Privacy policy
Last updated October 16, 2026. Plain language, because you should be able to read it.
Text7 (text7.co) is a writing studio. This page explains what we collect, where it lives, who can see it, and how to get it removed. The short version: your writing is yours, we store only what the product needs, and we don’t sell or advertise against your data.
What we collect
Account details
Your email address, the name you give us, and a one-way hash of your password (we never store the password itself). Access requests also keep the note you wrote when you asked to join.
Your writing
Projects, chapters, version history, story-bible entries, storyboard frames, uploaded cover and chapter art, audio takes you record, and the launch, market-fit and study-book material you build.
In-app activity
Lightweight writing stats kept to show you your own progress — words written, time focused, ideas captured — plus which view you were last on. Nothing is shared or profiled.
Support messages
If you contact us through the support form, we keep your name, email and message so we can reply.
We do not collect payment information (Text7 has no paid plans today), precise location, contacts, or anything from other apps.
Guest mode
You can use Text7 without an account. In guest mode your work is held only in your browser’s session storage for that tab and is never sent to our servers. Close the tab and it’s gone. AI features are off in guest mode.
Where your data lives
Text7 runs on Cloudflare. Accounts and writing are stored in Cloudflare D1 (database), KV (key-value storage) and R2 (file storage), served from Cloudflare’s global network. Backups are Cloudflare’s point-in-time copies of those stores. Your projects are private to you unless you share them.
Sharing and who can see what
- Only you can see your projects by default — not other members, not administrators browsing the app.
- If you invite someone to a project from the Community tab, they see that project with the role you give them (Collaborator or Viewer). You can remove them any time.
- Text7 administrators can see the access-request list (name, email, note) and support messages, and can look directly at the underlying database to fix problems. They do not read your writing for any other reason.
AI features
When you use an AI feature — assessments, overviews, story-bible insights, storyboard prompts, originality checks, launch plans, market-fit reads, study books — the relevant text (a chapter, your bible entries, settings) is sent to the AI provider to produce that result and is returned to you. Our provider is Anthropic (Claude), under their API terms, which do not use API inputs to train their models. AI narration, when enabled, sends chapter text to ElevenLabs to generate audio. AI features run only for signed-in accounts and only when you press the button; nothing is processed in the background.
Cookies and browser storage
- One essential cookie (
t7s) keeps you signed in for up to 30 days. It holds a signed session token, not your password or email. - Browser storage holds guest work (session storage, this tab only), your cookie-notice dismissal, and a few conveniences. Older versions of Text7 kept projects in local storage; on first sign-in that work moves into your account and the local copy stays on your device until you clear it.
- Cloudflare, which hosts Text7, may set short-lived security cookies to protect the site from abuse.
- There are no analytics, advertising or third-party tracking cookies.
How long we keep it
As long as your account exists. Version history keeps the latest 50 versions per chapter. If your access request is declined, the request record is kept so the same email isn’t re-queued; ask and we’ll delete it.
Your choices
- Export — Settings → Data → Export downloads everything in your account as JSON.
- Delete — email dan@icon1agency.com from your account address and we’ll delete your account, writing and files within 14 days, apart from copies in short-term backups that expire on their own.
- Correct — change your name in the app; email us for anything else.
- Leave a shared project — ask the owner, or email us.
Children
Text7 is for people 16 and older. Access is by invitation or approval, and we don’t knowingly keep accounts for anyone younger. If you believe a child has an account, tell us and we’ll remove it.
Security
Traffic is encrypted (HTTPS). Passwords are hashed with PBKDF2 and a per-account salt. Sessions are signed and expire. Access to the production stores is limited to the administrators who run Text7. No system is perfect; if we learn of a breach affecting your data we’ll tell you.
Changes
When this policy changes in a way that matters we’ll update the date at the top and note it in the app. Continued use after that means you’re okay with the new version.
Contact
Questions, requests, complaints: dan@icon1agency.com, or use the support page.