Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy states that Writer collects identifiers including name, email address, company name, and job title, as well as usage activity data including features accessed, actions taken, and frequency and duration of platform use.
This analysis describes what Writer's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the categories of personal information Writer collects directly, which forms the basis for applicable GDPR, CCPA, and CPRA data subject rights obligations and data mapping requirements for enterprise compliance teams.
The updated policy removes detailed disclosures that previously explained five cookie categories (strictly necessary, functional, performance, targeting), their purposes, and user controls. The revised policy retains only a brief statement that Writer uses cookies to enhance navigation, analyze usage, personalize experience, and assist in advertising, but no longer provides the granular categories, opt-out procedures, or explanation of what data each type collects. Users can no longer reference specific cookie management options, targeting cookie opt-out procedures, or detailed functional descriptions within the policy itself.
View change record →The removal of this explicit disclosure about collection scope reduces transparency regarding what personal data Writer collects and how it tracks user behavior.
View full change record →Removed explicit mention of password, User Content, device/log information, payment information, and third-party integrations; replaced with more general language about usage analytics and job title.
View full change record →Under these terms, users who create accounts or use Writer's platform provide identifiers and generate usage activity data that the policy states Writer collects and retains. The agreement establishes this collection as a condition of platform use.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Monitoring
Writer has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include your name, email address, company name, job title, and any other information you choose to provide. We also collect information about your use of our services, including the features you use, the actions you take, and the time, frequency, and duration of your activities.Excerpt from Writer's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 13/14 disclosure obligations for EU/EEA users and CCPA/CPRA disclosure requirements for California residents, both of which require specific notice of data categories collected at or before the point of collection. The FTC Act's prohibition on unfair or deceptive practices is also relevant to the accuracy and completeness of these disclosures. (2) GOVERNANCE EXPOSURE: Medium. The breadth of usage activity collection (features, actions, frequency, duration) covers behavioral profiling data that may require specific legal bases under GDPR and may constitute personal information subject to CCPA/CPRA opt-out rights, depending on how such data is used downstream. (3) JURISDICTION FLAGS: EU/EEA users have GDPR rights including access, rectification, and erasure tied to this collection; California residents have CPRA rights to know the specific pieces and categories of personal information collected. Illinois, New York, and other state privacy law jurisdictions may impose additional disclosure obligations as state comprehensive privacy laws expand. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams should confirm that Writer's data processing agreements address this collection scope and specify retention periods, deletion obligations, and permitted purposes, particularly for behavioral and usage data that may inform AI model training. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Writer's data mapping documentation covers all identified collection categories, that retention schedules are defined for each category, and that consent or legitimate interest assessments are documented for EU deployments.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the categories of personal information Writer collects directly, which forms the basis for applicable GDPR, CCPA, and CPRA data subject rights obligations and data mapping requirements for enterprise compliance teams.
Under these terms, users who create accounts or use Writer's platform provide identifiers and generate usage activity data that the policy states Writer collects and retains. The agreement establishes this collection as a condition of platform use.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Writer.