Privacy Policy

This Privacy Policy describes how JJB Ventures, LLC (“Scriptfox,” “we,” “us”) collects, uses, and shares information about you when you use Scriptfox at getscriptfox.com(the “Service”). By using the Service, you agree to this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and (if you sign in with Google) your name and profile image. Authentication is handled by Clerk; we do not store passwords.

1.2 Content You Create

When you use Scriptfox, we store the scripts you write, the folders and tags you organize them with, and your settings (theme, font sizes, voice preferences, etc.). This content is yours; we hold it on your behalf to deliver the Service.

1.3 Voice and Audio Data (Tiered Consent)

Scriptfox processes audio from your microphone during voice-mode sessions to track your reading position in the script. How we handle that audio is split into two tiers, both controlled in your Settings → Voice data page and revocable at any time:

• Tier 1 — Transcript snapshots (default on, opt-out anytime). We compare what our speech-to-text engine heard (text only) to the script you were reading and save mismatches anonymously so we can improve voice-tracking quality for everyone. Audio is NOT stored for Tier 1 — only the text comparison.
• Tier 2 — Session audio capture (default off, fully opt-in). If you explicitly turn this on, we store the raw audio of your voice-mode sessions in Cloudflare R2 for up to 60 days. We use this to debug specific voice-tracking failures you flag, and to tune our matcher. Sessions auto-delete after 60 days. You can also delete them immediately from Settings.
• Tier 3 — Voice contribution for model improvement (default off, explicit opt-in). If you explicitly opt in, we retain audio of your reading sessions together with the corresponding script text and transcript (“Voice Data”) and share it with Scriptfox and our affiliate partners to develop and improve voice-recognition, voice-tracking, wake-word, and related models. We do not sell Voice Data, and we never share your name or contact information with your recordings. You may withdraw consent and delete your contributed recordings at any time from Settings, except for data already used to train models, which may not be retrievable.

Real-time speech-to-text happens via Deepgram (cloud) for the matcher stream and on-device via Picovoice Porcupine for the “Hey Fox” wake word. Picovoice runs entirely in your browser and sends no audio anywhere. Deepgram processes audio in-flight; transcripts pass through under their privacy policy.

1.4 Usage Data

We log basic usage telemetry — pages visited, features used, error events, and performance timings — so we can understand which parts of the Service work well and which need work. This data is associated with your account but is not sold or used for cross-site advertising.

1.5 Payment Data

If you subscribe to a paid plan, payment is processed by Stripe. We never see or store your card number; Stripe handles all payment information directly under their own privacy policy. We store Stripe's customer and subscription identifiers so we can match your subscription to your account.

1.6 YouTube Integration (Optional)

If you connect your YouTube channel to Scriptfox, we receive an OAuth token granting limited access to YouTube data on your behalf. We use this to link your scripts to published videos and (for paid plans) to display analytics about how your videos perform. We only access channels you explicitly authorize, and you can disconnect at any time from Settings.

1.7 Cookies and Similar Technologies

• Essential cookies: required to sign you in (Clerk), maintain your session, and remember your preferences.
• Affiliate tracking cookies: if you arrive via an affiliate or referral link, we set a cookie that identifies the referring partner for 60 days so they receive credit if you subscribe. Managed by Promotekit.
• Source-attribution cookie: if you arrive via one of our campaign links (e.g. /r/youtube), we set a first-party cookie for 60 days noting which channel you came from, so we can understand where our sign-ups originate. This is purely for our own analytics — it carries no discount and is separate from the affiliate/referral program above.
• Analytics: we use Google Analytics (GA4) to understand aggregate traffic and how the Service is used. This may set Google Analytics cookies. We do not use third-party advertising cookies and we do not sell your data.

2. How We Use Your Information

We use the information we collect to:

• Deliver, maintain, and improve the Service;
• Authenticate you and secure your account;
• Process payments and manage subscriptions;
• Improve voice-tracking accuracy (per the tiered consent above);
• Detect, prevent, and respond to fraud, abuse, or security incidents;
• Send transactional emails (account, billing, support replies);
• Comply with legal obligations.

We do not sell your personal information, and we do not use your content (scripts, recordings) to train third-party AI models.

3. Service Providers (Subprocessors)

We rely on the following service providers to run Scriptfox. Each is bound by data-protection agreements and processes data only as needed to provide their service to us:

• Clerk — authentication and user account management
• Supabase — primary database (PostgreSQL) hosted in the United States; stores your scripts, settings, and account state
• Vercel — application hosting and content delivery
• Cloudflare R2 — storage for opt-in session audio recordings (Tier 2 only)
• Stripe — payment processing and subscription management
• Deepgram — real-time speech-to-text for the voice-tracking matcher
• OpenAI — text embeddings for script matching, GPT-4o-mini for voice command interpretation and support chat
• Picovoice— on-device wake-word detection (“Hey Fox”); audio never leaves your browser
• Resend — outbound transactional email (account notifications, support replies)
• Promotekit — affiliate program tracking and commission management
• Google Analytics — aggregate website-traffic and usage analytics (GA4)
• Google Workspace (Gmail) — inbound email at support@getscriptfox.com
• Google (YouTube API) — only if you opt in by linking your YouTube channel

4. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your account and associated data;
• Export your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent for optional processing (e.g., Tier 2 audio capture).

Most of these are self-serve from your Settings page (delete account, export scripts, manage voice-data consent). For anything that needs us to act, email support@getscriptfox.com and we'll respond within 30 days.

5. Data Retention

• Account and content: retained for as long as your account is active. Deleting your account permanently removes your scripts, settings, and Tier 1 transcript snapshots within 30 days.
• Tier 2 session audio (opt-in only): auto-deleted 60 days after recording. You can delete immediately from Settings.
• Payment records: retained as required by tax and financial regulations (typically 7 years).
• Support tickets: retained for 24 months after resolution.

6. Security

We use industry-standard practices to protect your information, including HTTPS for all data in transit, encryption at rest in our databases, scoped service-role credentials with the principle of least privilege, and routine review of access logs. No system is 100% secure; if we ever experience a breach affecting your data, we will notify you promptly.

7. Children's Privacy

Scriptfox is not intended for users under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. International Transfers

Our service is operated from the United States, and your data may be processed in the United States. If you access the Service from outside the U.S., you consent to your data being transferred to and processed in the U.S. and the jurisdictions of our subprocessors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the “Last updated” date at the top and, for substantial changes, notify active users by email or in-app banner.

10. Contact

Questions about this Privacy Policy or our data practices? Email support@getscriptfox.com.

Mailing address: JJB Ventures, LLC — please email for current address.