WarmQuantWARMQUANT · YOUR DATA
Privacy Policy
Effective: October 7, 2026 · Last updated: October 11, 2026
This policy describes how WarmQuant at warmquant.com handles your information. WarmQuant is an AI writing workspace that turns text you provide into English drafts using your chosen writing angle, author persona, audience and style. Google sign-in is an optional way to access your account; email registration is also available. You can read this policy and browse public pages without signing in.
What data we collect
| Category | Data and purpose |
|---|---|
| Google sign-in | Your Google account identifier (sub), email address and email verification status (email_verified). We store the identifier and email to create or link your WarmQuant account; we use the verification result to confirm your identity. |
| Email accounts | Your email address, a salted password hash, verification status, and hashed email-verification or password-reset tokens. These let you register, sign in and recover your account. |
| Writing content | Text and settings you submit for generation, including prompts, creator personas, reader profiles, voice and style, and other requirements. We store generated or saved drafts, their titles and generation-setting snapshots, and your saved custom prompts and profiles. |
| Usage and invitations | Generation counts, invitation codes, the relationship between an inviter and a new account, verification status, and credit balances and expiry. We use these to apply plan limits, award eligible invitation credits and prevent duplicate rewards. Inviters see credit totals and expiry, not invitees’ email addresses. |
| Billing | Checkout, customer, subscription and product identifiers, subscription status, paid-period dates and payment-event records. These connect a purchase to your account and keep your plan access up to date. WarmQuant does not collect or store card numbers or card security codes. |
| Security and support | Session and authentication state, rate-limit records and service request or error information used to operate and protect the service. Authorized management actions record the operator and target account identifiers, action, reason and outcome for support, security and accountability. Routine administration views show account, subscription and usage information; they do not display password hashes or private writing content. If you contact support, we receive your email address, message and any attachments you send. |
| Optional website analytics | Only if you accept analytics: visits to registered public pages, a cookie-based browser identifier, basic browser/device information and referring-site origin. Google receives the network request and may derive approximate location. We use this to understand public content usage, not to identify your WarmQuant account. |
How we use Google account data
We request only the openid and email permissions. We validate Google’s sign-in response, use your Google account identifier and verified email to identify you, and create or link your WarmQuant account. The verified identity also lets an eligible new account complete an invitation so that its inviter receives writing credits.
Your account email, including one obtained through Google sign-in, may be sent to Resend for verification or recovery emails you request, and to Creem when you start a purchase. These services support your account and billing. Your Google account identifier is kept in WarmQuant’s account records and is not sent to the writing model or used as a billing identifier.
We do not request your Google password, profile name or photo, Gmail messages, Drive files, contacts or calendar. Google access tokens, refresh tokens and ID tokens are not stored after the sign-in exchange. We do not use Google account data for advertising, sell it, or use it to develop, improve or train generalized AI or machine-learning models. WarmQuant does not access Google Workspace APIs and does not use Google Workspace API data to develop, improve or train non-personalized AI or machine-learning models.
Our use of Google user data is limited to the account features described here and follows the Google API Services User Data Policy. This is a description of our data practices, not a claim that Google has approved or endorsed WarmQuant.
AI writing and your content
When you request a writing action, we send your source text and the instructions needed for that action to DeepSeek, our AI provider. These include selected prompts, creator-persona and reader-profile details, voice and style, and your writing requirements. We do not automatically send your Google account identifier or account email to DeepSeek. If you put an email address or other personal information into the source text or instructions yourself, it is processed as part of that content.
Generated drafts and their generation settings are stored in your account so you can return to them. Source text is processed for the requested action and may appear in the resulting draft; there is no separate saved-source field in the draft record. Saved draft settings can include copies of the custom prompts and profiles used for that draft. Those copies remain until the draft is deleted, even if you later delete the original prompt or profile.
WarmQuant does not run a model-training program on your drafts. DeepSeek handles submitted content under its own terms and privacy practices; we do not promise that the provider retains no data. Submit only content you have permission to use, and avoid sensitive information that you do not want processed by an AI provider. Our Acceptable Use Policy prohibits sexual or other NSFW generation, including non-consensual intimate content. WarmQuant offers text writing, not image or video generation.
Who receives your data
- Google processes the optional Google sign-in flow. It receives the authentication request and returns the identity information described above.
- Google Analytics receives limited public-page usage and browser data only after you accept analytics. This is separate from Google sign-in; we do not connect analytics identifiers to your account or Google sign-in identity.
- DeepSeek receives text and generation instructions when you request AI writing. It does not automatically receive your account email or Google account identifier.
- Creem processes purchases and subscriptions. A checkout uses your account email or existing customer identifier, the selected product, a request identifier and an internal WarmQuant user identifier to associate the purchase with your account. You provide payment details directly to Creem or its payment providers.
- Resend delivers requested verification and password-recovery emails. Resend also receives messages and attachments sent to support@warmquant.com and forwards them to the operator’s Gmail inbox for customer service.
- Hosting and authorized operations support storage, delivery, security, backup and troubleshooting. The operator may access records needed to resolve support or security issues. We may disclose information where required by law or necessary to address fraud, abuse or threats to the service.
We do not sell personal information, use Google data for targeted advertising, or publish your private prompts, profiles or drafts in the public library. If you copy or share a draft yourself, the recipient receives the text you share. Free drafts include your invitation link by default; that link contains an invitation code, not your email address.
Providers have their own privacy policies, retention practices and processing locations. Service delivery may involve processing outside your country. This policy does not promise that all data remains in a particular country.
Optional Google Analytics
You can choose Accept analytics or Reject analytics with equally available controls. Google Analytics is not loaded until you accept. Your choice does not affect registration, signing in or writing. We remember it in this browser for up to 180 days; blocking or clearing browser storage may cause us to ask again.
With consent, we measure visits to registered public pages, such as the homepage, guides, writing scenarios and public libraries. We remove URL query strings and fragments, and send at most the referring website’s origin. We do not send draft text, original input, form values, account email, account identifiers, Google sign-in identifiers or invitation codes. Private workspace, authentication, API and invitation-link routes are excluded. Google may also process cookie-based browser identifiers, basic device/browser information and the network request used to deliver analytics, including deriving approximate location.
We disable advertising personalization and Google Signals. These reports help us understand which public content is useful; they are not linked to your WarmQuant account. Google handles this information under its Privacy Policy.
Use Analytics preferences in the footer and choose Reject analytics to withdraw consent. This stops subsequent analytics collection for this browser and clears accessible WarmQuant analytics cookies. It does not erase reports already received by Google. Our analytics cookies are configured for up to 180 days without extending their expiry on each page visit. Browser choices and cookie expiry are separate from retention of reports already held by Google.
Cookies and browser storage
- A necessary session cookie keeps you signed in for up to seven days. Signing out clears the current session cookie.
- A temporary Google sign-in cookie expires after ten minutes and protects the authentication flow.
- Following an invitation link sets an attribution cookie for up to 30 days. Registration clears this cookie after processing the invitation.
- The writing workspace can keep input, options and unsaved edits in your tab’s session storage to recover work during navigation or sign-in. Recovery entries are treated as valid for 30 minutes; this is not a guarantee that bytes are physically erased at that instant. Signing out clears workspace recovery data, and closing the tab normally clears session storage according to your browser’s behavior.
Optional analytics cookies are described above. WarmQuant does not use advertising cookies or enable advertising tracking.
How we protect data
Our public website uses HTTPS. In production, authentication cookies use Secure, HttpOnly and SameSite protections. Passwords are stored as salted hashes rather than readable passwords, and email-verification and password-reset tokens are stored as hashes. We validate Google sign-in responses and use account-level authorization checks to restrict access to private drafts and profiles.
Access to operational credentials and backups is restricted. Automated database backups are encrypted. These measures reduce risk, but no service can promise absolute security. Report a suspected issue to support@warmquant.com without including passwords or authentication tokens.
Retention and deletion
Account information, saved drafts, custom prompts and profiles, subscription records, usage and invitation history do not have an automatic inactivity-based deletion period. They remain in the application database until you delete an available item or we process an account or data-deletion request. Deleting an item through the application removes its live record, but does not immediately remove existing backup copies or records held by service providers.
Email-verification links are valid for 24 hours and password-reset links for 30 minutes. Expiration prevents their use; it does not mean their database records are deleted at the same instant. Invitation credits expire 30 days after award, while the invitation history may remain to prevent duplicate rewards.
Automated backup rotation keeps the seven latest daily snapshots. Manual deployment and offline recovery copies may be retained separately and are not automatically removed on that schedule. Restricted recovery copies can therefore persist after deletion from the live database. Account-deletion requests include a review of backup handling; we do not promise that every recovery copy is erased within a fixed number of days. Some billing, security or support records may need to be retained for their continuing purpose or a legal obligation. Contact us to understand the scope and status of your request, including any remaining copies.
Your choices and data requests
You can edit or delete your saved drafts, custom writing prompts and profiles in the application, and copy or download draft text. To request access to your account data, a broader export, correction or account deletion, email support@warmquant.com from your account email. Describe the request and the account involved. We may ask for information needed to verify account ownership; never send your password, sign-in code or authentication token. Full-account export, account deletion and Google unlinking are handled through support rather than a self-service button.
You can remove the WarmQuant connection from your Google Account connections. This revokes that connection; using Google sign-in again may require renewed permission. Revocation does not itself erase data already stored by WarmQuant, end a current WarmQuant session, or cancel a subscription. Sign out to end your current session, contact support for account-data deletion, and use Manage billing in your account to cancel a paid subscription through Creem.
Policy updates
We publish changes on this page and update the date above. If we materially change how we use Google user data, we will explain the change in the app or by email and obtain any required consent before using data in the new way.
Contact WarmQuant
For privacy questions and data requests, contact the WarmQuant service operator at support@warmquant.com.
Return to WarmQuant · Terms of Service · Acceptable Use Policy