Privacy Policy

1. General Provisions

1.1. This Privacy Policy (the "Policy") applies to all information that [Full name], a self-employed individual entrepreneur, Tax ID [to be added] (the "Operator"), may obtain about a User of the ScriptUGC service.

1.2. Personal data is processed in accordance with applicable personal-data-protection legislation.

2. What Data Is Collected

2.1. The Operator processes the following categories of data:

• Account data: email address, password hash.
• Profile data provided voluntarily by the User: field/niche, talking points about the product/business, niche-specific terms.
• Brief data for generation: product/niche, product description, target audience, platform, video length, tone.
• Results of using the Service: history of generated scripts and shot lists.
• Technical data: IP address, Service usage data (to the extent necessary for its operation).
• Support requests — the text of the request and the User's email address.
• Marketing consent — an optional flag the User can check at registration.

3. Purposes of Processing

3.1. Data is processed solely to provide the Service's functionality: authentication, personalizing generated scripts based on the User's profile data, storing result history, handling requests, and, in the future, billing for paid features (see Section 6).

3.2. If the User checked the corresponding box at registration, their email address is also used to send a newsletter about the Service. This consent is optional, does not affect the availability of the Service's functionality, and may be withdrawn at any time via the contacts in Section 10.

4. Legal Basis and Consent

4.1. Personal data is processed on the basis of the User's consent given at registration, and to the extent necessary to perform this Policy and the Terms of Service.

4.2. The User may withdraw consent to the processing of personal data by contacting the Operator via the details in Section 10. Withdrawing consent may make further use of the Service impossible.

5. Location and Method of Data Storage

5.1. As of the current revision of this Policy, data is processed using the cloud infrastructure of Supabase, whose servers are physically located outside of Russia. The Operator is reviewing the compliance of this architecture with applicable data-localization requirements and undertakes to update this section following legal consultation before processing data on a commercial basis.

6. Disclosure to Third Parties

6.1. To operate the Service, data is shared with the following technology partners acting as processors:

• Supabase (US/EU) — database and authentication hosting.
• Anthropic (Claude API, US) — generating text scripts from the User's brief.
• Resend — sending transactional emails (signup confirmation).
• Vercel — hosting the Service's web interface.
• In the future, upon activation of paid features — a payment processor (details will be published separately).

6.2. The Operator does not share personal data with third parties for any purpose other than those listed above, except as required by applicable law.

7. User Rights

The User has the right to: obtain information about the processing of their data; request correction, blocking, or deletion of data that is incomplete, outdated, or inaccurate; withdraw consent to processing; and contact the authorized body for the protection of personal-data subjects' rights.

8. Data Retention and Deletion

8.1. Data is stored for as long as the User uses the Service. When an account is deleted, personal data and associated content is deleted or anonymized within no more than 30 days, except where longer retention is required by applicable law.

8.2. The User may delete any generation from their history in their account at any time; a deleted generation cannot be restored.

9. Cookies

9.1. The Service uses cookies necessary for its operation: storing the login session and maintaining authentication. No third-party advertising or analytics cookies that track the User across sites are used.

9.2. By continuing to use the Service after the cookie notice on the site, the User agrees to their use for the stated purposes. Since these are strictly necessary cookies only, no separate category selection is offered — disabling them would make signing in to the Service impossible.

10. Contacts

For questions about the processing of personal data, contact: [to be added].