Privacy Policy

1.Who we are

[Company legal name] (“Scriptr”, “we”) is the controller of the personal data described here. You can reach us at privacy@scriptr.co. [ICO registration number, if applicable.]

2.What we collect

• Account details: your name, email address and, if you sign in with Google or Apple, the basic profile they share with us.
• Your content: your projects, notes, Co-writer conversations, uploads and generated material.
• Billing: your plan and payment history. Card details are handled by [payment provider]; we never see or store full card numbers.
• Usage and device: log data such as IP address, browser and device type, pages and features used, and crash reports.
• Messages: anything you send us by email or through the app.

3.How we use it

• To run Scriptr for you: storing and syncing your projects, and showing them to the people you share them with.
• To provide Co-writer and generation, by sending the content each request needs to the model provider handling it.
• To take payments, manage your plan and prevent fraud.
• To keep Scriptr secure, fix problems and understand, in aggregate, how it is used.
• To send you service emails, and product news only if you have agreed to receive it.

4.Our legal bases

We process personal data to perform our contract with you, for our legitimate interests in running and improving a secure service, with your consent where we ask for it (for example, marketing emails), and where the law requires us to.

5.Co-writer, generation and model providers

When you use Co-writer or generation, the parts of your project needed for that request are sent to the model provider you choose, or the one Auto selects. Today these are [Anthropic, OpenAI, Google, xAI and Moonshot AI — confirm].

[Confirm for each provider: under our agreements, they may not use your content to train their models.] [Owner to confirm: Scriptr does not use your content to train models.]

6.Who we share it with

We use a small number of service providers to run Scriptr, who may only process your data on our instructions: hosting [provider], payments [provider], email [provider], error reporting [provider] and analytics [provider, or none], as well as the model providers above.

We do not sell your personal data. We share it with others only when the law requires it, or with your agreement.

7.International transfers

Some providers process data outside the UK. Where they do, we rely on adequacy regulations or the UK International Data Transfer Agreement and equivalent safeguards. [Confirm.]

8.How long we keep it

We keep your account and content while your account is open. When you close it, we delete your content within [30] days and remove it from backups within [90] days, except for records we must keep by law, such as invoices.

9.Your rights

You can ask to access, correct, delete or export your personal data, and to object to or restrict how we use it. Write to privacy@scriptr.co and we will reply within a month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

10.Cookies

We use cookies that are needed to sign you in and keep Scriptr working. [Owner to confirm whether analytics cookies are used and, if so, how consent is collected.]

11.Children

Scriptr is not intended for anyone under [18], and we do not knowingly collect their data.

12.Changes to this policy

If we change how we use personal data in a way that matters, we will tell you before the change takes effect.