Privacy notice
What Crierwick keeps about you, why, who else handles it, and how to have it removed. Last changed 27 October 2026.
Who I am
Crierwick is run by me, Benjamin Iannotta, from the UK. I decide what Crierwick keeps and why, so I am the person responsible for your personal data under UK data protection law. I can read everything Crierwick keeps, to run it and to put faults right.
To reach me, email hello@crierwick.com.
What I keep, why, and for how long
Each line names the reason the law accepts for keeping it. The law calls that reason a lawful basis.
| What | Why I keep it | Reason the law accepts | How long |
|---|---|---|---|
| Your email address, and when your account was made | To sign you in and to write to you about your account | Contract: it is how I give you what you signed up for | Until your account is deleted |
| Your sign-in: the one-time link made for you, the address you typed, and the one cookie that keeps you signed in. The records hold a scrambled copy of the link, never the link itself. The link itself, with your address, is also written to a private file on the server | So only you can open your account | Contract | A link works once, for 30 minutes, and its record is removed once it is a day old, the next time anyone asks for a link. The private file is kept until I clear it. The cookie lasts 30 days, or until you press Sign out, which also removes its record |
| Your workspace, and who is in it: each person's role, who added them and when | To keep each business's work apart from every other | Contract | Until your account is deleted |
| What you tell Crierwick about your business: its name, audience, goal, tone, what a reader should do, how each feature behaves and your post settings | So the services write about your business and nothing else | Contract | Until your account is deleted |
| What the services make for you: every draft and earlier version, who asked for it, who approved it and when, each job's record and how much AI it used, and the words of any refusal from the AI service | So you can review, go back and see what was done | Contract | Until your account is deleted |
| What you put in for a service to work on, such as a list of leads, comments, emails or notes, and reports you give me, such as a Search Console export | To do the job you asked for | Contract | Until your account is deleted |
| Each message waiting to go out: where it goes, its subject and its exact words | So nothing goes out except the words you approved | Contract | Until your account is deleted |
| The list of addresses that asked not to be written to: the address, when and how it was added | So an address that said stop is never written to again | A fair reason of my own (legitimate interests), which is respecting that request | As long as Crierwick runs, so the request is still honoured |
| The keys and connections you give Crierwick, such as your own email key or LinkedIn connection | To send and post for you, only when you have approved it | Consent: you choose to connect each one | Until you ask me to remove it or your account is deleted. Writing to me to take a connection away is your way of withdrawing consent |
| Nightly copies of the app's records (everything above except your keys and the private sign-in file, which are not copied) | So Crierwick can be put back if the server is lost | A fair reason of my own (legitimate interests), which is keeping your work safe | On the server: the app's own copy for 7 days, and the backup copies for 14 days, with the first of each month kept for 6 months. At Backblaze, locked: 31 days. On my own computer: 7 days |
| What you send me at hello@crierwick.com: your address and your message | To answer you | A fair reason of my own (legitimate interests) | Until you ask me to delete it |
| Payment records, once payment is switched on | To keep the records the law requires of me | Because the law says I must (legal obligation) | For as long as the law asks a business to keep its sales records, at least 5 years after the 31 January deadline for the tax year |
I do not ask you for a password, and I never see your card number. There is no advertising and no tracking. This website sets no cookies, loads nothing from any other company and keeps no record of who visited. The app's own program writes no record of the pages you open. When something breaks, it writes an error report to the server, which may name the page.
People you write to with Crierwick
When you use a service to write to or about other people, such as leads, people who comment, or people who reply, you decide who they are and why you contact them, so you are responsible for their details and for having a good reason to contact them. I handle those details for you, only to do what you ask, and I am responsible for keeping them safe. For your own details, and for what I keep to run Crierwick, I am the one responsible. I keep their details in your workspace with the rest of your work. Every email carries an unsubscribe link and your postal address. If someone unsubscribes, their address goes on my list of addresses not to write to. If someone asks me about details held for you, I pass the request to you.
The app reads nothing from your mailbox, calendar, phone or Facebook page. It works on what you put in. If that ever changes, I change this page first.
Who else handles it
| Company | What for | What it receives |
|---|---|---|
| Hetzner | Rents me the server in Nuremberg, Germany that holds everything on this page. Before customers join, Crierwick moves to a server of its own, still rented from Hetzner, and I change this line | Everything above |
| Anthropic | Writes drafts | For each job, the facts about your product, its audience, goal and tone, and the instructions for the draft. It sends back the draft |
| Resend | Sends email when email is switched on: your own emails from your own Resend account, and later the sign-in emails | The address and words of each email |
| Receives a post and its picture, only after you have approved it, through your own LinkedIn connection | The approved post, its picture and your connection | |
| Backblaze | Holds the locked copies | A copy of everything above, locked so Backblaze cannot read it |
| Porkbun | Holds the address crierwick.com and passes hello@crierwick.com on to my mailbox | What you write to hello@crierwick.com |
| Stripe | Will take payment when it is switched on | Your card details and the amount. I never see the card number |
I do not sell your details or share them with anyone else, and no other AI service is used for your work. Each company's own terms and privacy notice apply to what it handles.
Sending data abroad
Anthropic, Resend and Backblaze are companies in the United States, so what I send them leaves the UK. Resend handles it under the UK's approved contract terms for sending data abroad. Backblaze says it complies with the EU-U.S. Data Privacy Framework and its UK Extension, and offers a data processing agreement for people in the UK. Where a job runs on Crierwick's paid Anthropic account, Anthropic's data processing terms apply: they are part of its commercial terms and use standard contractual clauses. The Hetzner server is in Germany.
Your rights
You can ask me for a copy of what I keep about you, to correct it, to delete it, to limit how I use it, to move a copy to someone else, or to object to how I use it. Write to me from the address you signed up with. I answer within one month. There is no Delete button or download button in the app yet, so I do these myself when you write.
If I delete your account, I remove your workspace and everything in it from the app. The nightly copies drop away as they reach the ages above. The addresses on the list of addresses not to write to stay, so they are still left alone. Payment records stay for as long as the law asks.
Where I rely on your consent, you can take it back at any time by removing the connection or by writing to me. Taking it back does not undo what was done while it stood.
No decision about you is made by a computer alone. The services write drafts, and a post or email goes out only after a person has approved its exact words. The automatic approval switch an owner can turn on for a service is off until they turn it on, and it approves nothing for sending.
If you are unhappy with my answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See the cookie notice.
Changes
When this page changes, I put the new date at the top.