Privacy Policy

[Legal entity name] (“Scriptory,” “we,” “us” or “our”) is committed to respecting the privacy rights and concerns of all users of Scriptory's website where this Privacy Policy is posted (the “Site”) (we refer to the Site, the services and the software made available by Scriptory, collectively, as the “Scriptory Features”). As such, we have established and implemented this Privacy Policy to inform visitors to the Site and users of the Scriptory Features how we use and protect the information we collect through the Site or the Scriptory Features.

By accessing the Site or using any of the Scriptory Features, you consent to Scriptory's collection, use, storage, deletion and disclosure of information relating to you as set forth in this Privacy Policy. This Privacy Policy is effective as of the date set forth above and is only applicable to the Site and the Scriptory Features and not to any other website that you may be able to access from the Site which may have its own data collection and use practices and policies.

Scriptory is the data controller (data fiduciary) for personal data processed through scriptory.ink. Contact: [email protected].

This policy answers the following questions:

• What information do we collect about you and how do we use it?
• Will we share your personal information with third parties?
• What choices do you have about the collection and use of your personal information?
• What security measures do we take to safeguard your personal information?

You may be aware that data protection laws such as the GDPR (European Union), the UK GDPR, and India's Digital Personal Data Protection Act give certain rights to individuals in relation to their personal data. The rights afforded, as available and except as limited under applicable law, include:

• Right of Access — the right to be informed of and request access to the personal data we process about you.
• Right to Rectification — the right to request that we amend or update your personal data where it is inaccurate or incomplete.
• Right to Erasure — the right to request that we remove your personal data.
• Right to Restrict — the right to request that we temporarily or permanently stop processing all or some of your personal data.
• Right to Object — the right to object to us processing your personal data on grounds relating to your particular situation, and the right to object to direct marketing.
• Right to Data Portability — the right to request a copy of your personal data in electronic format. Most of your data you can export yourself, on any plan.
• Right not to be subject to Automated Decision-making — the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you.

Scriptory puts you in control of how we process your personal data. If we send you electronic marketing messages based on your consent or as otherwise permitted by applicable law, you may at any time withdraw such consent or opt out at no cost.

If you have any questions about your privacy, your rights, or how to exercise them, please contact us at any time. We will respond to your request within a reasonable period of time upon verification of your identity.

We collect your personal data in the following ways:

• When you sign up. We collect certain personal data so you can use the Service such as your email address, and your name if you provide one. If you sign in with Google we receive your email and basic profile — never your password.
• Through your use of the Scriptory Features. We collect personal data about your use of Scriptory, such as which features you use and how often, to enforce plan limits and free-tier allowances, and to understand what to improve.
• Additional information you provide. From time to time, you may provide us with additional personal data or give us permission to collect additional data to provide you with more features or functionality.

We use anonymised and aggregated information for purposes that include testing our systems, research, data analysis, and developing new features and functionality.

Account data. Your email address, and your name if you give one. If you sign in with Google we receive your email and basic profile — never your password.

Content you create. Scripts, notes, comments, storyboards, production documents and files you upload.

Usage data. Which features you use and how often, to enforce plan limits and free-tier allowances, and to understand what to improve.

Payment data. Handled by Dodo Payments. We never see or store card details. We receive the fact of a payment, the plan bought and a transaction reference.

Student verification. If you apply for student pricing, the school email and identity document you submit — deleted once the application is decided.

Technical data. IP address, browser type and version, device information, and logs, used for security, abuse prevention and rate limiting. We may also collect from what physical location you accessed the Scriptory Features. This information may be aggregated to measure the number of visits, average time spent, page views, and other statistics about users.

By submitting personal information through the Site, you authorise Scriptory to share this personal information for the purposes identified herein and on the Site, such as responding to user inquiries, processing transactions, and requesting feedback.

This is the part that matters to a writer with an unfinished screenplay, so it gets its own section.

• Your scripts are private to you and anyone you explicitly share them with.
• Access is enforced at the database level, not just in the interface.
• Storyboard images and uploads are stored privately and served through links that expire in five minutes. There is no permanent public URL to your material.
• We do not read your scripts, except where you ask us to help with a specific support issue.
• We do not use your content to train AI models, our own or anyone else's.

When you use an AI feature we send the part of your content it needs — a few blocks around your cursor, the recent pages, one scene, or a scene digest — to a model provider, which returns a suggestion.

We send only what the feature requires, never your whole library. We use API endpoints rather than consumer products, and instruct providers not to train on data sent that way. We cannot control a third party's retention beyond their published terms, which is why the option below exists.

Use your own key if you prefer. Supply your own provider key in settings and those requests go to that provider under your own agreement with them. Keys are encrypted at rest with AES-256-GCM and are never shown back to you in full — only the last four characters.

AI features are optional and can be switched off.

The personal information you provide allows us to:

• Provide the service and store your work — performance of our contract.
• Take payment and prevent fraud — contract and legitimate interests.
• Send transactional email — receipts, account notices — contract.
• Enforce plan limits and allowances — contract.
• Keep the service secure — legitimate interests.
• Meet tax and accounting obligations — legal obligation.
• Send marketing email — only with your consent, withdrawable any time.
• Help us customise content and improve the Scriptory Features.
• Communicate with you about technical or functional problems.

We do not sell personal data and we do not use your data for advertising.

If you are located in the European Economic Area, we may process your Personal Information when: you have consented; we need it to provide you with requested services; we have a legal obligation; or we have a legitimate interest, particularly in ensuring and improving the safety, security, and performance of our Service.

Through the Scriptory Features, you may be able to link to technology, software and services owned and controlled by third parties (“Third Party Features”). Such use of Third Party Features and submission of information through Third Party Features will be subject to the applicable third party's terms of service and privacy policy. You agree to look solely to the applicable third party and not to Scriptory to enforce your rights in relation thereto.

When you have clicked on a third party link which takes you to a different website, our Terms of Service no longer apply and you must read the privacy policy of the third party to see how your personal information will be handled.

These providers process data on our behalf, only to deliver the function named:

Some operate outside India. Where data is transferred internationally we rely on the provider's standard contractual clauses or equivalent safeguards. Your Personal Information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information. When we transfer or disclose your Personal Information to other countries, we will protect that information as described in this Privacy Policy.

Scriptory honours “do not track” signals sent by your browser when you visit the Site. Scriptory does not collect user information about your online activities over time and across different websites, or authorise third parties to do so.

“Cookies” are small bits of electronic information that a website sends to a visitor's browser and are stored on the visitor's device. We use only what the service needs: keeping you signed in, enforcing one-device sign-in, and remembering your theme. If you arrive through an affiliate link we set a referral cookie for 30 days so the referral can be credited.

No advertising or cross-site tracking cookies. While Scriptory may use cookies to track your visit to the Site, this information does not identify you personally and you remain anonymous. You may still access the Site and the Scriptory Features if you set your browser not to accept cookies.

Third parties whose websites are accessible through links on the Site may also use their own cookies. Scriptory does not control these third parties' use of cookies and expressly disclaims any and all liability related to the collection, use or disclosure of information by third parties.

Our servers automatically record information that your browser sends whenever you visit the Site. This information includes your Internet Protocol address, your browser type and version, which Scriptory Features you use and from where, when and how long you use them. We use this information to monitor and analyse how users use the Scriptory Features, to provide customer service and to maintain and improve the Scriptory Features.

• Your content — until you delete it or close your account.
• Account data — until closure, then deleted or anonymised within 30 days.
• Backups — expire on a rolling cycle, normally within 90 days.
• Invoices and tax records — as long as tax law requires, currently 8 years in India.
• Student verification documents — deleted once decided.
• Logs — normally 90 days.

The personal information that you provide to us is stored on servers located in secured facilities with restricted access, and protected by protocols and procedures designed to ensure security. We restrict access to personal information to Scriptory personnel who need to know this information in order to develop, operate and maintain the Scriptory Features.

• Encryption in transit everywhere, and at rest by our hosting providers.
• Access to your content enforced at the database level, per user, per script.
• Your own API keys encrypted with AES-256-GCM, never shown back in full.
• Files served through short-lived signed links, never permanent public URLs.
• One active session, so a forgotten sign-in elsewhere ends automatically.

No server, computer or communications network can be guaranteed to be 100% secure. As a result, while we strive to protect user information, we cannot ensure or warrant the security of any information you transmit to us and you acknowledge and agree that you provide such information at your own risk. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

We use your personal information to provide the Scriptory Features to you, deliver products and services you request, complete transactions, handle your customer service questions or issues and send communications to you about promotions, updates, or special offers that may be of interest. The personal information uploaded by you will be shared only with authorised persons to whom you specifically grant access. We will also share the personal information we collect from you under the following circumstances:

• Protection of rights. We will share personal information if we have a good faith belief that access, use, preservation or disclosure is reasonably necessary to satisfy any applicable law, regulation, legal process, or a request by law enforcement; to enforce our Terms of Service; to detect, prevent, or address fraud, security or technical issues; or to protect the rights, property or safety of Scriptory, its employees, or users.
• Asset transfers. If we become involved in a merger, acquisition or other transaction involving the sale of some or all of our assets, user information could be included in the transferred assets. Should such an event occur, we will use reasonable means to notify you.
• Service Providers. We may share your personal information with service providers that we engage for processing information on our behalf. We require these entities to comply with this Privacy Policy and appropriate confidentiality and security measures.

We do not knowingly collect personal information from children under 16, or allow them to create an account. We take children's privacy seriously and encourage parents to play an active role in their children's online experience. If you believe a child has given us personal data, write to us and we will delete it.

You may update or delete your personal information or modify your account preferences by accessing the account settings provided through the Scriptory Features. Please note that if you disable your account, we will keep your contact information on file for a reasonable period for the purpose of internal account management and fraud prevention activities.

If you no longer want to receive our newsletter, emails or other announcements, you may unsubscribe by writing to us at [email protected] or following the “unsubscribe” link at the bottom of our emails. Please note that you cannot unsubscribe from certain correspondence, including messages relating to your account transactions.

You agree that, in the event any dispute or claim arises out of or relating to this Privacy Policy, you and Scriptory will attempt in good faith to negotiate a written resolution of the matter directly between the parties. You agree that if the matter remains unresolved for forty-five (45) days after notification that a dispute exists, all parties shall join in mediation services with a mutually agreed mediator in an attempt to resolve the dispute.

This Privacy Policy may change from time to time and we will post all changes on the Site. For material changes we will tell you by email or in the product first. We will update the date at the top of this page when our practices change.

If you have any questions about our privacy practices or this Privacy Policy, please contact us by email at [email protected].

Grievance Officer, as required under Indian law: [Officer name], [Officer email], [Registered address].

Email [email protected] and we will respond within 30 days. If you are unhappy with the response you can complain to the Data Protection Board of India, or to your local supervisory authority in the EU or UK.

Using the Srijan academy as well? Its policy is at srijan.online/privacy.

Please read the Terms of Service governing the use of the Site and the Scriptory Features.