Who we are
EchoWrite is a LinkedIn ghostwriting tool operated by Lee Harrison, trading as EchoWrite (“we”, “us”, “our”). Our service is accessible at echowrite.co.uk. You can contact us at hello@echowrite.co.uk.
What data we collect
- Email address — Used to create your account and send you service emails. We never sell it or share it with third parties for marketing.
- Voice transcript — When you record a voice note, we transcribe it using OpenAI Whisper. The audio file is deleted immediately after transcription. We store the text transcript to build your voice profile.
- Audio hash — Before deleting your audio, we generate a SHA-256 cryptographic fingerprint. This is stored as proof the recording existed — it cannot be used to reconstruct your voice.
- Generated posts — Posts you generate are stored so you can access your history. You can delete your account at any time to remove them.
- Stripe payment data — If you subscribe, payment is handled by Stripe. We store a Stripe customer ID. We never see or store your full card details.
- Usage data — We track how many posts and API calls you make per day to enforce fair use limits. We do not use third-party analytics tracking.
Why we collect it
We process your data on the following legal bases under UK GDPR:
- Contract — to provide the service you signed up for.
- Legitimate interest — to prevent abuse and improve the service.
- Legal obligation — to comply with applicable law.
Who we share it with
- Supabase — database and authentication. EU West (Ireland) region.
- OpenAI — voice transcription via Whisper API. Audio is sent for transcription and not retained by us beyond the transcription call.
- Anthropic — post and comment generation via Claude API.
- Stripe — payment processing. Subject to Stripe’s own privacy policy.
- Resend — transactional email delivery.
- Vercel — application hosting. We do not log individual requests beyond standard server logs.
We do not sell, rent, or share your data with any other third party.
AI-generated content disclosure
Posts generated by EchoWrite are produced using large language models (Anthropic Claude). Each post is generated using your voice profile as input. In compliance with the EU AI Act, generated content is tagged as AI-assisted in our provenance receipt. We do not use your data to train any AI model.
How long we keep it
We retain your data for as long as your account is active. If you delete your account, we delete your profile, voice profiles, and generated posts within 30 days. Stripe retains payment records as required by law.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, email hello@echowrite.co.uk. We will respond within 30 days. If you are unhappy with how we handle your data, you can complain to the ICO.
Cookies
EchoWrite uses one strictly necessary session cookie to keep you signed in. We do not use analytics cookies, advertising cookies, or any third-party tracking scripts. No cookie consent banner is required.
Changes to this policy
If we make material changes we will notify you by email at least 14 days before they take effect. The date at the top of this page always reflects the latest update.