Privacy Policy

Last updated October 9, 2026

This describes what Scriptly collects, why, and how to ask us to delete it.

What we collect

Your email address, used for sign-in (magic link) and account notices.
Voice/video samples you upload (or a written description of your speaking style instead) — used to build your voice profile.
Product/brief details you enter, and the scripts Scriptly generates from them.
Usage data needed to run the Service: which plan you are on, credits used/remaining, and generation history.
Billing identifiers from Stripe (a customer ID and subscription status) — never your full card number, which Stripe handles directly and we never receive.

How we use it

Solely to run the Service for you: transcribing uploaded video/audio (via OpenAI Whisper API), synthesizing your voice profile and generating scripts (via Anthropic Claude API), checking and deducting credits, and processing subscription payments (via Stripe). We do not use your content to train our own models, and under Anthropic and OpenAI standard commercial API terms, your data is not used to train theirs either.

Who we share it with

We do not sell your data. It is shared only with the service providers that make Scriptly work, each only with what they need to do their job:

Supabase — database, authentication, and file storage.
Anthropic (Claude API) — voice profile synthesis and script generation.
OpenAI (Whisper API) — transcribing uploaded video/audio.
Stripe — subscription billing and payment processing.
Vercel — application hosting.

These providers may process data on infrastructure located outside your own country (commonly the United States); each operates under its own data processing terms.

Cookies

We use a single session cookie (set by Supabase Auth) to keep you signed in. We do not currently use any third-party analytics or advertising trackers. If that changes, we will update this policy.

Retention and deletion

We keep your data for as long as your account is active. To request deletion of your account and the data associated with it, email istephens76@gmail.com — we will confirm once it is done. Cancelling a subscription on its own does not delete your account; it just stops billing.

Security

Data is encrypted in transit (HTTPS). Our database uses row-level security so an account can only ever read its own data, enforced at the database layer, not just in application code.

Children's privacy

Scriptly is not directed at anyone under 18, and we do not knowingly collect information from minors.

Changes to this policy

If we make a material change to how we handle your data, we will post the update here with a new date.

Contact

Questions, or want to see or delete your data? Email istephens76@gmail.com.