Privacy Policy

1. Information We Collect

When you use Scribe, we collect the following types of information:

• Account Information: Name, email address, and profile image when you sign up or use OAuth (Google/GitHub).
• Session Data: IP address, user agent, and authentication tokens for security purposes.
• Brand Assets: Company names, logos, taglines, and color schemes you upload to create on-brand emails.
• Chat Messages: Your prompts and AI-generated responses to improve your experience and maintain version history.
• Email Data: Test email addresses and generated email templates.
• Analytics Data: Usage patterns and interactions to improve our service.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Scribe email generation service
• Process AI-powered email generation through OpenAI
• Send test emails via Resend
• Maintain version history of your generated emails
• Authenticate users and manage sessions
• Improve our services and user experience
• Communicate important updates or security alerts

3. Third-Party Services

We use the following third-party services:

• OpenAI: Processes your prompts to generate email content. Data is processed per OpenAI's privacy policy.
• PostHog: Analytics and user behavior tracking.
• Vercel: Hosting and performance analytics.
• Resend: Email delivery service for test emails.
• Cloudflare R2: Secure storage for brand logo images.
• Better-Auth: Authentication and session management.

4. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your authentication session
• Remember your preferences (theme, sidebar state)
• Analyze site usage through PostHog and Vercel Analytics

You can disable cookies in your browser settings, but this may limit functionality.

5. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Secure authentication via OAuth and session tokens
• Database encryption at rest
• Regular security audits and dependency updates

6. Your Rights and Choices

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Opt-out of analytics tracking

To exercise these rights, contact us at the email below.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can delete your account at any time, which will remove your personal data from our active systems within 30 days.

8. Children's Privacy

Scribe is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through the application.

10. Contact Us

If you have questions about this privacy policy or your data, please contact us at: hello@usescribe.ashpak.dev