avatar, email, and password on your Profile page, and manage your Worldview, character cards, chapters, and settings on the Worldview page.
• Export: you can export your generation history in settings, and export your billing ledger on the Profile billing page.
• Delete history: you can delete generation history in settings; delete worldview, chapters, cards, and related memory on the Worldview page.
• Delete account: you can delete your account in the "Danger Zone" section of your Profile page. After deletion, your account and associated data will be deleted and cannot be recovered.
• Manual requests: for refunds, appeals, exceptional data handling, or other export/deletion assistance, contact WriteFlow via the in-app "Feedback & Suggestions" feature.

This policy may be adjusted as features, service providers, or compliance requirements change. If material changes occur, WriteFlow will make reasonable efforts to notify you via in-app notices or page updates. You may raise privacy, data deletion, export, or security concerns through the in-app "Feedback & Suggestions" feature.

Related document: Terms of Service