Security / Data Security Policy

Writto is committed to protecting the confidentiality, integrity, and availability of information processed through its Services.

We maintain reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, loss, or destruction.

However, no method of transmitting or storing information is completely secure. Accordingly, Writto cannot guarantee that its Services or information processed through them will be completely secure at all times.

Depending on the nature of the information and the Services being provided, Writto may implement safeguards that include:

• access controls and authentication mechanisms;
• encryption and secure transmission technologies;
• monitoring and logging of systems and activities;
• security updates and vulnerability management;
• backups and data recovery procedures;
• network and infrastructure security controls;
• role-based access restrictions;
• employee and contractor security requirements; and
• procedures for detecting, investigating, and responding to security incidents.

The specific safeguards implemented may vary based on the nature of the Services, the type of information processed, and applicable legal or contractual requirements.

Writto limits access to information and systems based on business need and authorized responsibilities.

Access to certain systems or information may be restricted to authorized personnel, contractors, or service providers who require such access to provide, maintain, secure, or support the Services.

Where appropriate, Writto may use authentication, authorization, role-based permissions, and other access controls to help prevent unauthorized access.

Writto may use encryption and other security technologies to protect information during transmission and, where appropriate, while stored.

The encryption methods and technologies used may vary depending on the type of information, system, service, or third-party infrastructure involved.

Writto may rely on trusted third-party providers for hosting, infrastructure, analytics, payment processing, communications, artificial intelligence, security, and other services necessary to operate Writto.

Where third parties process information on Writto’s behalf, Writto takes reasonable steps to select providers that maintain appropriate security and confidentiality measures.

Third-party providers may also be subject to their own security policies, contractual obligations, and applicable legal requirements.

Writto takes reasonable measures to ensure that personnel with access to systems or information understand their security and confidentiality responsibilities.

Access to information is limited based on role and business requirements, and personnel may be subject to confidentiality obligations and applicable security procedures.

Writto may monitor its systems and infrastructure for suspicious activity, security vulnerabilities, unauthorized access, and other potential security threats.

If Writto becomes aware of a security incident affecting information processed through its Services, we may take reasonable steps to investigate, contain, mitigate, and remediate the incident.

Where required by applicable law or contractual obligations, Writto may notify affected users, customers, regulators, or other relevant parties.

Security is a shared responsibility. You are responsible for taking reasonable steps to protect your account and information.

You should:

• use a strong and unique password;
• keep your login credentials confidential;
• enable available security features where appropriate;
• restrict access to your Writto account and devices;
• promptly report suspected unauthorized access or security incidents; and
• keep your devices, browsers, and operating systems reasonably up to date.

You must not share your account credentials with unauthorized individuals or attempt to bypass Writto's security controls.

Writto is not responsible for security incidents resulting from your failure to maintain the security of your account, credentials, devices, or systems.

Writto retains information in accordance with its Privacy Policy, applicable agreements, and legitimate business and legal requirements.

When information is no longer required, Writto may delete, anonymize, or otherwise dispose of it in accordance with applicable retention practices.

Backup copies may remain for a limited period after deletion as part of routine backup and disaster-recovery processes.

If you discover a potential security vulnerability, unauthorized access, or other security issue involving Writto, we encourage you to report it promptly.

Security reports should include enough information to help us understand and investigate the issue without exposing additional user information or compromising Writto systems.

You should not attempt to access, modify, delete, or disclose information belonging to other users or conduct security testing that could disrupt Writto Services without prior authorization.

Writto may implement security practices designed to support compliance with applicable data protection and information security requirements.

Where Writto maintains specific certifications, attestations, or compliance frameworks, applicable details may be provided separately through the relevant Writto documentation or customer agreements.

Nothing in this Security Policy constitutes a guarantee that Writto meets a particular security certification, standard, or regulatory framework unless expressly stated.

Writto may update this Security Policy from time to time to reflect changes in its Services, security practices, technology, or applicable legal requirements.

Any updated version will be published on the Writto Legal Information Page with a revised “Last Updated” date.