Privacy Policy for Rescriber

Last Updated: January 16, 2025

PRIVACY POLICY

This Privacy Policy ("Policy") describes how Rescriber.ai ("Rescriber", "we", "us", "our") collects, uses, stores, and protects information from users ("you", "your", "User") of our website at https://rescriber.ai (the "Website") and our AI-powered scriptwriting service (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree with our practices, please do not use our Service.

1. INFORMATION WE COLLECT

1.1 Personal Information You Provide
When you register for an account or use our Service, we collect:
- Account Information: Name, email address, password (encrypted)
- Profile Information: YouTube channel details, content preferences, voice profile data
- Payment Information: Billing address, payment method (processed by Stripe)
- Organization Information: Company name, team member details (for organization accounts)
- Content Data: Scripts, research materials, and content you create using our Service

1.2 Information from Third-Party Services
When you connect third-party services, we may collect:
- YouTube Data: Channel analytics, video performance metrics, competitor data (via YouTube API)
- OAuth Tokens: For Google/YouTube authentication
- Citation Sources: URLs and content from research materials you provide

1.3 Automatically Collected Information
We automatically collect certain information when you use our Service:
- Usage Data: Features used, credits consumed, content generated
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, pages viewed, referring pages
- Cookies and Tracking: Session cookies, preference cookies, analytics cookies

1.4 AI Training and Improvement Data
To improve our AI models and Service quality:
- Interaction Data: Your prompts, edits, and feedback on AI-generated content
- Performance Metrics: Script completion rates, regeneration patterns
- Quality Indicators: User satisfaction signals, content success metrics

2. HOW WE USE YOUR INFORMATION

2.1 Service Provision
We use your information to:
- Provide and maintain your account
- Process credit transactions and manage subscriptions
- Generate AI-powered scripts and research summaries
- Perform voice profiling and maintain brand consistency
- Conduct competitor analysis and strategic research
- Detect plagiarism and verify content authenticity

2.2 Service Improvement
Your data helps us:
- Enhance AI model accuracy and relevance
- Optimize credit consumption efficiency
- Develop new features based on usage patterns
- Personalize your experience and recommendations
- Debug issues and improve system performance

2.3 Communication
We may contact you for:
- Account notifications and security alerts
- Subscription and billing information
- Service updates and new feature announcements
- Customer support responses
- Marketing communications (with your consent)

2.4 Legal and Security
We use information to:
- Comply with legal obligations and regulations
- Enforce our Terms of Service
- Detect and prevent fraud, abuse, or security threats
- Protect rights, property, and safety of users and the public

3. DATA SHARING AND DISCLOSURE

3.1 Service Providers
We share data with trusted third parties who assist in operating our Service:
- Stripe: Payment processing and subscription management
- Supabase: Database and authentication services
- OpenAI: AI model processing (anonymized data only)
- Vercel: Website hosting and infrastructure
- YouTube API: Channel and video analytics
- Originality.ai: Plagiarism detection services

3.2 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change.

3.3 Legal Requirements
We may disclose your information when required by:
- Court orders, subpoenas, or legal processes
- Government or regulatory requests
- Protection of our legal rights
- Prevention of fraud or security threats

3.4 Consent-Based Sharing
We will share your information with other parties only with your explicit consent.

3.5 Aggregated and Anonymized Data
We may share aggregated, anonymized data that cannot identify you for research, marketing, or business development purposes.

4. DATA SECURITY

4.1 Security Measures
We implement comprehensive security measures including:
- Encryption: TLS/SSL for data in transit, AES-256 for data at rest
- Access Controls: Role-based permissions and multi-factor authentication
- Infrastructure Security: Secure cloud hosting with regular security audits
- Database Security: Row Level Security (RLS) for multi-tenant isolation
- Regular Updates: Security patches and vulnerability assessments

4.2 Data Breach Response
In the event of a data breach:
- We will notify affected users within 72 hours
- Provide details about the nature and scope of the breach
- Offer guidance on protective measures you can take
- Cooperate with regulatory authorities as required

5. DATA RETENTION AND DELETION

5.1 Retention Periods
- Active Account Data: Retained while your account is active
- Content Data: Retained for 90 days after account closure
- Analytics Data: Aggregated and anonymized after 24 months
- Payment Records: Retained for 7 years for legal compliance
- Marketing Data: Until you unsubscribe or withdraw consent

5.2 Data Deletion Rights
You may request deletion of your personal data by:
- Emailing support@rescriber.ai with your request
- Using the account deletion feature in settings
- Note: Some data may be retained for legal or legitimate business purposes

6. YOUR PRIVACY RIGHTS

6.1 Access and Portability
You have the right to:
- Access personal information we hold about you
- Receive your data in a portable, machine-readable format
- Request copies of your generated content

6.2 Correction and Update
You can:
- Update your account information through settings
- Request correction of inaccurate data
- Modify your communication preferences

6.3 Opt-Out Rights
You may opt-out of:
- Marketing communications (via unsubscribe link)
- Non-essential cookies (through browser settings)
- Certain data collection for AI improvement

6.4 Restriction and Objection
You can request:
- Restriction of processing in certain circumstances
- Objection to specific uses of your data
- Limitation of data sharing with third parties

7. INTERNATIONAL DATA TRANSFERS

7.1 Cross-Border Transfers
Your information may be transferred to and processed in countries other than your own, particularly the United States where our servers are located.

7.2 Data Protection Standards
We ensure appropriate safeguards for international transfers through:
- Standard contractual clauses
- Compliance with applicable data protection laws
- Equivalent protection measures

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 Types of Cookies We Use
- Essential Cookies: Required for Service functionality
- Performance Cookies: Help us understand Service usage
- Preference Cookies: Remember your settings and choices
- Analytics Cookies: Track usage patterns and improve features

8.2 Managing Cookies
You can control cookies through:
- Browser settings to block or delete cookies
- Our cookie preference center (when available)
- Note: Disabling cookies may limit Service functionality

8.3 Do Not Track
We currently do not respond to Do Not Track browser signals, but we limit tracking to essential Service functions and analytics.

9. CHILDREN'S PRIVACY

9.1 Age Restrictions
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children.

9.2 Parental Rights
If you believe your child has provided us with personal information:
- Contact us immediately at support@rescriber.ai
- We will promptly delete such information
- We will take steps to prevent future collection

10. CALIFORNIA PRIVACY RIGHTS (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

10.1 Right to Know
- Categories of personal information collected
- Sources of personal information
- Business purposes for collection
- Categories of third parties with whom we share data

10.2 Right to Delete
Request deletion of personal information, subject to certain exceptions

10.3 Right to Opt-Out
Opt-out of the "sale" of personal information (we do not sell personal information)

10.4 Non-Discrimination
We will not discriminate against you for exercising privacy rights

11. GDPR COMPLIANCE (FOR EU USERS)

11.1 Legal Basis for Processing
We process your data based on:
- Consent: For marketing and optional features
- Contract: To provide the Service you've subscribed to
- Legitimate Interests: For Service improvement and security
- Legal Obligations: To comply with applicable laws

11.2 EU User Rights
In addition to rights listed above, EU users have:
- Right to lodge complaints with supervisory authorities
- Right to withdraw consent at any time
- Enhanced data portability rights

12. THIRD-PARTY LINKS AND SERVICES

Our Service may contain links to third-party websites or integrate third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. CHANGES TO THIS PRIVACY POLICY

13.1 Policy Updates
We may update this Policy to reflect:
- Changes in our practices or Service features
- Legal or regulatory requirements
- User feedback and industry standards

13.2 Notification of Changes
We will notify you of material changes through:
- Email notification to registered users
- Prominent notice on our Website
- In-app notifications

13.3 Acceptance of Changes
Continued use of our Service after Policy updates constitutes acceptance of the revised Policy.

14. DATA PROTECTION OFFICER

For privacy-related inquiries, our Data Protection Officer can be reached at:
Email: privacy@rescriber.ai

15. CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Rescriber.ai
Email: support@rescriber.ai
Privacy Inquiries: privacy@rescriber.ai
Website: https://rescriber.ai

Physical Address:
[To be added when available]

16. EFFECTIVE DATE AND ACCEPTANCE

This Privacy Policy is effective as of January 16, 2025. By using Rescriber.ai, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Thank you for trusting Rescriber.ai with your information. We are committed to protecting your privacy and providing a secure, valuable service for your content creation needs.