Effective Date: April 4, 2026 | Last Updated: November 6, 2026
Visioneers LLC ("Visioneers," "we," "us," or "our") operates the ScriptCut application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. It applies to all users worldwide, including those in the United States, the European Economic Area (EEA), the United Kingdom, Brazil, Canada, and other jurisdictions.
For your account, billing, and usage information, Visioneers is the data controller. For the footage, audio, transcripts, and other content that you or your team upload to the Service, you decide what is uploaded and why, and we process it on your behalf and on your instructions (as a processor or service provider). Our contact details are listed in Section 13 below.
ScriptCut lets you connect your own social media accounts (such as Instagram, Facebook, TikTok, YouTube, and LinkedIn) so you can publish and schedule your videos to them directly from the Service. This feature is optional and is only active if you choose to connect an account.
When you connect a social account, and with your authorization, we receive and store: your account or channel identifier, your username or display name, basic profile information, the list of pages or channels you authorize, and the access and refresh tokens that allow the Service to post on your behalf. We use this information solely to (a) show you which account is connected, (b) publish or schedule the specific content you direct us to post, and (c) report the status of those posts back to you. We never post anything without your explicit action, and we do not access, read, or store your private messages, your follower lists, or content you did not create in ScriptCut.
ScriptCut's use of information received from these platforms complies with each platform's developer terms, including the Meta Platform Terms, the TikTok Developer Terms and Community Guidelines, and the LinkedIn API Terms of Use. ScriptCut's use and transfer of information received from Google APIs (including the YouTube Data API Services) adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube or Google account you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.
YouTube. ScriptCut uses YouTube API Services. When you connect a YouTube channel, ScriptCut uses YouTube data only to upload the videos you choose to that channel, show the connected channel's name and picture, and show the status and the view and like counts of the videos you posted through ScriptCut. We never sell or share YouTube data. You can remove ScriptCut's access at any time in ScriptCut (disconnect the channel) or on Google's security settings page at https://security.google.com/settings/security/permissions. When you disconnect the channel in ScriptCut, we delete the stored YouTube tokens and channel details right away. If you remove access on Google's page, ScriptCut notices within a day and deletes the stored YouTube data within 7 days.
We use your information for the following purposes:
AI personalization. If you use the AI tools, we keep counts and numbers about how you edit, and two short pieces of text, so suggestions can fit your style. The text is the opening words of a clip you posted (up to 240 characters), and the text of a transcript line when you press Keep on a line AI Cleanup flagged (up to 300 characters, with the speaker's name and role). This text stays inside your own account. It is never shown to another account, never pooled with other accounts, and nothing is used to train an AI model. You can view, mute, turn off, and delete what the AI has learned about how you edit in the app. The Keep text is part of your data download and is deleted when you delete your account. Where enough accounts end up making the same choice, we may change a default for everyone using counts only, never text.
If you are located in the EEA or UK, we process your personal data based on the following legal grounds under the GDPR:
| Purpose | Legal Basis |
|---|---|
| Account creation, service delivery, AI features | Performance of a contract (Article 6(1)(b)) |
| Payment processing | Performance of a contract |
| Fraud detection (Stripe Radar) | Legitimate interest (Article 6(1)(f)) |
| Service improvement and analytics | Legitimate interest |
| Marketing communications | Consent (Article 6(1)(a)) |
| Analytics cookies, Meta Pixel, HubSpot tracking | Consent |
| Legal compliance | Legal obligation (Article 6(1)(c)) |
Inside a team account. On the Team plan, several people share one account. The account's Owner and Admins can see each person's name, email address, role, and what that person did inside the account (for example which projects they created, which lines they selected, and their entries in the account's activity log). If a person is removed from a team, their name stays on the work they did there. Each person's notification settings are their own.
We do not sell your personal information. We share your data only with the following categories of service providers, solely to operate and improve the Service:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Firebase (Google) | Authentication, real-time database, file storage | Email, name, OAuth tokens, device identifiers, user content |
| Stripe | Payment processing, fraud prevention | Name, email, billing address, tokenized card data, transaction data |
| Anthropic | AI-powered features (Cleanup, Select, Arrange), the primary AI provider | Transcript text submitted to AI features. Anthropic's commercial API terms provide that this data is not used for model training. |
| OpenAI | AI-powered features (as an alternate text-AI provider, for AI-generated cover images, and for search by meaning) | Transcript text and/or image-generation prompts submitted to AI features. For search by meaning, the text of your transcript lines is sent in small batches so the app can find lines that say the same thing in other words. OpenAI's API terms provide that API data is not used for model training by default. |
| Google (Gemini API) | AI-powered features (as an alternate text-AI provider) | Transcript text submitted to AI features when this provider is selected. |
| fal.ai (Black Forest Labs models) | AI-generated cover images | Image-generation prompts and reference images submitted for AI cover generation. |
| AssemblyAI | Audio/video transcription | Uploaded audio/video and the resulting transcript text. |
| Google Cloud (Cloud Run, Cloud Storage) | Video processing (preparing your video, scene detection, rendering clips) and temporary file storage | Your uploaded and rendered video and audio files while they are processed. |
| Cloudflare (R2 storage) | Video and audio file storage | Your uploaded and rendered video/audio files. |
| Dropbox, Google Drive, Box, Microsoft OneDrive, Frame.io, Zoom, Vimeo | Optional import of your files, only if you connect one of these accounts | Your authorization for the account and the files you choose to import. |
| Google Analytics* | Website analytics | IP address (anonymized), device/browser info, pages visited, session data |
| Meta Pixel* | Advertising measurement, conversion tracking | IP address, browser/device info, page visits, conversion events |
| HubSpot* | CRM, email marketing | Name, email, pages visited, email engagement, form submissions. Our servers also send it your name, email, company, and plan so we can support you and tell you about product updates (you can opt out of marketing emails at any time). |
| Google Ads | Advertising measurement | A click identifier from an ad you clicked and whether you signed up or bought. Sent only if you accepted marketing cookies. |
| Netlify | Hosting, serverless functions | Server logs (IP address, request data) |
| Resend | Transactional email delivery | Email address, message content |
| Slack | Receiving the support requests you send us and internal alerts | Your name, your email, and the message you send to support. |
| Google Workspace (Gmail) | Company email, including mail you send to our support addresses | Your email address and the content of your message. |
| Webflow | Our marketing website, blog, and the forms on it | Anything you type into a form on our website, such as your name, email, and message. |
| jsDelivr and Google Fonts | Delivery of code libraries and fonts that your browser loads | Your IP address and browser type when your browser loads them. |
| Algolia | Search on our marketing website (blog, tutorials, product updates) | The words a visitor types into the site search box, and technical request data such as IP address. No account or project data is shared. |
* Google Analytics also runs in the ScriptCut app, under Google Consent Mode: until you accept analytics cookies it sets no cookie and sends no visitor identifier, and it does not run at all on client review links and folder links. Meta Pixel and the HubSpot tracking script run on our marketing website only after you accept cookies. Separately from cookies, HubSpot receives your account details from our servers, as described in its row above.
Social media platforms you connect: If you use ScriptCut's publishing feature, the content you choose to publish (your video, caption, and cover image) and the authorization for your connected account are transmitted to the platform you select (Instagram, Facebook, TikTok, YouTube, or LinkedIn) for the sole purpose of posting that content on your behalf. This happens only when you direct it and only to the account you authorized.
We may also share information: (a) to comply with legal obligations or respond to lawful government requests, (b) to enforce our Terms of Service, (c) to protect the rights, safety, or property of Visioneers, our users, or the public, or (d) in connection with a merger, acquisition, or sale of assets (in which case we will notify you).
We use cookies and similar technologies on the Service. For a full description of the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.
In summary, we use three categories of cookies:
Do Not Track: Some browsers transmit "Do Not Track" (DNT) signals. There is currently no industry standard for responding to DNT signals. We do not currently respond to DNT signals, but we honor cookie consent preferences as described in our Cookie Policy.
Regardless of your location, you may:
You do not have to email us to get your data. In the app, Settings > Personal Settings > Your data > Download all my data packs a copy of everything your account holds (your projects and transcripts, folders and clients, your clients' answers, billing history, notifications, support messages and your activity log) into one zip of text files and spreadsheets (CSV), a structured, commonly used format that opens in any text editor or spreadsheet program, with a download link for each of your video and audio files that works for 7 days. You can make one copy a day. The download leaves out internal notes our staff keep and internal billing bookkeeping; to get a copy of those, or anything else we hold about you, email support@scriptcut.io and we will answer within 30 days. Settings > Personal Settings > Activity shows what happened on your account in the last 12 months, including sign-ins with the approximate city and country they came from, and each time ScriptCut support opens one of your projects to help you. The activity log is kept for 12 months (older entries are cleared the next time the page is opened) and deleted with your account.
Under the California Consumer Privacy Act (CCPA/CPRA) and CalOPPA, California residents have additional rights, including the right to know what personal information is collected, the right to request deletion, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise these rights, contact us at support@scriptcut.io.
Under the GDPR and UK GDPR, you have the right to:
To exercise these rights, email us at support@scriptcut.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
Under the LGPD, you have similar rights to access, correction, deletion, data portability, and information about sharing. Contact us at the address in Section 13 to exercise these rights.
Under PIPEDA, you have the right to access your personal information, challenge its accuracy, and withdraw consent to its collection, use, or disclosure. Contact us at the address in Section 13.
We do not sell your personal information for monetary consideration. When Meta Pixel or similar advertising technologies are active on our website, certain user data (such as browsing activity and device identifiers) may be shared with advertising partners for targeted advertising purposes. Under California law (CCPA/CPRA), this may constitute "sharing" of personal information.
You have the right to opt out of this sharing. You can do so by:
In the ScriptCut app we honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid opt-out request: the analytics tag is not loaded, no cookie banner is shown, and nothing is saved, so your choice comes back the day you switch the signal off. On our marketing website, use the banner choices above or email us.
Visioneers is based in the United States. If you access the Service from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For transfers from the EEA, UK, or Switzerland, we rely on the EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework, and/or Standard Contractual Clauses (SCCs) approved by the European Commission, as applicable. Our third-party service providers (Firebase/Google, Stripe, Anthropic) maintain their own data transfer mechanisms, including participation in the Data Privacy Framework and/or execution of SCCs.
We retain your personal information only as long as necessary for the purposes described in this Policy:
| Data Category | Retention Period |
|---|---|
| Account data (name, email, profile) | Duration of your account; deleted upon account deletion (a short list of records we keep afterwards is in the last row of this table) |
| User content (transcripts, projects) | Duration of your account; deleted upon account deletion. Projects you delete or archive stay in Trash for 30 days, then are deleted automatically by a daily clean-up. When a project is deleted for good, its review-link visitor names and emails, review chat, share-link records, and the transcription provider's copy of its transcript are deleted with it. |
| Connected social account data (tokens, account info) | Until you disconnect the account, revoke access, or your access lapses |
| In-app feature usage counts | Daily counts for 60 days and your last 20 sessions; the rest is deleted automatically, and everything is deleted upon account deletion |
| Payment and billing records | At least 7 years, including after account deletion (tax and legal obligations) |
| AI processing data (Anthropic, OpenAI, Google Gemini, fal.ai) | Per each provider's own API terms (Anthropic: 30 days); we do not control third-party retention beyond what their terms specify |
| Transcription data (AssemblyAI) | Per AssemblyAI's account-level retention setting. We also delete the transcript at AssemblyAI when you delete your account. |
| Analytics data (Google Analytics) | Up to 14 months (per configured settings) |
| Marketing data (HubSpot) | Until you opt out or request deletion |
| Server logs (Netlify) | 30 days |
| Account activity log | 12 months (older entries are cleared the next time the Activity page is opened); deleted with your account |
| Error and security logs | A rolling, size-limited log of the most recent problems; the oldest entries are removed first. It can include your email address, the page, your browser type, and your approximate country. |
| Records kept after you delete your account | Billing and tax records; the error and security logs above; a minimal unsubscribe record (your email address) so we never email you again; and copies held by HubSpot (archived contacts are kept for 90 days) and by our email provider under their own policies. |
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@scriptcut.io, and we will promptly delete such information.
We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (TLS/SSL), secure authentication (Firebase Auth, with optional two-step sign-in by authenticator app or passkey), tokenized payment processing (Stripe), and access controls. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Service at least 30 days before the changes take effect. We encourage you to review this Policy periodically. The "Last Updated" date at the top indicates when this Policy was most recently revised.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint, please contact us:
Visioneers LLC
1533 N Martel Ave
Los Angeles, CA 90046
United States
Privacy requests and questions: support@scriptcut.io
General and legal: hello@scriptcut.io