Privacy Notice

Who we are

nodWrite at nodwrite.com is operated by Nodworks. The product is built within a technopark. This notice describes the nodWrite service, not other Nodworks sites.

Privacy and account requests go to info@nodwrite.com. Ask there for the controller’s registered address and trade details.

What this notice covers

It covers the website, the account, document generation and editing, uploads, browser notifications, and paid checkout when a plan is offered for sale. It covers nodwrite.com and www.nodwrite.com.

A separate KVKK disclosure states the same processing in the form required by Turkish Law No. 6698. The Terms are the contract for using the service. Cookies are described in this notice.

Information we process

Account. Email address, a password hash when you set a password, and, if you use Google Sign-In, Google’s subject identifier, your verified email, and the name Google shares. Optional first and last name. Language, theme, membership status, and whether the account was created by you, an invite, or Google. We do not store the password itself.

Documents. The prompt, the generated markdown, the editor content, the chat transcript, planner output, and text you attach as working-set material. Quality feedback you send: a rating, tags, and an optional comment. Token and cost figures are kept for quotas and operations. They are not shown to you as a provider invoice.

Files. Images you upload are stored on our server. A PDF is built when you export it and is not stored on nodWrite. Only you can open an uploaded image, while signed in. Nodworks administrators can also access it to run the service and review abuse. Sharing the image address does not give anyone else access.

Notifications. If you turn on browser notifications, we store the push endpoint, its keys, and a short user-agent string. Delivery is done by your browser’s push service.

Payments, when checkout is open. Plan, amount, currency, order status, and the references İyzico returns. You enter card details on İyzico’s page. nodWrite does not store the card number. The callback we keep may include the payment result İyzico sends.

Optional connections. A Google Cloud link or your own model API key is stored encrypted and used only to call the provider you connected. The service works without them.

Security. The IP address is used for short-lived rate limits. It is not saved on your profile. When the site is served through Cloudflare, a country header may influence the first language choice. That header is not saved on your account.

Why we process it

To create and sign you in, send the one-time code, invitations, and membership mail, and remember your language and theme.

To generate, edit, store, hide, and export the documents you ask for, apply quotas, and show progress.

To send a browser notification you turned on, about a document that finished, failed, was cancelled, or is waiting for an answer.

To take payment and apply a plan when checkout is open, and to keep the payment record.

To limit abuse, operate the service, and review documents you have hidden from your library so we can judge generation quality. Hiding a document removes it from your library. It does not erase it.

Cookies and storage on your device

nodwrite_session. An httpOnly cookie that keeps you signed in. SameSite is Lax. It is marked Secure on the production site. It lasts about 30 days and is renewed when you sign in. It is required for the account.

nodwrite_signed_in. A marker cookie whose only value is 1, telling the public pages you are signed in so they show “Go to panel” instead of “Log in”. It carries no identity or secret and grants no access by itself. It lasts about 30 days and is removed when you sign out.

NEXT_LOCALE. Remembers English or Turkish for up to a year. Choosing a language, or the first visit when your browser asks for Turkish, sets it. The service also works if you reject it and use the language in the address.

On the device, not in a cookie: the theme, and whether you dismissed the install hint. We do not run an advertising or analytics cookie. There is no third-party analytics or error-tracking product connected to the site.

Who else receives it

Hostinger sends transactional mail from info@nodwrite.com: verification codes, invitations, and membership mail. The servers that host nodwrite.com store the account and the documents.

The model provider configured for your account receives the prompt, the document, and the chat so it can generate or edit. Today that provider is DeepSeek, Google Gemini, or both, depending on the plan and any key you connect. Those providers can process the text outside Turkey.

Google receives the sign-in token when you choose Google, and receives API calls if you connect Google Cloud. İyzico receives the checkout when a plan is for sale. Your browser’s push service receives the notification payload when notifications are on.

We do not sell personal information. We do not use it for third-party advertising.

How long we keep it

The account is kept while it exists. A verification code is kept for about 10 minutes, then discarded. When you sign out, the session's identifier and its account link are kept until the cookie would have expired (about 30 days at most) so that session cannot be reused, then deleted. Push data is removed when you turn notifications off or the browser endpoint is rejected.

Documents, including ones you hide, stay in the database. There is no automatic purge and no self-serve erase button. A PDF is not kept after it is generated.

Payment records, once checkout is open, are kept for as long as accounting rules require. Encrypted provider keys are kept until you disconnect them or the account is deleted.

Your requests

You can read and correct your name and language in account settings, turn notifications off, and hide a document from your library. Hiding is not deletion.

To ask what we hold, to correct it, to delete the account and the documents, or to object to quality review of hidden documents, write to info@nodwrite.com from the account email. We aim to answer within 30 days. We may ask you to confirm you control the address. There is no fee for an ordinary request.

The KVKK disclosure lists the rights under Turkish law. If a mandatory consumer right applies where you live, it still applies.

Children

nodWrite is not directed at children. You need to be able to enter a contract. We do not knowingly create an account for a child under 18. If you believe we have, write to info@nodwrite.com and we will delete it.

Changes

When this notice changes, the date on this page changes and the version changes with it. A new account confirms the current version at signup. An existing account confirms it on entering the panel; until then it cannot start a new document, edit, upload or buy. An account that does not want to confirm can sign out; its documents and account stay as they are, and its documents can still be exported. The previous text is replaced by the published page.

Contact

nodWrite, operated by Nodworks. Email info@nodwrite.com. Site nodwrite.com.