Privacy Policy

1. Information We Collect

We collect the following types of information when you use OneScript:

• Account information: Your email address and authentication details when you create an account
• Usage data: How you interact with the Service, including the number of scripts generated, features used, and session information
• Content you provide: The scripts and text you input into OneScript for repurposing
• Payment information: Billing details are collected and processed directly by Stripe. We do not store your full credit card number, CVC, or other sensitive payment data on our servers
• Device and browser data: IP address, browser type, operating system, and referring URLs collected automatically through server logs

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your content through AI to generate repurposed outputs
• Manage your account and subscription
• Process payments and prevent fraud
• Send transactional emails (account confirmation, billing receipts, usage alerts)
• Monitor and enforce usage limits associated with your subscription tier
• Analyze aggregate usage patterns to improve the product (we do not sell your personal data)

3. Data Storage

Your data is stored and processed using the following infrastructure:

• Supabase: Hosts our database and authentication system. Your account information, usage records, and generated content are stored in Supabase with row-level security enabled
• Stripe: Securely stores and processes all payment and billing information. Stripe is PCI-DSS Level 1 certified

We implement reasonable technical and organizational safeguards to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic storage or transmission is 100% secure.

4. Third-Party Services

OneScript integrates with the following third-party services, each with their own privacy policies:

• Anthropic (Claude API): Your input content is sent to the Anthropic Claude API to generate repurposed outputs. Anthropic processes this data according to their privacy policy and API terms. Content sent to the API is not used by Anthropic to train their models
• Stripe: Handles all payment processing, subscription management, and billing portal functionality
• Supabase: Provides database hosting, user authentication, and backend infrastructure

We encourage you to review the privacy policies of these services. We only share the minimum data necessary for each service to perform its function.

5. Data Retention

We retain your data as follows:

• Account data: Retained for as long as your account is active, plus up to 30 days after deletion to allow for account recovery
• Generated content: Stored while your account is active. Deleted within 30 days of account closure
• Payment records: Retained as required by applicable tax and financial regulations (typically 7 years)
• Usage logs: Aggregated and anonymized after 90 days

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you
• Deletion: You can request that we delete your account and associated data. Some data may be retained as described in the Data Retention section
• Export: You can request an export of your data in a standard, machine-readable format
• Correction: You can request correction of inaccurate personal data
• Objection: You can object to certain processing of your data where applicable under law

To exercise any of these rights, contact us at support@onescript.co. We will respond to verified requests within 30 days.

7. Cookies

OneScript uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication and maintaining your session. These cannot be disabled
• Analytics cookies: Help us understand how you use the Service so we can improve it. These are anonymized and aggregated

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies may prevent the Service from functioning properly.

8. Children's Privacy

OneScript is not intended for use by individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information as quickly as possible. If you believe a child has provided us with personal data, please contact us at support@onescript.co.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or by posting a prominent notice within the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when this policy was last revised. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

10. Contact Information

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at support@onescript.co.