Privacy Notice

1. Who we are

ScriptYard is operated by Filmsnickeriet AB, a company registered in Sweden, trading as "ScriptYard". Filmsnickeriet AB is the data controller for the personal data described in this notice and decides why and how it is processed. Contact: hello@scriptyard.io.

2. Data we collect, why, and our legal basis

• Account data (email address, password hash, display name, optional handle) — to create and authenticate your account and provide the service. Legal basis: performance of a contract.
• Content data (scripts, drafts, breakdowns, schedules, annotations, forum posts, direct messages) — to store and provide your work and collaboration features. Legal basis: performance of a contract.
• Purchase and entitlement data (which unlocks you own, order references received from Paddle) — to grant access to paid features and keep purchase records. Legal basis: performance of a contract and legal obligation (accounting).
• Support messages — to answer your questions. Legal basis: legitimate interests (supporting our users).
• Usage, telemetry, device identifiers and IP address — for security, fraud and abuse prevention, error diagnosis and product improvement. Legal basis: legitimate interests (secure and reliable service).
• Marketing communications, where offered — legal basis: consent, which you may withdraw at any time.

3. AI processing

When you use AI-assisted breakdown tagging or document conversion, the relevant script text is sent to our AI model provider solely to generate the requested output. Legal basis: performance of a contract.

4. Who we share data with

• Paddle.com Market Ltd ("Paddle") — our Merchant of Record. Paddle is the reseller and merchant of record for all orders. When you buy an unlock, Paddle receives and processes your personal data (name, email, billing and payment details, transaction data) for order processing, subscription management, payments, fraud prevention, tax compliance, invoicing and customer service. Paddle acts as an independent controller for that processing — see Paddle's privacy notice. We receive from Paddle only the order confirmation data we need to grant your unlock.
• Service providers / subprocessors — hosting and database providers, email delivery, AI model providers, and error monitoring, acting as processors on our behalf.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

We do not sell your personal data.

5. International transfers

Some of our providers are located outside the EEA/UK. Where data is transferred, we rely on adequacy decisions or EU Standard Contractual Clauses together with appropriate additional safeguards.

6. Retention

We keep account and content data while your account is active. When you delete your account, we delete or anonymise your personal data and content within 30 days, except records we must retain for legal reasons (for example, transaction records kept for statutory accounting periods).

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can delete your account from Account Settings, or email us and we will respond within one month. You also have the right to complain to your supervisory authority — in Sweden, Integritetsskyddsmyndigheten (IMY).

8. Cookies

We use essential cookies and local storage to keep you signed in, secure the session, and remember editor preferences and unsaved drafts. These are required for the service to work. If we use analytics cookies, they are limited to aggregate usage measurement and you can block or delete cookies in your browser settings. We do not use advertising or cross-site tracking cookies.

9. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row- level access controls, and least-privilege access to production systems. No system is completely secure, so please keep your credentials safe.

10. Changes

We may update this notice occasionally and will notify you of significant changes in the app or by email.

Filmsnickeriet AB — questions? Contact hello@scriptyard.io.