Privacy Policy

1. Information we collect

When you sign in with Google or X, we receive the account identifier, email address when available, and basic profile information provided by that service, such as your name or profile image. We do not receive your Google or X password.

We store the content you submit and create: prompts, scripts, source links, uploaded images, video and audio, character references, optional voice samples and clones, generated media, and project settings. We also store subscription status, credit balances, payment identifiers and billing history. Stripe processes payments and payment method details; we do not store full card numbers. Technical information, including IP addresses, request details, device or browser information, errors, and job status, may be processed by our hosting and service providers to run and secure the service.

2. How we use information

• Authenticate you and associate your projects with your account.
• Generate, edit, store, preview, and deliver the media you request.
• Save preferences and recover interrupted processing.
• Send account, billing and media-retention notifications needed to operate your account.
• Provide support, investigate errors, prevent abuse, and meet legal obligations.

If you submit a rights or misuse complaint, we may process your contact details, the content you identify, and evidence of rights or consent to assess and respond to it. Relevant information may be shared where necessary to handle the complaint or comply with law.

3. Services that process information

Scriptbit uses Vercel for hosting, Supabase for authentication, database and private file storage, Trigger.dev for background processing, and Stripe for payments and subscription management. Depending on the feature you use, prompts, scripts, reference images, audio, video, or temporary media links are sent to Anthropic, fal.ai and the model providers used through fal.ai, or ElevenLabs to perform the requested work. Optional voice cloning sends your submitted voice sample to ElevenLabs.

We use Resend to deliver account and service emails. The recipient email address, message content and delivery information are processed to send welcome, billing and media-retention notices. These messages contain the account details needed for the notice; generated media and prompts are not included. We do not automatically enroll you in promotional email campaigns.

Google and X handle their own sign-in screens and consent. We use sign-in information to access your Scriptbit account; signing in does not itself publish posts to your social account. External source pages you ask us to retrieve receive normal web requests. These providers have their own terms and privacy practices, and information may be processed in countries other than where you live.

4. Cookies and browser storage

We use authentication cookies to keep you signed in and browser storage to remember interface and generation preferences. These are used for the service to function. Blocking or clearing them may sign you out or reset your preferences.

If you allow usage analytics, we use PostHog, hosted in the United States, to understand page visits, selected feature usage, browser information, and errors. We also record a broad traffic source, such as X or search, and a small allowlist of known campaign labels when analytics is allowed. We do not collect full referrer URLs or arbitrary campaign values. An anonymous browser identifier and, after sign-in, a pseudonymous account identifier connect these events. We exclude email addresses, names, prompts, scripts, uploaded or generated media, payment details, and URL query parameters. Session recording is disabled. We disable location enrichment for these events and configure PostHog to discard client IP data; network requests still require normal technical processing.

Analytics is optional and starts only after you choose “Allow analytics.” Change your choice under Usage analytics in your account or on this page, or clear this site’s browser storage to choose again. We honor supported Do Not Track and Global Privacy Control browser preferences. Turning analytics off stops future collection and clears the browser’s analytics identifiers; it does not automatically delete previously collected events. Contact us for a request concerning those records.

5. Storage and security

Projects and stored media are associated with their owner. Access controls and private storage restrict access, and temporary links allow authorized previews, downloads, and processing. Service providers and authorized operators may access information where necessary to operate the service or provide support. No system can guarantee absolute security; avoid submitting content you cannot lawfully share with the processing services described above.

6. Retention and deletion

We retain account and project information to provide your saved library and the service. You can delete supported content from the library. Deletion from the active service may not immediately remove copies in backups, operational logs, or processing providers. Limited records may be retained where needed for security, resolving disputes, or legal obligations. Third-party retention follows those providers’ practices.

You can delete your account from Account settings after confirming your identity. Deletion waits for unsettled processing to be resolved and removes your active project and media library. We retain limited billing and transaction records for audit, dispute resolution and legal obligations. For assistance with account deletion, access, correction, or other privacy requests, email hello@scriptbit.com. We may ask you to verify your account before acting. You can also revoke the connection in your Google or X account settings; this does not by itself delete your Scriptbit account or saved projects.

7. Your choices

You choose what content to submit and whether to use optional features such as voice cloning. Only upload another person’s image or voice when you have the necessary permission. You may have additional privacy rights under the laws that apply to you. Contact us to exercise them or ask about processing. Withdrawing information needed to operate your account or a feature may mean we can no longer provide it.

8. Changes and contact

We will update this page when our practices change and provide additional notice or obtain consent where required. For questions about this policy or how Scriptbit handles your information, contact the Scriptbit team at hello@scriptbit.com.

Media retention

For new customers who accept this policy, saved media is kept for at least 30 days after paid access ends, with completed-video download access. We give at least seven days’ advance notice before any removal. Renewing before removal keeps your library. Confirmed unused temporary processing files may be removed after seven days. Existing media is preserved.

Policy version: October 12, 2026. Accounts are enrolled only after accepting this version before their first payment. Automatic removal remains disabled until notice and recovery checks are complete.