Privacy Policy

Contact

For any privacy question or request, write to picchiotech@gmail.com. We reply within 30 days.

What we collect

We collect only what the service needs:

• Account: your email address, and your name and profile picture if you sign in with Google. Sign-in is handled by Clerk; we never see your password.
• Your content: the novels you import, the scripts, characters, and settings you create, the images you generate or upload, and the audio you generate.
• Purchases: which pack you bought, the amount, and the time. Card details go straight to Stripe; we never receive or store them.
• Credits: a record of credits granted, spent, and refunded.
• Technical data: IP address, browser type, and request logs, kept by our hosting provider for security and troubleshooting.
• Usage statistics: which pages are visited and which steps are completed (for example import, generate, export), with browser and device type and an approximate location derived from your IP address. This never includes your content. If you are in Europe, this is collected only after you accept.
• On the public pages (home, pricing, and this page) we may also record how the page is used, such as clicks and scrolling, with form fields masked. This is never done inside the app, where your books are.

Cookies and storage in your browser

We use three kinds:

• Necessary: cookies that keep you signed in (Clerk) and protect payments (Stripe). The service cannot work without them.
• Preferences and local copies: your language and theme, and a copy of your books kept in your browser so the editor opens quickly. These stay on your device.
• Statistics: a cookie set by PostHog to recognize a returning visitor. Visitors in Europe are asked first and can change their choice at any time through "Cookie settings" in the footer of the home page.

Why we use it

Under EU data protection law (GDPR), we rely on:

• Providing the service you signed up for (contract): your account, your content, generation, payments, and credits.
• Our legitimate interests: keeping the service secure, preventing abuse, and fixing problems.
• Your consent: usage statistics. You can withdraw it at any time.
• Legal obligations: keeping purchase records for tax and accounting.

AI processing

To generate scripts, character profiles, images, and voices, we send the relevant text (and, for some image edits, the image) to AI model providers. They process it to return a result and handle it under their own terms.

We do not use your content to train AI models, and we do not sell it.

Who we share data with

We do not sell personal data. We share it only with the providers that run the service for us:

• Clerk — sign-in and account management.
• Stripe — payments.
• Render — servers and database (United States).
• Cloudflare — storage and delivery of images and audio, and network security.
• OpenRouter, Google, and OpenAI — AI text, image, and voice generation. OpenRouter routes requests to the model provider that serves them.
• PostHog — usage statistics (United States).
• We may also disclose data when the law requires it.

Transfers outside Europe

Our servers and most of these providers are in the United States, so your data is processed outside the European Economic Area. These transfers rely on the safeguards the providers offer, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

We keep it only as long as needed:

• Your account and content: until you delete them or ask us to. Deleting a book removes its chapters, scripts, characters, images, and audio.
• Cached and temporary files (for example generated audio that is no longer in use): cleared periodically.
• Purchase records: for as long as tax and accounting law requires.
• Usage statistics: kept in a form that is not linked to your name or email.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it elsewhere. You can withdraw consent to statistics at any time. To delete your account and everything in it, write to picchiotech@gmail.com.

If you believe we have handled your data wrongly, you can complain to your local data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

Children

ScriptLab is not intended for children under 16, and we do not knowingly collect their data.

Security

Connections are encrypted, your books are private to your account, and access to our systems is limited. No service can promise perfect security; if something affects your data, we will tell you as the law requires.

Changes

If we change this policy, we will update the date at the top. For significant changes we will tell you in the app or by email.