Privacy Policy — AuthorOS

Privacy Policy

Altarus Publishing Ltd  |  Last updated: June 2026

This policy explains what personal information we collect when you use authoros.app, how we use it, and what rights you have. We keep things straightforward — we collect only what we need and we do not sell your data.

Altarus Publishing Ltd is the data controller for information collected through this site. Our registered address is in Cyprus. We process data in accordance with the EU General Data Protection Regulation (GDPR) and applicable UK data protection law.

What information we collect

Email address. When you use Word Plan Builder, sign up to the WordTracker waitlist, or subscribe to any AuthorOS service, we ask for your email address. This is the primary piece of personal data we collect.

Name. Some opt-in forms ask for your first name so we can address you personally in emails. This is optional where indicated.

Account information. If you create a paid subscription account, we store your email address, account preferences, and subscription status. We do not store payment card details — payments are handled by a third-party payment processor (Stripe).

Writing and project data. If you use WordTracker or AuthorOS Draft, we store the data you enter — such as word count targets, session logs, and project details. This data is yours and exists solely to provide the service to you.

Usage data. We collect basic analytics about how the site is used — pages visited, time on site, and general location at country level. This data is aggregated and does not identify you individually. See the Cookie Policy for more detail on how this is collected.

How we use your information

  • To deliver the writing plan or resource you requested
  • To send you emails you have signed up for — writing guides, product updates, waitlist notifications
  • To operate and improve the platform and tools
  • To manage your subscription and process payments
  • To respond to questions or support requests you send us
  • To comply with our legal obligations

We do not use your data for automated decision-making that has any legal or significant effect on you.

Legal basis for processing

We process your data on the following bases under GDPR:

  • Consent — when you opt in to receive emails or sign up to a waitlist
  • Contract performance — when you have a paid subscription and we need your data to provide the service
  • Legitimate interests — for site analytics and product improvement, where this does not override your rights

Email marketing

We use MailerLite to manage our email list and send communications. Your email address and, where you provided it, your first name, are stored in MailerLite. MailerLite is GDPR-compliant and processes data in accordance with its own privacy policy.

Every marketing email we send includes a clearly visible unsubscribe link. You can opt out at any time and at no cost. We will not send you marketing emails if you have not opted in.

Who we share your data with

We do not sell your personal data. We share it only with:

  • MailerLite — to manage and send emails
  • Stripe — to process subscription payments securely
  • Hostinger — our hosting provider, where the website and associated data are stored

All third-party providers are contractually required to handle your data securely and only for the purposes we have specified.

We may disclose your information if required to do so by law, or to protect the rights and safety of users or the business.

International data transfers

Some of our service providers process data outside the EU and EEA. Where this is the case, we rely on Standard Contractual Clauses or other appropriate safeguards to ensure your data is adequately protected.

How long we keep your data

We keep your email address and associated data for as long as you remain subscribed. If you unsubscribe or ask us to delete your data, we will remove it within 30 days, except where we are required by law to retain it for longer (for example, billing records).

Writing and project data stored in paid products is retained for the duration of your active subscription. On cancellation, we will retain it for 30 days to allow for any reactivation, then delete it.

Your rights

Under GDPR and applicable data protection law, you have the following rights:

  • Right of access You can ask us what personal data we hold about you.
  • Right to rectification You can ask us to correct inaccurate data.
  • Right to erasure You can ask us to delete your data, subject to any legal retention obligations.
  • Right to restrict processing You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability You can ask us to provide your data in a portable format.
  • Right to object You can object to processing based on legitimate interests.
  • Right to withdraw consent Where processing is based on consent, you can withdraw it at any time without affecting anything that happened before withdrawal.

To exercise any of these rights, contact us at hello@authoros.app. We will respond within one month. You also have the right to lodge a complaint with the relevant supervisory authority in your country.

Children

AuthorOS is not intended for use by anyone under the age of 16. We do not knowingly collect data from children. If we become aware that a child has provided personal data without parental consent, we will delete it promptly.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the site after a change constitutes acceptance of the updated policy.

Data controller contact

Altarus Publishing Ltd
authoros.app
Email: hello@authoros.app