Privacy Policy

What we collect

When you create an account we store:

• Name, email address, and profile picture from your OAuth provider (Google or GitHub)
• Organization and team membership details you create within ScriptBase
• Media you submit for transcription (uploaded files or links you provide) and the transcripts, captions, and subtitles we generate from it
• Purchase and credit transaction history
• Operational data: API and usage logs, request metadata, error logs, and IP addresses (used for security and to operate the service)

Payments are processed by Polar. We store your Polar customer ID, payment method reference (only if auto top-up is enabled), and transaction identifiers. We never store your card numbers.

How we use your data

• To provide and improve the ScriptBase service
• To process payments and manage your credit balance
• To send transactional emails (verification, password reset, invitations)
• To understand usage patterns and improve the product (analytics)

We do not sell your personal information, and we do not send marketing emails — only transactional messages related to your account.

Third-party services

We rely on the following services to operate ScriptBase:

• Google & GitHub: OAuth authentication
• Polar: payment processing
• Speech-to-text providers (e.g. Deepgram): process the media you submit to generate transcripts
• Resend: transactional email delivery
• PostHog: product analytics
• Sentry: error monitoring
• Neon: database hosting
• Vercel: application hosting

Each service processes data under its own privacy policy. We only share the minimum data required for each service to function.

AI & transcription processing

To produce your transcript, the media you submit is sent to third-party speech-to-text providers (for example, Deepgram). This data is used solely to generate the output you requested and is not used to train models on your content. We do not host, publish, or redistribute your source media — once your transcript is generated and delivered, we do not retain the source media beyond what is needed to operate the service.

Information sharing

We share information only with:

• Payment processors (Polar)
• Speech-to-text and AI providers needed to generate transcripts
• Service providers required to operate the platform
• Analytics providers
• Legal authorities, where required by law

We never sell your data to anyone.

Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) help us understand how the product is used. You can disable non-essential cookies in your browser settings.

Data retention

Your account data is retained as long as your account is active. When you delete your account, we remove your personal data within 30 days. Submitted media and the transcripts associated with your account are also deleted. We do not retain your source media beyond what is needed to produce and deliver your transcript.

Your rights

You can:

• Access or export your data at any time from your account settings
• Request correction of inaccurate data
• Delete your account and all associated data
• Object to data processing for analytics purposes

If you are in the EU, you have additional rights under the GDPR. If you are in Turkey, your rights under KVKK also apply.

Security

All data is transmitted over HTTPS. Database connections use SSL encryption. We follow industry-standard security practices to protect your information.

Changes

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.

Contact

Questions about this policy? Reach us at support@scriptbase.app