プライバシーポリシー

Information we collect

• Your Google Account name, email address, and profile image
• Cortex settings, writing, practice answers, scores, feedback, and other content you save
• Credit balances, purchased credit packs, order identifiers, and refund records
• Technical information needed to operate the service, such as access time, browser, device, and error logs
• Essential cookies used to maintain your session and language preference

How we use information

• Create accounts and maintain secure sign-in sessions
• Provide writing practice, assessment, feedback, and learning history
• Process credit purchases, usage, refunds, and support requests
• Prevent errors and abuse and improve service reliability
• Meet legal obligations and resolve disputes

Google sign-in data

Scripta uses Google OAuth for account authentication. We do not collect or store your Google password, and we do not request Google Account data beyond the basic profile and email scopes required for sign-in.

We do not sell Google user data or use it for advertising or the sale of user profiles.

AI processing

When you use AI assessment or feedback, relevant writing and answers may be sent to Google generative AI services for analysis. We do not send your Google password or payment method information for AI analysis.

Service providers

We use the following providers to operate Scripta. Each provider processes information only as needed to provide its service.

• Google for OAuth sign-in and AI-assisted analysis
• Supabase for authentication, databases, and account data storage
• Vercel for web hosting and request processing
• Lemon Squeezy for payments, receipts, and refunds

Retention and deletion

We retain account data and user content while your account is active. If you request account deletion, we delete it within a reasonable period except for payment or dispute records that must be retained by law.

Transaction data held by a payment provider is managed under that provider’s policy and applicable law.

International processing

Because Scripta uses international providers including Google, Supabase, Vercel, and Lemon Squeezy, information may be processed outside your country. We apply appropriate safeguards through provider contracts and service settings.

Your rights and security

You may request access, correction, deletion, or restriction of your personal information. We use reasonable safeguards including access controls, encrypted transport, and least-privilege access.

Children’s privacy

Users under the age required for independent consent in their country must use Scripta with permission from a parent or legal guardian. If we learn that information was collected without required consent, we will take steps to delete it.

Contact and policy updates

Contact us below with privacy questions or account deletion requests. We will provide notice before material changes take effect.