Privacy Policy

Scrivly, Inc. (“Scrivly,” “we,” “us,” or “our”) operates the website scrivly.ai and provides legal AI infrastructure products including Scrivly Local, Scrivly Pro, and Scrivly Secure (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website or use our Services.

By accessing our website or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access the website or use the Services.

1. Information We Collect

1.1 Information You Provide Directly

When you interact with our website or Services, you may provide us with the following types of information:

• Contact information: your name, email address, phone number, company name, and job title when you fill out forms, request a demo, or contact us.
• Account information: your name, email address, organization, and billing details when you create an account or subscribe to a Service.
• Communications content: the content of messages you send to us, including emails, support requests, and feedback.
• Payment information: your billing address and payment method details when you purchase a subscription or product. We do not store full credit card numbers; payment processing is handled by our third-party payment processor.

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and usage:

• Log data: your IP address, browser type and version, operating system, referring URL, pages visited, and the dates and times of your visits.
• Device information: device type, screen resolution, and device identifiers.
• Usage data: clickstream data, page interactions, and navigation patterns.

For more information about the cookies and tracking technologies we use, please see our Cookie Policy.

1.3 Information from Third-Party Services

We may receive information about you from third-party services that we integrate with or use in connection with our website and Services, including:

• Analytics providers: such as Google Analytics, which provide aggregated usage data about website visitors.
• Scheduling tools: such as Cal.com, which may provide information when you book a consultation or meeting.
• CRM tools: which help us manage and respond to customer inquiries and relationships.

1.4 Information We Do NOT Collect from Scrivly Local

Scrivly Local is an on-premises product that runs entirely on hardware within your physical environment. We do not collect, access, transmit, or store any documents, queries, outputs, or other data processed by Scrivly Local. The product operates without an internet connection for document processing.

The only data transmitted by Scrivly Local is basic telemetry for licensing verification and software updates, which does not include any document content, user queries, or generated outputs.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain our Services: to deliver the products you have purchased or subscribed to, manage your account, and provide customer support.
• Communicate with you: to respond to your inquiries, send transactional messages, and provide updates about your account or our Services.
• Improve our Services: to analyze usage patterns, diagnose technical issues, and develop new features and products.
• Process payments: to bill you for subscriptions, products, and hardware purchases.
• Marketing: to send promotional materials about our products, services, and events, but only where you have opted in to receive such communications.
• Comply with law: to comply with applicable legal obligations, regulations, and lawful requests from governmental authorities.
• Protect rights: to protect the rights, property, and safety of Scrivly, our users, and the public, including enforcing our Terms of Service.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: we share information with third-party service providers who perform services on our behalf, such as payment processing, analytics, hosting, and customer support. These providers are contractually obligated to use your information only for the purposes of providing services to us.
• Business transfers: in the event of a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction, your information may be transferred as part of the transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
• Legal requirements: we may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Scrivly, our users, or the public.
• With your consent: we may share your information with third parties when you have given us your explicit consent to do so.

4. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account information: retained for the duration of your account plus a reasonable period thereafter to comply with legal obligations and resolve disputes.
• Communications: retained for up to 3 years from the date of the communication.
• Analytics data: aggregated and anonymized analytics data may be retained indefinitely.
• Payment records: retained in accordance with applicable tax and financial regulations.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher.
• Access controls that limit access to personal information to authorized personnel who need it to perform their job functions.
• Regular security assessments and vulnerability testing.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee its absolute security.

6. Your Rights and Choices

6.1 All Users

Regardless of your location, you have the following rights with respect to your personal information:

• Access: you may request a copy of the personal information we hold about you.
• Correct: you may request that we correct inaccurate or incomplete personal information.
• Delete: you may request that we delete your personal information, subject to certain exceptions.
• Opt out: you may opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in our emails or by contacting us.
• Withdraw consent: where we rely on your consent to process your information, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at han@scrivly.ai.

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to delete: you have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to opt out of sale: we do not sell your personal information. If we change this practice in the future, we will provide you with an opt-out mechanism.
• Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights.
• Right to correct: you have the right to request that we correct inaccurate personal information we hold about you.
• Right to limit use of sensitive personal information: if we collect sensitive personal information, you have the right to limit the use and disclosure of that information to what is necessary.

To exercise your rights under the CCPA/CPRA, please contact us at han@scrivly.ai or call us at (737) 207-9373.

6.3 EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right of access: you have the right to obtain confirmation as to whether personal data concerning you is being processed, and to access that data.
• Right to rectification: you have the right to have inaccurate personal data corrected and incomplete personal data completed.
• Right to erasure: you have the right to have your personal data erased under certain circumstances.
• Right to restrict processing: you have the right to restrict the processing of your personal data under certain circumstances.
• Right to data portability: you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to object: you have the right to object to the processing of your personal data on grounds relating to your particular situation, including processing based on legitimate interests or for direct marketing purposes.
• Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority in your member state of habitual residence, place of work, or place of the alleged infringement.

We process your personal data on the following legal bases:

• Consent: where you have given us your explicit consent to process your data for a specific purpose.
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal obligations: where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate interests: where processing is necessary for the purposes of our legitimate interests, such as improving our Services, preventing fraud, and ensuring network security, except where such interests are overridden by your fundamental rights and freedoms.

To exercise your rights under the GDPR, please contact us at han@scrivly.ai.

7. International Data Transfers

Scrivly is based in the United States, and your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Services, you consent to the transfer of your information to the United States and other jurisdictions that may not provide the same level of data protection as your home country. Where required by law, we will implement appropriate safeguards to protect your information during international transfers.

8. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at han@scrivly.ai so that we can take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will update the “Last Updated” date at the top of this page. For material changes, we will provide notice via email to the address associated with your account. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions about this Privacy Policy, your personal information, or our data practices, please contact us: