Privacy policy

Who is responsible

Scriptava is the data controller for the personal data described here.

What we collect

Account details: your name, email address and sign-in information.

Your work: the books, chapters, notes, characters, plans, files and settings you create or upload, and the review results saved with them.

AI keys: if you add a key for an AI provider, we store it encrypted and use it only to make the requests you ask for.

Technical data: basic logs such as IP address, browser and the time of a request, used to keep the service secure and working.

Why we use it

To provide the service you signed up for (this is needed to perform our contract with you).

To keep the service secure, prevent abuse and fix problems (our legitimate interest in running a safe service).

To send you messages about your account, such as security notices or changes to these policies.

We do not sell your data, we do not use your writing to train AI, and we do not show you adverts.

Your AI provider

When you connect Claude, ChatGPT or another AI, or ask the app to use a key you added, the parts of your work needed for that request are sent to that provider. They handle it under their own privacy policy, which you agreed to when you opened your account with them. Check their settings if you want to control whether they keep or learn from it.

Who else handles your data

We use a small number of companies to run Scriptava. They act on our instructions and may not use your data for anything else:

Vercel, which hosts the site, the app and our servers. Neon, which runs our database and sign-in. Cloudflare, which stores files such as audio and images.

When you look up a word, the word itself (and nothing else) is sent to a free dictionary or thesaurus service.

Some of these companies are based outside the UK. Where data leaves the UK, it is protected by the safeguards the law requires, such as standard contract clauses.

How long we keep it

We keep your account and your work for as long as you have an account. When you delete your account, we delete your work from the live service straight away, and it drops out of our backups within 30 days.

We keep logs for up to 30 days unless we need them longer to look into a security problem.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it. Most of this you can do yourself in the app. For anything else, write to us through the contact page and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk), or to the data protection authority where you live.

Children

Scriptava is not meant for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will tell you before the change takes effect.