Privacy Policy

1. Information we collect

We collect information in the following ways:

• Account information: Email address and name, if provided through Google sign-in.
• Usage data: Features used, credits consumed, and generation history.
• Content data: YouTube URLs, topics, and text you provide for AI processing.
• Analytics: Page views and feature usage patterns through PostHog's EU-hosted service.
• Payment data: Processed securely by Stripe. We do not store card details.

2. How we use your information

We use your information to:

• Provide and improve the Service.
• Process payments and manage subscriptions.
• Send transactional emails, including login links and billing notifications.
• Analyze usage patterns to improve features.
• Provide customer support.

We do not sell your data to third parties or use your content for advertising purposes.

3. API keys

If you provide your own API keys (BYOK), they are stored encrypted in our database and are only used to make API requests on your behalf. We never share your API keys with third parties. You can remove your API keys at any time through Settings.

4. Data storage and security

Your data is stored using Supabase (PostgreSQL) with row-level security policies. All connections use TLS encryption. We follow industry-standard security practices to protect your information.

• Database hosted on Supabase using AWS infrastructure.
• API hosted on Render with TLS.
• Analytics hosted on PostHog EU.
• Payments processed by Stripe.

5. Third-party services

We use the following third-party services:

• Supabase: Authentication and database.
• Stripe: Payment processing.
• PostHog (EU): Product analytics.
• OpenRouter and Anthropic: AI model providers for content generation.
• YouTube Data API: Channel and video data.
• Resend: Transactional email.

6. Your rights

You have the right to:

• Access your personal data.
• Request deletion of your account and data.
• Export your generation history and settings.
• Opt out of analytics tracking.
• Update or correct your information.

To exercise these rights, contact us through the in-app contact form.

7. Cookies and tracking (cookie policy)

We collect the minimum UK law allows without asking and request consent for everything beyond that. The cookie banner lets you choose. "Cookie Preferences" in the footer brings it back at any time. Your choice is saved in your browser's localStorage.

What we use:

• Essential storage (always active): Authentication tokens, session data, and your cookie consent preference. These are required for the site to function and are not used for tracking.
• Anonymous usage statistics (on by default): PostHog (EU-hosted) records page views and feature usage under the UK PECR statistical-purposes exception (Data (Use and Access) Act 2025). This data is not linked to your name, email, or account and is used solely to improve Scripti. You can opt out free of charge at any time by clicking Decline on the banner or "Cookie Preferences" in the footer.
• Session replays and account-linked analytics (only if you accept): With your consent, PostHog records session replays and links activity to your account so we can investigate issues you report. These stay off unless you click Accept.

We do not use advertising cookies, tracking pixels, or share data with ad networks.

Changing your preference: Click "Cookie Preferences" in the footer at any time to make a new choice. Declining stops all analytics, including anonymous statistics. You can also contact us to have previously collected analytics data deleted.

8. Data retention

We retain your data for as long as your account is active. Generation history is retained according to your subscription tier: 30 days for Free and unlimited for Creator and Studio. You can request full account deletion at any time.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notification.

10. Contact

For privacy-related questions, contact us at help@scripti.ai.