Last updated: August 2025
Introduction
Welcome to Uniwriter’s Privacy Policy. This policy explains how Uniwriter (owned and operated by Business Bliss), collects, uses, and protects your personal information when you use our website and services.
Data Controller: The data controller for Uniwriter is Business Bliss (the company that owns Uniwriter). This means Business Bliss is responsible for deciding how your personal data is used and ensuring its protection. If you have any questions or requests about your data, you can contact us at hello@uniwriter.ai.
By using Uniwriter, you agree that you have read and understood this Privacy Policy. We encourage you to read it carefully. If you do not agree with any part of this policy, please discontinue use of our services.
Information We Collect
We only collect personal information that we need to provide and improve our services to you. The types of data we collect include:
- Account Information: When you sign up, we collect your email address and a username. We use these to create and administer your account, let you log in, and communicate with you about your account or orders. We may also collect your name or contact details if you provide them (for example, if you contact support).
- Essay Content and Queries: If you request an essay or use our writing services, we collect the information you provide related to that request. This may include the essay title or question, subject area, and any additional instructions or content you submit. We use this information to generate the essay or plan you requested. We also store the resulting essay or plan.
- Basic users: If you use our basic (free) essay service, the essays or content generated may be published publicly on our website alongside your username. This allows others to view examples of essays. Please avoid including any sensitive personal information in content you wish to be published publicly.
- Advanced/Premium users: If you use our paid advanced or premium services, any essays, plans, grade guarantee reports, referencing reports, or other materials we provide to you are stored privately in your account area. These are not publicly visible and only accessible to you (and our staff who maintain the service).
- Marking Service: If you order our essay marking service, you will submit your own essay to us for feedback. We collect and store that essay and our marking feedback in your private account area so you can review it. This content remains confidential and is not shared publicly.
- Payment Information: If you choose a paid plan or service, we will process your payment via our third-party payment processor. We use Stripe for secure payment processing. You will provide your payment details (such as credit/debit card information) directly to Stripe through our website’s checkout. Uniwriter itself does not store your full card details. We receive from Stripe only limited information about the transaction (such as your name, email, the last four digits of your card, card type, and payment status) to record that payment was made. All sensitive payment data (like card number, CVC) is handled by Stripe in accordance with their security and privacy policies. For more details, see Stripe’s Privacy Policy linked above.
- Cookies and Usage Data: Like most websites, we use cookies and similar tracking technologies to operate and improve our site. Cookies are small text files stored on your device. They help us:
- Keep you logged in and remember your preferences (so you don’t have to re-enter information).Understand how you use our site (which pages you visit, what features you use) so we can improve usability and content.Provide certain features like saving your essay drafts or settings.
- Logs and Device Information: Our servers (hosted by EuroVPS) may automatically record some information when you use Uniwriter, including your Internet Protocol (IP address), browser type, device information, and timestamps of visits. We use this information for security (e.g., to detect misuse or fraud), to diagnose technical issues, and to analyse overall usage of our platform. This kind of data is generally aggregated and not linked to your identity, but IP addresses might be considered personal data in some cases. We treat it with confidentiality and security.
- Communications: If you contact us via email, support tickets, or chat, we will collect whatever information you choose to give us (such as your name, email address, and the content of your message). We use this data to respond to you and resolve your inquiries. We may keep records of our communications for training, quality assurance, and to have a history of your requests (which helps if you contact us multiple times).
We do not collect any special categories of personal data about you (such as race, religion, health, etc.), unless you voluntarily include such information in the content you provide (we advise you not to include sensitive personal data in your essays or profile). Uniwriter is not intended to process any sensitive personal information, and you should refrain from providing it through our services.
How We Use Your Personal Data
We will never sell your personal data to anyone – period. We only use your information for the purposes of running and improving Uniwriter and providing our services to you, as described in this policy. In particular, we use personal data (as outlined above) for the following purposes:
- Providing Our Services: We use your information to deliver the Uniwriter services you request. This includes using your email and username to create your account and let you log in, and using your submitted essay questions or content to generate essays or essay plans. If you use the marking service, we use your submitted essay to provide feedback. Essentially, we process your data to fulfil our contract with you – to give you the services and features you expect when you use Uniwriter.
- Publishing User-Contributed Content: For basic/free users, when you request an essay, the generated essay along with your username may be published publicly on our website. We do this to showcase sample essays and allow knowledge sharing among the community. Legal basis: we consider this part of providing the service you opted for (you chose a plan that involves public posting), and it is within our legitimate interests to grow our library of content. If you prefer to keep your essays private, you may choose an advanced or premium service instead. (If a public essay inadvertently contains personal data and you want it removed/edited, please contact us and we will assist.)
- Account Management & Communication: We use your email and other contact info to communicate with you about your account and orders. This includes sending you service-related messages such as registration confirmations, password resets, notifications about your essay being ready, updates on any service issues, or responses to support queries. We might also send you reminders if you saved an essay draft or left something in your request without finishing. These communications are part of our service to you. We may also send you information about changes to our terms or policies, or important security notices when necessary (these are not marketing, but essential notices).
- Payment Processing: When you make a payment for our services, we use your personal data to process that transaction (via Stripe). For example, we might send your name and email to Stripe to help identify your payment, and receive confirmation back. We also keep records of your purchases (what service you bought and when) to manage your orders and for financial record-keeping (legal obligation for accounting/tax). Payment data is handled securely, and as noted, card details are processed by Stripe – we never see or store your full card number or security code ourselves.
- Providing Customer Support: If you reach out for help or feedback, we will use the information you gave us to assist you. For instance, if you email us about a problem, we will use your account info and the details you provided to troubleshoot and respond. We may ask for additional information if needed to resolve your issue. All support communications are kept confidential and used only for helping you and improving our services.
- Improving and Developing Our Services: We continually seek to make Uniwriter better. We may analyse usage data, feedback, and aggregated user behavior to understand how our services are used. For example, we might look at what topics are most requested or how users navigate the site, so we can improve content, user interface, and features. We might also use some of the essays or questions (in anonymised form) to improve our AI writing algorithms or generate new resources. Any analysis for improvement is done under our legitimate interest in running a reliable, effective service. We anonymise or aggregate data wherever feasible so it no longer identifies individual users when using it for analytics or product development.
- Marketing and Promotions: We may use your email or contact details to send you marketing communications about Uniwriter’s latest features, offers, newsletters, or related services that we think may interest you. For example, we might email you with a special discount, new writing tools we launch, or tips for using the service. We will only send you marketing emails if you have either: (a) actively subscribed or consented to receive them, or (b) if the law otherwise permits us to send occasional updates to you as a prospect or an existing customer (under what’s sometimes called “legitimate interests” or the “soft opt-in” rule for electronic marketing). You always have the right to opt out of marketing messages – we include an “unsubscribe” link in every promotional email, and you can also contact us directly to be removed from marketing lists. We will honor any opt-out request promptly. (Service-related communications as described above are not considered marketing and thus may still be sent as needed.)
- Security and Fraud Prevention: We use information (like IP addresses, logging info, and user account activity) to keep our platform secure. This includes monitoring for suspicious or fraudulent activity, debugging to fix errors, protecting against attacks (for example, multiple failed logins might be analysed to prevent unauthorized access), and enforcing our Terms and Conditions. We also reserve the right to use and disclose personal data to the extent necessary to meet any applicable law or regulatory requirement, or to respond to lawful requests from authorities (such as court orders or law enforcement investigations). In such cases, we will only provide the data required by law and will inform you if permissible.
- Legal Compliance: We process and retain certain data to comply with our legal obligations. For example, financial transaction records are kept for accounting and tax purposes as required by law. If you exercise your data protection rights (like requesting deletion or disclosure of your data), we will process your request and maintain records of our compliance. We may also use personal data to defend our legal rights or to handle any disputes — for instance, to address any complaints you raise or to enforce agreements.
- Business Transfers: If in the future, Uniwriter or Business Bliss undergoes a business transaction such as a merger, acquisition, or sale of the website or its assets, your personal data may be transferred to the new owner or partner as part of that deal. This would be done only with appropriate confidentiality protections in place and under the condition that the data is used in a manner consistent with this Privacy Policy (unless you’re notified of changes and given a chance to opt out). The new owner would continue to honour the commitments we have made in this policy regarding your personal information.
Legal Bases for Processing: Under GDPR, we must have a valid legal basis to process your personal data. Depending on the purpose, we rely on one or more of the following bases:
- Performance of a Contract: Most of our data use is to provide you with the services you signed up for. For example, using your essay question to generate content, or your email to create an account, is based on the contract (or agreement) between us to deliver the service. Without this data, we can’t fulfil our obligations to you.
- Legitimate Interests: We process some data for purposes that are in our legitimate business interests, as long as those are not outweighed by your rights and interests. This includes things like improving our service, preventing fraud, and (in some cases) sending you marketing about our own services. When we rely on legitimate interests for marketing, it applies to relevant existing users and always with an easy opt-out option. We carefully consider and balance any potential impact on you and your rights before relying on legitimate interests.
- Consent: We will ask for your consent in situations where we are required to do so. For instance, if in the future we wanted to send marketing from third parties not owned by Business Bliss, we would seek your express consent. If we rely on consent, you have the right to withdraw it at any time (for example, you can opt out of marketing emails by unsubscribing, or withdraw consent for cookies via your browser or our cookie settings). Withdrawing consent will not affect the lawfulness of any processing we already carried out, but will stop that particular processing going forward.
- Legal Obligation: Sometimes we need to process or retain your data to comply with laws or regulations – for example, keeping transaction records for tax, or disclosing information to authorities if legally compelled.
If you ever have questions about the specific legal basis for any particular processing of your personal data, feel free to contact us for more information.
Who We Share Your Data With
We treat your personal information with care and confidentiality. Access to your data within our organisation is limited to staff who need it to perform their duties (for example, support staff who help you, or developers maintaining the system). We also use a few trusted third-party companies to help us run Uniwriter – we only share data with them to the extent necessary for their services, and each of them is contractually obligated to protect your information and use it only for the purposes we specify. We do not share or disclose your personal data to third parties for their own independent marketing or purposes without your consent.
The main third-party service providers we use (and what we use them for) are:
- Payment Processing – Stripe: If you make a payment on Uniwriter, it is processed through Stripe, Inc. We provide Stripe with the information needed to process the transaction (like the purchase amount, your email, and sometimes your name). Stripe will handle your payment details securely in accordance with strict financial industry standards. Importantly, Stripe may act as an independent data controller for the payment information you provide to them, as they need to process your payment and comply with their legal obligations. You can review Stripe’s commitments to data privacy here: Stripe Privacy Policy. We do not sell or pass your personal data to Stripe for any purpose other than processing payments and related activities (like fraud prevention or regulatory compliance).
- Data Backup and Storage – Dropbox: We periodically back up our website database and files to ensure we can recover data in case of technical issues or disasters. These backups may include your personal information (such as your account details, essays, etc.) and are stored securely using Dropbox. Dropbox, Inc. is a cloud storage provider. The backups are encrypted and only accessible by our authorised administrators. We use Dropbox to keep your data safe and retrievable if needed. Dropbox is committed to data security and privacy; you can read more in Dropbox’s Privacy Policy. Rest assured, these backups are for internal use only (for restoration purposes) and are not accessible to other Dropbox users or the public.
- Hosting and Infrastructure – EuroVPS: Our website and databases are hosted on servers provided by EuroVPS (a European hosting company). This means that when you use Uniwriter, your data (including personal data and content) is stored on EuroVPS’s secure servers, which are located in data centres within the European Economic Area (EEA). EuroVPS acts as a data processor by storing and handling data on our behalf. They are required to keep your data secure and confidential according to our instructions and applicable data protection laws. For more information, you can refer to EuroVPS’s Privacy Policy. EuroVPS implements measures like firewalls, monitoring, and backup power to ensure the safety and availability of the servers. We chose a reputable EU-based hosting provider to help ensure your data is handled in compliance with GDPR standards.
- Email and Communications – Google Workspace (Gmail): We use Google Workspace (formerly G Suite) provided by Google, specifically the Gmail service, for our official email communications. When you email us at an @uniwriter address, your message is stored on Google’s email servers. Likewise, when we send you an email (for example, a support reply or newsletter), it is sent through Google’s systems. Google may process metadata about the emails (like timestamps and routing info) as part of providing this service. Google is a globally trusted provider that complies with GDPR through standard contractual clauses and other measures. Personal data in email form is protected by Google’s security (including encryption in transit). Please note, however, that email by its nature is not always end-to-end encrypted; you should avoid sending very sensitive information via email if possible. You can read more in Google’s Privacy Policy for how Google handles data in services like Gmail.
- Analytics and Usage Tracking: (If applicable) We may use third-party analytics tools (for example, Google Analytics or similar) to collect anonymous information about how users interact with our site (as mentioned under Cookies). These tools may set their own cookies or receive certain usage data (like page visits, IP address, device info). This information is used in aggregate form to help us understand traffic and improve the user experience. Any analytics provider we use will be disclosed and will have their own privacy policy.
- Other Service Providers: In addition to the above, we might use other services to help run Uniwriter – for example, an email newsletter service such as Brevo, customer support ticketing system, or live chat provider. If we do so, we will ensure they are also GDPR-compliant and only receive the minimum data necessary. As of the latest update, the core external processors are those listed above. If we add any significant new third-party integrations that involve your personal data, we will update this Privacy Policy accordingly.
We ensure that all third parties we use are bound by appropriate confidentiality and data protection obligations. They cannot use your data for anything other than the specific service they provide to us.
Aside from our service providers, we may also disclose your personal information in a few other circumstances:
- Legal Requirements: If we are under a duty to disclose or share your data to comply with any legal obligation, we will do so. For example, we might have to provide information in response to a court order or a lawful request by public authorities (like the police or regulators). We will carefully review all such requests and only share the minimum data necessary. Whenever permitted, we will inform you of such disclosure.
- Enforcing Our Rights: We may share information if necessary to enforce our Terms and Conditions or other agreements, or to investigate potential violations of those terms. This could include sharing data with legal advisors or law enforcement if someone is attempting to defraud us, attack our systems, or otherwise violate the law in the context of using our services. For instance, if required to investigate abuse of our platform, we might share relevant account data with cybersecurity experts or law enforcement.
- Protection of Others: In rare cases, we might disclose data if we believe it’s necessary to protect the rights, property, or safety of any person. For example, if a user’s content includes credible threats or evidence of self-harm, we might alert appropriate authorities to prevent harm. This would be an exceptional circumstance.
- Business Transfer: As noted earlier, if Uniwriter or Business Bliss is involved in a merger, acquisition, restructuring, or sale of assets, personal data could be transferred to a party involved in the transaction. In such a case, we will ensure the recipient commits to respect your personal data in line with this policy. You will be notified of any change of ownership or use of your personal data, as well as any choices you may have regarding your personal data, if such an event occurs.
Importantly, we do not sell, rent, or trade your personal information to third parties for their own marketing or advertising purposes. Any sharing is only done as outlined above, primarily to provide and support our services to you.
Data Retention – How Long We Keep Your Information
We will not keep your personal data for longer than necessary. How long we retain data depends on the type of information and the purposes for which we use it. These are some key points about our retention practices:
- Active Accounts: If you have an active account with Uniwriter, we will retain your personal information as long as needed to provide you with the services. This means we keep your profile information, saved essays, and other data readily available to you when you log in.
- Dormant Accounts: We reserve the right to delete or anonymise accounts that have been inactive for a prolonged period. Specifically, if you have not logged in or used Uniwriter for 3 years, we may consider your account “dormant.” For security and data minimisation, we may delete dormant accounts (and associated personal data) after about 3 years of inactivity. We will generally try to contact you (via your registered email) before deleting an account for inactivity, but if we cannot reach you or receive no response, the account may be removed. Note: This does not mean we automatically purge everything at exactly 3 years – it means we might periodically clean up old accounts beyond that timeframe. If your account is deleted due to inactivity, any personal data in it will be removed from our live systems. (Backups containing the data may exist for a short period longer until they are rotated out, but those are secured and eventually overwritten as well.)
- Content Publication: If you contributed content that was published publicly (e.g., a basic essay under your username), that content may remain on our site until you or we remove it. If your account is deleted, we might anonymise the public content (for example, remove or pseudonymise the username) rather than remove the essay itself, especially if it’s a useful resource for others. However, you retain the right to request complete removal of content you have posted under your personal account, and we will honor such requests unless we have a compelling reason (legal or legitimate interest) to keep it (which is unlikely for user-generated essays).
- Transaction Records: Purchase and payment records are retained for at least the duration required by law (for example, 7 years under UK tax law for financial records). This is a legal obligation. Even if you delete your account or request erasure, we may need to keep certain financial information in our records until the legal retention period expires. However, such data will be segregated and only used for those legal purposes.
- Communications and Support Tickets: If you contacted us for support, we may retain the correspondence for a certain period (typically up to a few years) in case we need to refer to it. This helps us understand past issues if you contact us again, and also is useful for training and improving support. We will purge old support emails or chats that are no longer needed.
- Backups: Data that is deleted from our live database might still exist in encrypted backups for a short time until those backups are refreshed or destroyed. We have a rolling backup schedule, and old backups are deleted or overwritten periodically. We do not use backup data for any other purpose except restoration. If we restore from a backup, we will re-delete any data that had previously been requested to be deleted, to maintain your choices.
In summary, we keep your data only as long as necessary for the purposes we collected it – providing our service to you, satisfying legal or accounting requirements, or other legitimate purposes described in this policy. When your personal data is no longer needed, we will securely erase it or anonymise it so that you can no longer be identified.
If you have specific questions about our data retention periods for different types of data, please contact us. We can provide more detail or accommodate specific requests where possible (for example, if you want us to delete certain data sooner, we can often do so, as described in “Your Rights” below).
How We Protect Your Data (Security)
We take the security of your personal information seriously. We have implemented a variety of technical and organisational measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption: Our website is protected by HTTPS encryption. This means that any data you transmit to us (such as when you log in or submit an essay question or payment information) is encrypted in transit using SSL/TLS. In plain terms, this scrambles the data so that if it were intercepted, it would be unreadable. We also ensure that sensitive data stored in our databases (for instance, hashed passwords) is encrypted or hashed at rest. Our backup files are likewise encrypted. Whenever we transfer data to third parties (like sending information to Stripe or storing backups on Dropbox), we use secure, encrypted connections.
- Secure Infrastructure: We host your data on secure servers with EuroVPS in Europe, which maintains robust physical and network security. The data centres have security controls such as access restrictions, firewalls, intrusion detection, and regular security audits. EuroVPS adheres to industry standards for data security. Additionally, our use of Dropbox for backups and Google for email means we are leveraging companies that invest heavily in security. Dropbox and Google both have high security standards (including encryption and multi-factor authentication on their end) to protect the data stored with them.
- Access Controls: Internally, access to personal data is limited strictly to personnel who need that information to perform their job (principle of least privilege). For example, our support team can view the information relevant to helping you with a query, but they would not have unnecessary access to other data. All staff with such access are bound by confidentiality obligations. We use strong authentication methods (passwords, 2-factor authentication where possible) for our administrative accounts to prevent unauthorised internal access. We also train our team about data protection and security best practices.
- Monitoring and Testing: We monitor our systems for potential vulnerabilities and attacks. We keep our software and tools up to date to patch security issues promptly. Regular backups (as described) are made so that we can recover data in case of a technical incident. We also periodically review our security policies and incident response plans. If we detect any suspicious activity or breaches, we act swiftly to contain and investigate them.
- Third-Party Security: When we select any third-party service (hosting, payment, etc.), we review their security practices. For instance, Stripe is PCI-DSS compliant (a strict security standard for payment information), and as mentioned, EuroVPS and Dropbox have their own security certifications and measures. We require that any processing of data by third parties is done securely and in compliance with privacy laws via our agreements with them.
Despite all these precautions, it’s important to note that no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. Users also have a role to play in security: please keep your account password confidential and use a unique, strong password. If you suspect any unauthorised access to your account or any security issue, notify us immediately so we can help.
We will notify you and the relevant authorities of any data breach where we are legally required to do so (for example, if a breach occurs that poses a high risk to your rights and freedoms, we will inform you in line with GDPR requirements).
Note on Email: If you correspond with us by email, be aware that emails aren’t always encrypted end-to-end. While our mail servers are secure, the path between email providers may not be fully encrypted. Avoid sending highly sensitive personal data or passwords via email. If you do, it’s at your own risk. We cannot take responsibility for unauthorised access to information while it’s in transit to us. Once we receive your email, we will secure its contents in our environment.
International Data Transfers
Uniwriter uses service providers located in various countries. This means that your personal data may be transferred and stored outside of your home country, including countries outside the UK and the European Economic Area (EEA). For example:
- Our parent company Business Bliss is located in the UAE, which means your data may be accessed or managed from there.
- Some of our third-party processors (Stripe, Dropbox, Google) are U.S.-based companies, meaning your data might be transferred to or through the United States.
- Our hosting provider EuroVPS stores data within Europe (the Netherlands, etc.), which is within the EEA.
Whenever we transfer personal data outside of the UK/EEA, we ensure that appropriate safeguards are in place to protect it, as required by GDPR and UK data protection law. These safeguards may include:
- Standard Contractual Clauses: For transfers to our parent company or to US-based service providers, we rely on the European Commission’s approved Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements. These are legal contracts that commit the recipient of the data to protect it to the GDPR standard, even if local laws are different. Our contracts with Stripe, Dropbox, and Google include such clauses or equivalent safeguards.
- Adequacy Decisions: In some cases, data may go to countries that the European Commission (or UK government) has deemed to have adequate data protection laws, meaning they are approved for data transfer with minimal additional measures.
- Privacy Frameworks: We ensure that providers like Google and Dropbox comply with frameworks such as the EU-U.S. Data Privacy Framework or other certifications, where applicable, to further guarantee protection.
- Our Own Policies: We apply the same high privacy standards to all users globally, regardless of where their data travels. We don’t reduce your rights or our obligations just because your data is transferred.
You can rest assured that we will protect your data no matter where it is processed. We remain responsible for it. If you would like more details about the specific transfer safeguards in place for your data, you can contact us and we will be happy to provide additional information.
Your Rights Under GDPR
As a user of Uniwriter, especially if you are in the UK, EU, or a jurisdiction with similar data protection laws, you have a range of rights regarding your personal data. We are committed to upholding these rights. Below is a summary of your key data protection rights:
- Right to Access: You have the right to request a copy of the personal data we hold about you, as well as information about how we use it. This is commonly known as a “Subject Access Request.” We will provide you with a copy of your data in a commonly used format, usually within one month of verifying your identity (as permitted by law, this period can be extended for complex requests, but we will inform you if that’s the case).
- Right to Rectification: If any of the personal information we have about you is incorrect or incomplete, you have the right to have it corrected. For example, if you change email address or notice an error in your profile information, you can update it in your account settings or ask us to update it. We strive to ensure all data is accurate and will promptly make corrections upon request.
- Right to Erasure: Commonly known as the “right to be forgotten,” you can ask us to delete your personal data. You can, for instance, request account deletion. If you do, we will remove or anonymise data that can identify you, provided we have no legal obligation or overriding legitimate reason to keep it. For example, if you have paid orders, we may need to retain transaction records for financial compliance, but we can delete your account login, profile, and any content not needed for legal reasons. Once we’ve processed an erasure request, your data will typically be expunged from active systems, and we will also ensure it’s removed from backups within a reasonable period. Important: If you request deletion of your account, you will lose access to any essays or materials stored there, so make sure to download anything you wish to keep. If your content was published publicly (basic service essays), we can remove or anonymise it at your request.
- Right to Restrict Processing: In certain situations, you have the right to ask us to stop “active” processing of your data. For example, if you contest the accuracy of your data or have objected to our processing (see below), you can request restriction while we address your concern. Restriction means we would continue to store your data but not use it until the issue is resolved. You might exercise this if, for instance, you want us to keep your account but not use your data for marketing or not process certain content.
- Right to Object: You have the right to object to our processing of your personal data when we are doing so under the basis of legitimate interests. This includes objecting to any direct marketing uses of your data. For example, if you prefer not to receive any marketing emails or promotional communications from us, you can object (unsubscribe) and we will stop sending them. You can also object to any processing for analytical or statistical purposes that is based on our legitimate interest. If we receive an objection, we will consider whether our legitimate grounds for processing override your rights – if not, we will cease the processing in question.
- Right to Withdraw Consent: In cases where we rely on your consent to process data (for example, if you consented to receive a newsletter or to enable certain cookies), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing done before the withdrawal, but it will mean we stop the processing going forward. For instance, you can unsubscribe from marketing emails (which withdraws your consent for marketing) and we will cease sending them.
- Right to Data Portability: You have the right to receive your personal data that you provided to us, in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible. This typically applies to data processed based on your consent or for the performance of a contract. In practice, this could mean if you ask us, we can provide certain data like your account details, or essay content you provided, in a CSV or JSON file that you could then import to another service. Currently, much of your data (like essays) you can already download manually from your account, but we will help with any specific data portability requests as required.
- Rights related to Automated Decision-Making: You have rights to not be subject to decisions based solely on automated processing (including profiling) if those decisions have legal or similarly significant effects on you. Note: Uniwriter provides AI-generated content, but this is a service you request and control; we do not make any legal or significant decisions about you using automation. For example, we don’t algorithmically approve or reject users or grade your essays automatically in a way that affects you legally. If that ever changes, we will let you know and ensure your rights in this area are respected.
To exercise any of your rights, please contact us via email at hello@uniwriter.ai (Attn: Data Protection Officer) with your request. To protect your privacy, we may need to verify your identity before fulfilling the request (for example, by asking you to write from your registered email or provide some identification). We will respond to all legitimate requests as soon as possible, and at least within one month as required by law. If your request is particularly complex or if you have made multiple requests, we may extend this by a further two months, but we will inform you and explain why if that happens.
There is generally no fee for exercising your rights. However, if a request is unfounded or excessive (for instance, repetitive requests without justification), the law does allow us to either charge a reasonable fee or refuse to act. We have never had to do this, and we aim to work with you to provide what you need.
Finally, if you have any concerns or complaints about how we handle your data, please let us know and we will do our best to address them.
Children’s Privacy
Uniwriter is intended for use by university students and adult learners. Our services are not aimed at children under the age of 16 (or the relevant minimum age in your jurisdiction for providing consent to data processing – which is 13 in some countries, including the UK). We do not knowingly collect personal data from children under 13 years old. If you are under 13, please do not use Uniwriter or submit any personal information to us without verifiable parental consent.
If we discover that we have inadvertently collected personal information from a child under 13 (or under 16, if that applies in your region) without proper consent, we will delete that information as soon as possible. Parents or guardians: if you believe your child has provided personal data to us without your consent, please contact us and we will promptly remove it and terminate the child’s account if applicable.
Links to Other Websites
Our website may contain links to websites or services operated by third parties (for example, a link to an academic resource, or the privacy policy links we provided above for Stripe, Dropbox, etc.). Please note that this Privacy Policy applies only to Uniwriter and Business Bliss’s handling of your data. We have no control over and are not responsible for the content, security, or privacy practices of any third-party websites. If you click a third-party link, we encourage you to read that site’s own privacy policy so you understand how they will handle your information. We provide these links for reference or convenience, but that doesn’t imply that we endorse their content or that we assume any responsibility for them.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services or to ensure compliance with legal requirements. If we make significant changes, we will notify you by means of a prominent notice on our website or by email (where appropriate) so that you can review the changes before they take effect.
The “Last updated” date at the top of this policy indicates when the latest revisions were made. New versions of the policy are effective immediately upon being posted here, unless stated otherwise. We encourage you to periodically review this page for the latest information on our privacy practices. If you continue to use Uniwriter after an update, it means you acknowledge the revised policy. If any changes require your consent (e.g. if we ever plan to use your data for a new purpose that requires consent), we will obtain that consent from you.
Contact Us
We hope this Privacy Policy answers your questions about how we handle your data. If you have any further questions or concerns about your privacy or wish to exercise your rights, please do not hesitate to reach out:
- Email: You can contact our team (and our Data Protection Officer) at hello@uniwriter.ai. This is the best way to get a quick response on privacy matters. Please include the subject “Privacy Inquiry” or “Data Subject Request” as appropriate, and detail your request or question.
- Postal Mail: If you prefer, you may write to us at: Business Bliss (Uniwriter) – Data Protection Team, Creative Tower, Fujairah, PO Box 4422, United Arab Emirates. (Please note that postal inquiries may take longer to receive and respond to, especially for time-sensitive requests like data access; email is usually much faster for resolution.)
- Website Contact Form: If our website features a contact form or support chat, you can send a message there as well, and it will be directed to the appropriate personnel.
We will be happy to assist you with any questions about this policy or about the data we hold on you. Your privacy is important to us, and we welcome feedback.
Thank you for trusting Uniwriter. We are dedicated to protecting your personal information and providing a safe, secure service for all our users.
