Effective: July 30, 2026
Privacy Policy
1. Controller
Individual Entrepreneur Vladislav Zakharov, registered in Georgia, is the controller of personal data processed via https://scriptario.com. Privacy contact: privacy@scriptario.com.
2. Data we process
- Account data: email, name (optional), hashed password or SSO identifier, interface language, plan.
- Content data: audio/video files you upload, links you submit, transcripts, summaries and AI-chat history ("User Content"). Files may contain personal data of you or third parties — you are responsible for uploading them lawfully (Terms, Section 9.2).
- Payment and subscription data: payments are processed by Paddle as Merchant of Record, acting as an independent controller for payment processing (see https://www.paddle.com/legal/privacy). We receive your subscription status, plan, billing country and transaction identifiers — not your full card details.
- Usage and technical data: IP address, device/browser data, log events, approximate location (country), diagnostics.
- Support communications.
- Cookies and similar technologies — see the Cookie Policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the Service, incl. AI transcription of your content | Performance of a contract |
| Billing via Paddle, receipts, fraud prevention | Contract; legal obligation; legitimate interest |
| Security, abuse prevention, aggregate product analytics | Legitimate interest |
| Service emails about your account | Contract / legitimate interest |
| Marketing emails | Consent (opt out anytime) |
| Advertising and analytics cookies | Consent |
| Compliance with law; establishing or defending claims | Legal obligation / legitimate interest |
4. AI processing
Your content is processed automatically by speech-recognition and language models solely to deliver the features you request. We do not use your content to train our or third parties' AI models. We do not make automated decisions that produce legal or similarly significant effects on you.
5. Recipients
Processors under contract: EU-based hosting providers; speech-recognition and language-model providers engaged to deliver the Service; our email delivery provider; analytics and advertising (Google); support tooling. The current sub-processor list is available on request at privacy@scriptario.com. Independent controllers: Paddle (payments), Google (for consented cookies, under its own policies). Public authorities: only where legally required.
6. International transfers
Content and account data are stored in the European Union. Where data is transferred to providers outside your jurisdiction (e.g., Google LLC, USA), we rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
7. Retention
Uploaded files: deleted automatically 30 days after processing. Transcripts and summaries: until you delete them or close your account. Account data: deleted or anonymised within 30 days of account closure, except where longer retention is legally required (billing records are retained by Paddle under tax law). Technical logs: up to 12 months.
8. Your rights
You may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting prior processing). Contact privacy@scriptario.com; we respond within one month. You may lodge a complaint with your local data-protection authority.
California residents: we do not sell personal information. Consented advertising cookies may constitute "sharing" under the CCPA/CPRA — opt out via the cookie banner ("Reject" / settings). You have the rights to know, delete, correct, and to non-discrimination.
9. Security
Encryption in transit (TLS) and at rest, access controls, least-privilege access, isolated processing, automatic deletion pipelines. No method is 100% secure; please report suspected incidents to privacy@scriptario.com.
10. Children
The Service is not directed to persons under 18, and we do not knowingly process their data.
11. Changes
We will announce material changes by email or in-app notice. Continued use after the effective date constitutes acceptance.
Contact: privacy@scriptario.com