Effective Date: April 4, 2026 | Last Updated: June 23, 2026
Visioneers LLC ("Visioneers," "we," "us," or "our") operates the ScriptCut application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. It applies to all users worldwide, including those in the United States, the European Economic Area (EEA), the United Kingdom, Brazil, Canada, and other jurisdictions.
We are the data controller for the personal information we process through the Service. Our contact details are listed in Section 13 below.
ScriptCut lets you connect your own social media accounts (such as Instagram, Facebook, TikTok, YouTube, and LinkedIn) so you can publish and schedule your videos to them directly from the Service. This feature is optional and is only active if you choose to connect an account.
When you connect a social account, and with your authorization, we receive and store: your account or channel identifier, your username or display name, basic profile information, the list of pages or channels you authorize, and the access and refresh tokens that allow the Service to post on your behalf. We use this information solely to (a) show you which account is connected, (b) publish or schedule the specific content you direct us to post, and (c) report the status of those posts back to you. We never post anything without your explicit action, and we do not access, read, or store your private messages, your follower lists, or content you did not create in ScriptCut.
ScriptCut's use of information received from these platforms complies with each platform's developer terms, including the Meta Platform Terms, the TikTok Developer Terms and Community Guidelines, and the LinkedIn API Terms of Use. ScriptCut's use and transfer of information received from Google APIs (including the YouTube Data API Services) adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube or Google account you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.
We use your information for the following purposes:
If you are located in the EEA or UK, we process your personal data based on the following legal grounds under the GDPR:
| Purpose | Legal Basis |
|---|---|
| Account creation, service delivery, AI features | Performance of a contract (Article 6(1)(b)) |
| Payment processing | Performance of a contract |
| Fraud detection (Stripe Radar) | Legitimate interest (Article 6(1)(f)) |
| Service improvement and analytics | Legitimate interest |
| Marketing communications | Consent (Article 6(1)(a)) |
| Analytics cookies, Meta Pixel, HubSpot tracking | Consent |
| Legal compliance | Legal obligation (Article 6(1)(c)) |
We do not sell your personal information. We share your data only with the following categories of service providers, solely to operate and improve the Service:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Firebase (Google) | Authentication, real-time database | Email, name, OAuth tokens, device identifiers, user content |
| Stripe | Payment processing, fraud prevention | Name, email, billing address, tokenized card data, transaction data |
| Anthropic | AI-powered features (Cleanup, Select, Arrange), the primary AI provider | Transcript text submitted to AI features. Anthropic's commercial API terms provide that this data is not used for model training. |
| OpenAI | AI-powered features (as an alternate text-AI provider, and for AI-generated cover images) | Transcript text and/or image-generation prompts submitted to AI features. OpenAI's API terms provide that API data is not used for model training by default. |
| Google (Gemini API) | AI-powered features (as an alternate text-AI provider) | Transcript text submitted to AI features when this provider is selected. |
| fal.ai (Black Forest Labs models) | AI-generated cover images | Image-generation prompts and reference images submitted for AI cover generation. |
| AssemblyAI | Audio/video transcription | Uploaded audio/video and the resulting transcript text. |
| Cloudflare (R2 storage) | Video and audio file storage | Your uploaded and rendered video/audio files. |
| Upload-Post | Social media publishing | Connected social account authorization and the content you choose to publish (see below). |
| Google Analytics* | Website analytics | IP address (anonymized), device/browser info, pages visited, session data |
| Meta Pixel* | Advertising measurement, conversion tracking | IP address, browser/device info, page visits, conversion events |
| HubSpot* | CRM, email marketing | Name, email, pages visited, email engagement, form submissions |
| Netlify | Hosting, serverless functions | Server logs (IP address, request data) |
| Resend | Transactional email delivery | Email address, message content |
* These services are loaded on the landing page only and are subject to cookie consent. They are blocked until you provide consent.
Social media platforms you connect: If you use ScriptCut's publishing feature, the content you choose to publish (your video, caption, and cover image) and the authorization for your connected account are transmitted to the platform you select (Instagram, Facebook, TikTok, YouTube, or LinkedIn) for the sole purpose of posting that content on your behalf. This happens only when you direct it and only to the account you authorized.
We may also share information: (a) to comply with legal obligations or respond to lawful government requests, (b) to enforce our Terms of Service, (c) to protect the rights, safety, or property of Visioneers, our users, or the public, or (d) in connection with a merger, acquisition, or sale of assets (in which case we will notify you).
We use cookies and similar technologies on the Service. For a full description of the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.
In summary, we use three categories of cookies:
Do Not Track: Some browsers transmit "Do Not Track" (DNT) signals. There is currently no industry standard for responding to DNT signals. We do not currently respond to DNT signals, but we honor cookie consent preferences as described in our Cookie Policy.
Regardless of your location, you may:
Under the California Consumer Privacy Act (CCPA/CPRA) and CalOPPA, California residents have additional rights, including the right to know what personal information is collected, the right to request deletion, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise these rights, contact us at support@scriptcut.io.
Under the GDPR and UK GDPR, you have the right to:
To exercise these rights, email us at support@scriptcut.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
Under the LGPD, you have similar rights to access, correction, deletion, data portability, and information about sharing. Contact us at the address in Section 13 to exercise these rights.
Under PIPEDA, you have the right to access your personal information, challenge its accuracy, and withdraw consent to its collection, use, or disclosure. Contact us at the address in Section 13.
We do not sell your personal information for monetary consideration. When Meta Pixel or similar advertising technologies are active on our website, certain user data (such as browsing activity and device identifiers) may be shared with advertising partners for targeted advertising purposes. Under California law (CCPA/CPRA), this may constitute "sharing" of personal information.
You have the right to opt out of this sharing. You can do so by:
We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid opt-out request for the sharing of personal information.
Visioneers is based in the United States. If you access the Service from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For transfers from the EEA, UK, or Switzerland, we rely on the EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework, and/or Standard Contractual Clauses (SCCs) approved by the European Commission, as applicable. Our third-party service providers (Firebase/Google, Stripe, Anthropic) maintain their own data transfer mechanisms, including participation in the Data Privacy Framework and/or execution of SCCs.
We retain your personal information only as long as necessary for the purposes described in this Policy:
| Data Category | Retention Period |
|---|---|
| Account data (name, email, profile) | Duration of your account; deleted immediately upon account deletion |
| User content (transcripts, projects) | Duration of your account; deleted upon account deletion |
| Connected social account data (tokens, account info) | Until you disconnect the account, revoke access, or your access lapses |
| Payment and billing records | 7 years (tax and legal obligations) |
| AI processing data (Anthropic, OpenAI, Google Gemini, fal.ai) | Per each provider's own API terms (Anthropic: 30 days); we do not control third-party retention beyond what their terms specify |
| Transcription data (AssemblyAI) | Per AssemblyAI's account-level retention setting |
| Analytics data (Google Analytics) | Up to 14 months (per configured settings) |
| Marketing data (HubSpot) | Until you opt out or request deletion |
| Server logs (Netlify) | 30 days |
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@scriptcut.io, and we will promptly delete such information.
We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (TLS/SSL), secure authentication (Firebase Auth), tokenized payment processing (Stripe), and access controls. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Service at least 30 days before the changes take effect. We encourage you to review this Policy periodically. The "Last Updated" date at the top indicates when this Policy was most recently revised.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint, please contact us:
Visioneers LLC (