Data Deletion and Retention Policy

Last updated: 2 October 2026 · Version: 1.1

This policy explains how long Zpark Pty Ltd (ABN 86 688 518 069), trading as WriteAuto, keeps your data, how you can delete it, and what happens when you do. It forms part of our Privacy Policy and Terms and Conditions, and is also our data deletion instructions page for users who sign in with Facebook or Google.

Disclaimer: Retention periods below are maximums for our live systems unless stated otherwise. We may keep data longer where required by law, to resolve disputes, to enforce our Terms, or to protect against fraud or security threats, and only for as long as that need lasts.

1. Principles

  • We keep personal information only as long as we need it for the purposes in our Privacy Policy or as the law requires.
  • When data is no longer needed, we delete it or de-identify it so it can no longer identify you.
  • You can delete your Account and data at any time.

2. Retention schedule

DataKept whileAfter Account deletion or end of purpose
Account information (name, email, hashed password, sign-in identifiers)Your Account is activeDeleted within 30 days
Business and brand information (brand name, industry, audience, website, competitor URLs, logo, colours)Your Account is active, or until you delete itDeleted within 30 days
Connected platform credentials (for example, WordPress application passwords)The connection is activeDeleted immediately when you disconnect the site or delete your Account
Generated content and research resultsYour Account is active, or until you delete themDeleted within 30 days
Team member invitationsAccepted, revoked or expiredDeleted within 30 days of expiry or revocation
Billing records (Stripe reference IDs, plan, invoices, transaction history)Your Account is activeKept for 7 years from the transaction for tax and accounting obligations
Support and complaint correspondenceRequest is openUp to 3 years after the last message
Application and security logsNeeded for security and troubleshootingUp to 90 days
Error reports (if error monitoring is enabled)Needed to fix errorsUp to 90 days
Database backupsRolling backup windowOverwritten within 30 days
Marketing preferences and consent recordsYou are subscribedUnsubscribe record kept so we do not email you again; consent evidence kept up to 2 years after withdrawal
Inactive free or unpaid AccountsUp to 24 months without loginWe may delete after 30 days’ email notice

Disclaimer: Deleted data may remain in encrypted backups until they are overwritten in the normal backup cycle. Backup copies are not used for any purpose other than disaster recovery, and are deleted on schedule.

WordPress plugin data

DataWhere it is keptHow long
Connection keyYour WordPress site; our database (encrypted)Until you disconnect, generate a new key, uninstall the plugin, or delete the connection in WriteAuto
Site details and chosen authorOur database, with the site connectionReplaced each time the connection is checked; deleted with the connection
Category list and titles and links of your published postsNot stored by usUsed only at the time of publishing
Post results (post ID, link, status, SEO fields set)Our database, with the articleAs long as the article is kept in WriteAuto
Plugin activity logYour WordPress site onlyUp to 90 days or 1,000 entries; removed when you uninstall the plugin
Plugin update check requestsOur server logsUp to 90 days
Posts and SEO settings published to your siteYour WordPress siteUntil you delete them; not removed by disconnecting, uninstalling or deleting your WriteAuto Account

3. Data held by third-party providers

Some data is also processed by our service providers (listed in our Privacy Policy), who keep it under their own retention policies:

  • Stripe keeps payment records as required by financial regulations and card network rules.
  • AI providers may retain prompts and outputs for a limited period for abuse monitoring or legal compliance under their terms.
  • Email providers keep delivery logs for a limited period.
  • Google and Facebook keep information about your use of their sign-in under their own policies.

When you delete your Account, we delete the data we control and, where available, instruct our providers to delete it too.

Disclaimer: We cannot delete data held independently by third parties, such as Stripe, Google or Meta, and we are not responsible for their retention practices. You may contact them directly to exercise your rights.

4. How to delete your data

4.1 Delete individual items

You can delete individual brands, articles, posts, research results and connected sites from within the Service at any time.

4.2 Delete your Account

  1. Log in to WriteAuto.
  2. Cancel any active Subscription in the billing settings.
  3. Go to Account settings and choose Delete account.
  4. Confirm the deletion.

If you cannot access your Account, email [email protected] from your registered email address with the subject “Delete my data”. We may ask you to verify your identity.

4.3 Users who signed in with Facebook or Google

You can delete your WriteAuto data using the steps above, or by emailing [email protected] with the subject “Delete my data”. You can also remove WriteAuto’s access from your account: in Facebook, go to Settings and privacy → Settings → Apps and websites, select WriteAuto and remove it; in Google, go to myaccount.google.com → Security → Your connections to third-party apps and services. Removing access stops future sharing but does not by itself delete data we already hold, so please also request deletion.

4.4 What happens next

  • We confirm your request by email within 5 business days.
  • We complete deletion from live systems within 30 days and tell you when it is done.
  • Your Subscription ends, and your data cannot be recovered after deletion.
  • Content already published to your website or other platforms is not removed. You control those platforms and must delete it there.

Disclaimer: Account deletion is permanent. Export any content you want to keep before deleting. We are not liable for loss of content after a deletion you requested.

5. Exporting your data

Before deleting, you can copy or export your generated content from the Service. You may also request a copy of your personal information by emailing [email protected]. We will provide it in a commonly used, machine-readable format within 30 days.

6. When we may keep data after a deletion request

We may keep limited data after a deletion request where needed to:

  • comply with tax, accounting or other legal obligations;
  • establish, exercise or defend legal claims;
  • investigate fraud, abuse or breaches of our Terms; or
  • keep a suppression record so we do not contact you again.

We keep only the minimum necessary and delete it when the need ends.

7. Changes to this policy

We may update this policy from time to time. Material changes will be notified as set out in our Terms.

8. Contact

Data requests: [email protected] (subject “Delete my data” or “Privacy Request”)

Zpark Pty Ltd (trading as WriteAuto), ABN 86 688 518 069, Adelaide, South Australia, Australia.