Privacy Policy
Last updated: 2/15/2026
ScriptScope ("we", "us", "our") respects your privacy. This policy explains how we collect, use, and protect your personal data in compliance with Israel's Protection of Privacy Law (PPL), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
1. Data Controller
The data controller responsible for your data is ScriptScope, operated from Israel.
Contact: Contact us
2. Information We Collect
Personal Data:
- Email address (required for account creation and delivery of analysis)
- Payment information (processed by Paddle, our payment provider — we never store your payment card details)
Uploaded Content:
- Screenplay files you upload for analysis
Technical Data (collected automatically):
- IP address
- Browser type and version
- Device information
- Pages visited and usage patterns
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing script analysis | Contract performance |
| Delivering analysis results | Contract performance |
| Processing payments | Contract performance |
| Service-related emails | Legitimate interest |
| Marketing emails | Your consent (opt-out anytime) |
| Improving our service | Legitimate interest |
4. Screenplay Data Handling
Your scripts are protected:
- Processed only to provide the analysis service
- Encrypted during transmission (TLS 1.3) and storage (AES-256)
- Automatically deleted within 24 hours of analysis completion
- NEVER used to train AI models
- NEVER shared with third parties
- NEVER reviewed by humans (unless you request technical support)
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Uploaded scripts | Deleted within 24 hours of analysis |
| Analysis reports | Until you delete your account |
| Payment records | As required by law (typically 7 years) |
| Marketing preferences | Until you unsubscribe |
6. Your Rights
Under applicable privacy laws (PPL, GDPR, CCPA), you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict processing of your data
- Data portability — receive your data in a machine-readable format
- Object to certain processing
- Withdraw consent at any time (without affecting prior processing)
To exercise these rights, contact us.
We will respond within 30 days (or sooner where required by law).
7. International Data Transfers
Your data may be processed in:
- Israel (recognized by EU as providing adequate data protection)
- United States (via service providers with Standard Contractual Clauses)
We ensure appropriate safeguards are in place for all international transfers.
8. Third-Party Service Providers
We share data with these service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Paddle | Payment processing | UK/US |
| Vercel | Website hosting | US |
| Supabase | Database | US |
| Resend | Email delivery | US |
These providers are bound by data processing agreements and use your data only to provide services to us.
9. Data Security
We implement industry-standard security measures:
- TLS 1.3 encryption for data in transit
- AES-256 encryption for data at rest
- Access controls and authentication
- Regular security practices review
- Automatic data deletion schedules
No system is 100% secure. While we cannot guarantee absolute security, we implement robust measures to protect your data.
10. Cookies
We use essential cookies required for the site to function. We may use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings.
11. Children's Privacy
Our service is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately.
12. Do Not Sell My Information (CCPA)
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
13. Changes to This Policy
We may update this policy periodically. We will notify you of material changes via email or prominent notice on our site. Your continued use after changes constitutes acceptance.
14. Contact Us
For privacy-related questions or to exercise your rights: Contact us
Response time: Within 30 days