Privacy PolicyLast updated: June 30, 2025
Introduction
Welcome to Script ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered academic outreach platform.Information We Collect
Personal Information
We collect information you provide directly to us, including:• Name, email address, and contact information• Academic profile information (school, research interests, academic level)• Resume and CV files you upload• Account credentials and authentication information• Communication preferences and settings
Usage Information
We automatically collect information about your use of our services:• Campaign creation and email sending activity• Email open rates, click-through rates, and response data• Device information, IP address, and browser type• Usage patterns and feature interactions
Third-Party Integrations
When you connect third-party services, we may collect:• Gmail account information and email sending permissions• LinkedIn profile data (when available)• Calendar integration data (when available)
How We Use Your Information
We use the information we collect to:• Provide, maintain, and improve our services• Generate personalized email content using AI• Find and connect you with relevant professors and researchers• Send emails on your behalf through connected accounts• Track email performance and provide analytics• Communicate with you about our services• Detect and prevent fraud or abuse• Comply with legal obligations
Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:With Your Consent
We share information when you explicitly authorize us to do so, such as when sending emails to professors on your behalf.Service Providers
We work with third-party service providers who help us operate our platform:• Cloud hosting and storage providers (Supabase, Vercel)• AI services (Google Gemini, Anthropic Claude)• Email services (Gmail API)• Analytics and monitoring services• Authentication services (Clerk)
Legal Requirements
We may disclose information if required by law or to protect our rights, users, or the public.Data Security
We implement appropriate technical and organizational measures to protect your information:• Encryption of data in transit and at rest• Regular security audits and monitoring• Access controls and authentication• Secure cloud infrastructure• Employee training on data protection
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:• Account information: Until you delete your account• Campaign and email data: 3 years after last activity• Analytics data: 2 years from collection• Communication logs: 1 year from last communication
Your Rights and Choices
You have the following rights regarding your personal information:• Access: Request a copy of your personal data• Rectification: Update or correct inaccurate information• Erasure: Request deletion of your personal data• Portability: Export your data in a common format• Restriction: Limit how we process your information• Objection: Opt out of certain processing activities
To exercise these rights, please contact us using the information provided below or use the data export feature in your account settings.Cookies and Tracking Technologies
We use cookies and similar technologies to:• Remember your preferences and settings• Authenticate your account• Analyze usage patterns and improve our services• Track email opens and clicks for analytics
You can control cookie preferences through your browser settings, though this may affect some functionality.Third-Party Services
Our platform integrates with third-party services that have their own privacy policies:• Google: Gmail API and Gemini AI services• Anthropic: Claude AI services• Clerk: Authentication and user management• Supabase: Database and backend services
We encourage you to review the privacy policies of these services.International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:• Adequacy decisions by relevant authorities• Standard contractual clauses• Certification schemes
Children's Privacy
Our services are intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it promptly.Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:• Posting the updated policy on our website• Sending you an email notification• Displaying a prominent notice in our application
Your continued use of our services after any changes constitutes acceptance of the updated policy.Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:• Email: scriptoutreach@gmail.com• Website: Through our contact form or support chat
We will respond to your inquiries within 30 days of receipt.