scrptrscrptr
Draft template, not legal advice. This document is a starting point and must be reviewed by a qualified lawyer (and have all [bracketed] details filled in) before you publish it or rely on it.

Privacy Policy

Last updated: 26 June 2026

This Privacy Policy explains how Ramp Haus Ltd, trading as SCRPTR ("we", "us", "our"), a company registered in England and Wales (company number 16590701), collects, uses, and shares personal information when you use scrptr (the "Service"). We are the data controller. Registered address: 80 Hunloke Avenue, Chesterfield S40 2PD, United Kingdom. Contact for privacy matters: info@ramp-haus.com.

1. Information we collect

  • Account data, your name and email from Google sign-in, and your YouTube channel identifiers.
  • YouTube data, via Google's APIs: your channel and public video stats, and (with your consent) audience-retention and other analytics for your own channel, used to power analysis features.
  • Content you provide, brand details, ideas, notes, pasted transcripts, and the scripts you generate.
  • Usage data, feature usage and generation token counts.
  • Payment data, handled by our payment processor Stripe; we do not store full card details.
  • Technical data, IP address, device/browser info, and cookies needed to run the Service.

2. How we use your information

  • to provide, operate, secure, and improve the Service;
  • to generate scripts and analysis you request;
  • to process payments and manage your subscription;
  • to communicate with you about the Service;
  • to send marketing emails about scrptr where you have consented or where permitted by law, every marketing email includes an unsubscribe link and you can opt out at any time;
  • to comply with legal obligations.

3. Lawful bases (UK/EU)

Under the UK GDPR we rely on: contract (to provide the Service you sign up for), legitimate interests (to secure and improve the Service), consent (e.g. connecting YouTube Analytics, optional marketing), and legal obligation (e.g. accounting). You can withdraw consent at any time.

4. AI processing

To generate scripts we send the relevant inputs (your idea, brand details, and any transcripts) to our AI provider Anthropic for processing. Anthropic does not use data submitted through its API to train its models, and retains it only transiently to provide and secure the service. Do not submit sensitive personal data you do not want processed this way.

5. Service providers / sub-processors

We share data with providers who process it on our behalf:

  • Supabase, database, authentication, and storage (region eu-west-2, EU).
  • Anthropic, AI generation.
  • Google / YouTube, sign-in and YouTube Data & Analytics APIs.
  • Stripe, payments.
  • [Hosting provider, to be confirmed at launch], application hosting.

We do not sell your personal information.

6. YouTube API Services

scrptr uses YouTube API Services. By using these features you also agree to the YouTube Terms of Service, and Google's use of data is governed by the Google Privacy Policy. You can review and revoke scrptr's access to your Google/YouTube data at any time via your Google security settings. We use YouTube data only to provide the Service's features and do not use it for advertising.

7. International transfers

Some providers process data outside the UK/EU (e.g. in the US). Where we transfer personal data internationally we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or Standard Contractual Clauses.

8. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within 30 days of account deletion, except where we must keep records longer for legal/accounting reasons. Deleted scripts are purged 7 days after deletion.

9. Your rights (UK/EU)

You have the right to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent. You can export your data and delete your account from Settings, or contact us. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

10. Your rights (US / California)

Depending on your US state (e.g. California's CCPA/CPRA, and similar laws in Virginia, Colorado, Connecticut, Utah, Texas and others), you may have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined by law. To exercise these rights, use the data tools in Settings or contact info@ramp-haus.com. We will not discriminate against you for exercising your rights.

11. Cookies

We use only essential cookies needed to keep you signed in and run the Service. If we introduce analytics or marketing cookies in future, we will ask for your consent and update this section.

12. Children

The Service is intended only for users aged 18 and over. We do not knowingly collect personal data from anyone under 18; if we learn we have, we will delete it.

13. Security

We use reasonable technical and organisational measures to protect your data (including row-level security and encrypted transport). No method of transmission or storage is completely secure.

14. Changes

We may update this Policy and will post the new version here with an updated date. Material changes will be notified to you.

15. Contact

Privacy questions or requests: info@ramp-haus.com, or by post to 80 Hunloke Avenue, Chesterfield S40 2PD, United Kingdom. See also our Terms of Service.