Privacy Policy

1. Controller Identity

2. Data We Collect

We collect only the data necessary to operate Scribology, provide your account, and improve the platform.

Account Data

• Name
• Email address
• Hashed password
• Email verification status

Technical & Security Data

• IP address
• User agent
• Device information
• Session data
• Authentication logs

Usage & Analytics Data

Collected only if you opt in to analytics via our Accept/Decline banner:

• Page views
• Feature usage
• Interaction patterns
• Error logs

Processed through PostHog, hosted in Europe.

Customer Content

If you choose to use Scribology:

• Course progress

Payment Data (TO BE CLARIFIED BEFORE LAUNCH)

Processed by third-party payment providers:

• DodoPayments

We do not store full payment card details.

Email Communication Data

• Transactional emails via Resend
• Marketing emails via Mailchimp, only if you opt in

Video Delivery Data

• Video playback and performance metrics via Mux

We do not collect data for advertising, profiling, or resale.

3. How We Use Your Data

We process your data for the following purposes:

To provide your account and deliver the service

Legal basis: Contract performance

• Account creation
• Authentication
• Access to lessons, prompts, and roadmaps
• Email verification
• Password resets

To maintain security and platform integrity

Legal basis: Legitimate interests

• Fraud prevention
• Session management
• Abuse detection

To improve Scribology

Legal basis: Legitimate interests

• Analytics (only if opted in)
• Feature performance
• Error monitoring

To send transactional emails

Legal basis: Contract performance

• Account updates
• Password resets
• Service notifications

To send marketing emails (optional)

Legal basis: Consent

• Newsletters
• Product updates
• Launch announcements

You may withdraw consent at any time.

4. Third-Party Processors

We use trusted service providers to operate Scribology:

Hosting & Infrastructure

• Netlify — frontend hosting
• Convex — backend hosting
• Squarespace — domain management

Analytics

• PostHog (EU hosting, opt-in only)

Email

• Resend — transactional emails
• Mailchimp — marketing emails (opt-in only)

Payments (TO BE CLARIFIED BEFORE LAUNCH)

• DodoPayments

Video

• Mux

We do not use advertising networks or customer support platforms.

5. International Data Transfers

Some processors may store or process data outside the EU.

Current known locations

• Convex: United States
• Netlify: United States
• Resend: Ireland
• Mailchimp: United States

Where transfers occur, we rely on:

• Standard Contractual Clauses (SCCs)
• EU–US Data Privacy Framework, where applicable
• Additional safeguards required under GDPR

6. Data Retention

We currently retain data until you request deletion, which will be done manually.

Retention includes:

• Account data
• Writing content
• Analytics (if opted in)
• Email logs

You may request deletion or export at any time.

7. Your GDPR Rights

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Request restriction of processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with your supervisory authority

Requests can be made by contacting us at privacy@scribology.com.

8. Cookies & Tracking

Scribology uses cookies for:

Essential functionality

• Authentication
• Session management
• Security

Analytics (optional)

• PostHog tracking cookies

Enabled only if you explicitly accept via our banner.

Advertising

• None

You can decline analytics cookies at any time.

9. Security Measures

We implement:

• Encrypted passwords
• Email verification
• Session revocation on password reset
• Access controls
• Secure hosting providers
• HTTPS encryption
• Monitoring through PostHog and Convex logs

We continuously improve security as the platform evolves.

10. Children’s Privacy

Scribology is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy as Scribology evolves. Changes will be posted on this page with an updated revision date.

12. Contact Us

For privacy questions or GDPR requests, contact:

privacy@scribology.com