Privacy Policy – Writly

1) Who We Are

Writly is operated by X Group Prime LLC, located in Doral, Florida. We are a done-for-you cold outreach agency: we find leads for our clients, write the outreach messages, run the outreach across email, SMS, WhatsApp, Instagram, and LinkedIn, and follow up — so that warm replies land in the client's inbox. Clients pay per prospect we contact; there is no monthly subscription.

If you have questions about this Privacy Policy or your data, contact us at hello@writly.io.

2) Information We Collect

We collect the following types of information:

Client account information

• Your name, email address, and phone number
• Your business name and company details
• Payment and billing information (processed securely through Stripe — we do not store full card details)
• Credentials or access you connect so we can send outreach on your behalf (for example, sending mailboxes or messaging accounts)

Lead and prospect data

To run campaigns, we source, enrich, and store business contact information about the prospects a client targets. This may include:

• Business names, contact names, and job titles
• Business email addresses, phone numbers, and messaging handles (for example, Instagram, WhatsApp, or LinkedIn)
• Publicly available business information (for example, websites, business listings such as Google Maps profiles, social profiles, ratings, and review counts)
• Lead lists a client uploads or provides to us

Message and reply content

• The outreach messages we generate and send on a client's behalf
• Replies from prospects and the resulting conversation and outcome data
• Campaign configurations including target criteria, offer details, and follow-up rules

Usage data

• Dashboard activity and feature usage
• Device information, browser type, and IP address
• Pages visited and interactions within the Platform

3) How We Use Your Information

We use the information we collect to:

• Run your campaigns: discover and enrich leads, write outreach messages, send them across email, SMS, WhatsApp, Instagram, and LinkedIn, sequence follow-ups, and route warm replies to you.
• Report results: consolidate contacted leads, replies, and outcomes in your dashboard.
• Honor opt-outs: process unsubscribe and stop requests and maintain suppression lists so prospects are not re-contacted.
• Process payments: manage your prepaid deposit and per-contact billing through Stripe.
• Improve the platform: analyze usage and aggregated data to enhance features, performance, and reliability.
• Communicate with you: send service updates, billing notifications, and respond to support requests.

4) Our Role and Your Role

For the lead and prospect data processed in a client's campaigns, the client directs the purpose of the outreach. The client acts as the business/controller responsible for its offer, its target list, and the lawfulness of contacting those prospects. Writly acts as a service provider/processor that runs the outreach on the client's behalf and processes that data only to provide the Services.

Writly maintains its own records (such as suppression lists and aggregated analytics) as needed to operate the Services lawfully and reliably.

5) How We Source Lead Data

Writly focuses on business-to-business (B2B) outreach. The lead data we source consists of business contact details and publicly available business information, collected from sources such as public business listings, company websites, and public social profiles, or provided by the client.

Clients are responsible for ensuring they have a lawful basis to contact the prospects in their campaigns. We honor opt-out and deletion requests as described in Sections 6 and 12.

6) Outreach Channels and Messaging Compliance

We send outreach across multiple channels, each governed by its own rules. We apply reasonable measures to comply and to honor opt-outs:

• Email: messages identify the sender and include a way to opt out, consistent with the CAN-SPAM Act and similar laws. Unsubscribe requests are suppressed from future outreach.
• SMS: recipients can reply STOP to opt out at any time and HELP for help. Message frequency varies and standard message and data rates may apply. SMS outreach is subject to applicable messaging laws and mobile carrier (10DLC) requirements.
• WhatsApp and Instagram: messaging through these channels is also governed by Meta's platform terms and policies; outreach is sent from accounts the client owns or authorizes.
• LinkedIn: outreach is governed by LinkedIn's platform terms and is sent from accounts the client owns or authorizes.

If a prospect asks not to be contacted, we add them to a suppression list to prevent future contact across the relevant channel.

7) Payments and Your Deposit

Clients fund a prepaid balance (a deposit) through Stripe and are charged a per-prospect fee as outreach is sent. Stripe processes your payment information directly; we do not store your full card details on our servers. See our Terms of Service for the billing terms.

8) We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or your lead data to third parties. Your data is used solely to provide and improve the Writly Services as described in this policy.

9) Service Providers

We use the following categories of third-party providers to operate the Platform:

• Stripe: payment processing for deposits and billing. Stripe handles your payment card information directly.
• Email delivery (including Mailgun): sending outreach email and service notifications.
• AI/LLM providers: generating draft outreach messages and analyzing replies. Inputs may include lead context and message content.
• Lead search and enrichment infrastructure: discovering and enriching business contact data.
• Cloud hosting and storage (including Amazon Web Services / S3): running the Platform and storing data with encryption at rest.
• Analytics (including PostHog): measuring product usage and performance.

These providers have their own privacy policies and are contractually required to protect your data. We share only the minimum information necessary for them to perform their services.

10) Data Security

We take reasonable technical and organizational measures to protect your information, including encryption of data in transit and at rest, access controls, and secure infrastructure.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11) Data Retention

We retain your account, campaign, lead, and message data for as long as your account is active or as needed to provide the Services.

If you close your account, we may retain certain data as required by law or for legitimate business purposes (such as maintaining suppression lists so opted-out prospects are not re-contacted, and records of completed transactions).

We delete or de-identify data when it is no longer needed for these purposes.

12) Your Rights

Depending on your jurisdiction (including under the CCPA/CPRA and the GDPR), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing of your data
• Opt out of further outreach — recipients can reply STOP to SMS, use the unsubscribe link in email, or email us to be suppressed across channels

To exercise any of these rights, contact us at hello@writly.io. If your request concerns data we process on behalf of one of our clients, we may direct or forward your request to that client and assist them in responding. We will respond within a reasonable timeframe.

13) Cookies and Analytics

We may use cookies and similar technologies to remember your preferences, keep you logged in, and understand how you use the Platform.

We use analytics tools to measure site performance and improve the user experience. These tools may collect anonymized usage data.

14) Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Platform or by email. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

15) Governing Law

This Privacy Policy is governed by the laws of the State of Florida, USA. Any disputes related to this policy will be resolved in Florida, USA.

16) Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

X Group Prime LLC DBA Writly

Doral, FL

Email: hello@writly.io