Scriptly

Privacy Policy

Last updated: September 2026

Plain-language summary (not a substitute for the policy below): We collect what's needed to run your account — your Google sign-in email, the documents you choose to upload, and basic security logs like IP address. Uploaded pages are sent to a third-party AI provider to be read and answered, at reduced resolution. You choose whether documents are saved to your account or kept on your device only. We don't sell your data, and we don't run ad trackers.

1. Who this policy covers

This Privacy Policy explains what personal information Scriptly ("the Service") collects, how it is used, who it may be shared with, and the choices you have. It applies to everyone who creates an account or otherwise uses the Service. It should be read together with our Terms of Service and Cookie Policy.

2. Information we collect

Account information

Your email address and a stable account identifier, obtained through Google Sign-In (Scriptly does not set or store a separate password for Google accounts);
Your plan tier, token balance, usage history, and any payment status associated with your account;
Preferences and settings you configure (handwriting style, default subjects, feature toggles, etc.).

Content you provide

Handwriting samples you capture (individual letterforms, signature, and style settings) — used only to render text in your simulated handwriting;
Documents or images you upload for the AI to read and answer;
Anything you tell the optional Custom-mode assistant about yourself, if you choose to use it and enable "remembering" (see Section 9 of the Terms of Service for details on how this is used);
Any custom instructions or notes you type when generating or editing a document.

Automatically collected information

The IP address associated with your sign-ins and active sessions, retained for account security, fraud prevention, and enforcement of our Terms (see Section 10 of the Terms of Service);
Basic technical logs (timestamps, request outcomes, error rates) used to keep the Service running and to diagnose problems;
Essential cookies and local-storage values described in our Cookie Policy.

We do not use third-party advertising trackers, and we do not sell personal information to data brokers or advertisers.

3. How your documents are handled

When you upload a document or image for the AI to answer, a reduced-resolution copy is sent to a third-party AI vision provider (for example, Google's Gemini models, or another comparable provider selected automatically based on availability) so it can read the page and propose answers. The original, full-resolution file stays on the Service for rendering and export; it is not otherwise shared.

Whether your documents are saved to your account (so they sync across your devices) or kept only in the browser you're using is your choice, set the first time you upload something and adjustable at any time in Settings → Privacy. Documents kept "this browser only" are stored in that browser's local storage and are never uploaded to our servers for storage — only the reduced copy sent to the AI provider for that one analysis leaves your device.

4. How we use your information

To create and operate your account, and to save your handwriting, documents, and settings if you choose cloud sync;
To process uploaded pages through an AI provider and render the resulting answers in your handwriting;
To personalize documents using details you've explicitly shared with the Custom assistant, if that feature is enabled;
To process payments and manage your plan or token balance;
To secure the Service — detecting abuse, enforcing bans, and investigating suspected violations of our Terms;
To communicate with you about your account (for example, a security notice or a change to these policies).

5. Who we share information with

Recipient	What they receive	Why
Google (Sign-In)	OAuth authentication exchange	To verify your identity when you sign in
AI vision/chat provider(s)	A reduced-resolution copy of an uploaded page, or your Custom-mode message, at the moment you ask the Service to process it	To generate answers or a chat reply
Payment processor (Stripe)	Billing details you enter at checkout	To process plan and token purchases — Scriptly never receives or stores your full card number
Cloudflare (hosting infrastructure)	All traffic to the Service, as our hosting/CDN provider	To run and secure the Service

We do not otherwise sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of Scriptly or others.

6. Staff access

A small number of staff accounts can view account and usage information, and — depending on their role — take moderation actions such as adjusting a token balance, issuing a ban, or reviewing an IP address associated with abuse. Every staff action that changes or accesses sensitive data is logged, and access is limited to what each staff role needs. See Section 10 of the Terms of Service for more detail.

7. Data retention

We keep your account information for as long as your account is active. If you delete your account, or ask us to, we delete or anonymize the personal information associated with it within a reasonable period, except where we are required or permitted to retain limited records (for example, security logs relevant to an active abuse investigation, or records needed for tax/payment compliance).

8. Your choices and rights

Access and export — you can review your saved documents, settings, and usage from within your account at any time.
Local-only storage — you can choose, per upload, to keep documents on your device only rather than syncing them to your account.
Delete what the assistant remembers — individual facts the Custom assistant has stored can be removed one at a time, or all at once, from within Custom mode.
Account deletion — you can request deletion of your account and associated personal data through the contact channel provided in the app.

Depending on where you live, you may have additional rights under applicable law (for example, the right to request a copy of your data or to object to certain processing). Contact us through the app to exercise these rights.

9. Children's privacy

The Service is not directed at children under the age required by their jurisdiction to consent to data processing on their own behalf, and it should only be used by a younger person with the involvement and consent of a parent or legal guardian, consistent with Section 1 of our Terms of Service. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it.

10. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) for all traffic, hashed credentials, and role-based access controls that limit what staff can see or do based on their assigned rank. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will make a reasonable effort to notify users, for example through an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions about this policy, or requests relating to your personal information, can be directed to the Service operator through the contact channel provided within the app.