Privacy Policy

1. Who we are

ScriptFlo (“we,” “us,” or “our”) operates the screenwriting application at scriptflo.ai and the companion desktop app. This policy explains how we collect, use, and protect your information when you use our services.

2. Information we collect

Account information

When you create an account, we collect your email address and display name. Authentication is handled by Auth0; we do not store passwords.

Screenplay content

If you use cloud save, your scripts, characters, beat sheets, and project metadata are stored in our database so you can access them across devices. You can delete your projects at any time.

AI interactions

When you use the ScriptFlo AI features, your prompts and relevant script context are sent to third-party AI providers (Anthropic, OpenAI, or OpenRouter) to generate responses. We do not store your AI conversation history on our servers. If you bring your own API key, requests go directly to the provider — we never see your key or the content.

Waitlist & email

If you join the waitlist, we collect your email address to send a single launch notification. You can request removal at any time by emailing hello@scriptflo.ai.

Usage data

We use Google Analytics to collect anonymized usage statistics such as page views, session duration, and feature usage. This data is aggregated and cannot identify individual users.

3. How we use your information

• To provide, maintain, and improve ScriptFlo
• To sync your projects across devices when using cloud save
• To send transactional emails (welcome, weekly writing digests)
• To notify waitlist subscribers when ScriptFlo launches
• To understand how the application is used so we can make it better

We do not sell your personal information. We do not use your screenplay content to train AI models.

4. Third-party services

We share data with the following providers only as needed to operate the service:

• Auth0 — authentication and account management
• MongoDB Atlas — cloud database for project storage
• Anthropic, OpenAI, OpenRouter — AI providers, only when you use AI features with our managed key
• Resend — transactional email delivery
• Google Analytics — anonymized usage analytics

Each provider processes data under their own privacy policy. We select providers with strong data protection practices.

5. Data storage & security

Your data is stored on servers managed by MongoDB Atlas and protected by industry-standard encryption in transit (TLS) and at rest. We follow security best practices including environment variable management for secrets, scoped API permissions, and regular dependency updates.

6. Your rights

You may at any time:

• Access, export, or delete your screenplay projects
• Delete your account and all associated data
• Request removal from the waitlist
• Opt out of non-essential emails

To exercise any of these rights, email hello@scriptflo.ai.

7. Cookies & local storage

ScriptFlo uses localStorage in your browser to save theme preferences, editor state, and writing session data. We use Google Analytics cookies for anonymized usage tracking. We do not use advertising or tracking cookies.

8. Children's privacy

ScriptFlo is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice in the application. The effective date at the top of this page always reflects the latest revision.

10. Contact

Questions about this policy? Reach us at hello@scriptflo.ai.