Draft

Privacy Policy

Status: Draft for reviewDraft date: June 2026Version: 2026-06-draft-1

This policy explains what Script Epic stores, what is sent to your AI provider when you use AI features, and what happens when you delete your account.

1. Information we collect

Account information

Your email address and (optionally) your name.
A securely hashed password. We never store your password in plain text.
Account timestamps and status (for example, created date, last login, and whether your email is verified).

Your project content

The screenplays, outlines, scenes, characters, and related work you create are stored so you can return to them. This is the core of the service.

AI provider connection

If you connect an AI provider (OpenRouter), we store the connection and its credential encrypted at rest, plus non-secret metadata about the connection. We use it only to make AI requests you initiate.

Cookies and sessions

We use a session cookie to keep you signed in. It is HTTP-only and used for authentication, not third-party advertising. We do not load third-party advertising or tracking scripts.

Operational logs

We keep limited operational and usage metadata (for example, request counts, model used, token counts, and cost estimates) to run and debug the service. These records do not contain your screenplay text.

2. What is sent to your AI provider

When you choose to run an AI action, the relevant screenplay text and context are sent to OpenRouter, which routes the request to a model provider to produce a response. Manual editing, saving, and export do not require AI processing and do not send your content to a provider. See the AI Processing Disclosure for detail.

OpenRouter and the underlying model providers are third parties with their own privacy practices, which vary and can change. We do not control how they retain or process requests. Please review OpenRouter's privacy settings and policy. We cannot guarantee any particular provider's retention or that requests are processed in any particular country.

3. How we use information

To provide and maintain the service and your account.
To perform AI actions you initiate, via your connected provider.
To secure the service and prevent abuse.
To communicate with you about your account (for example, verification, password, and account-deletion emails).

4. Billing data

Script Epic's billing infrastructure is dormant during the free beta. We do not charge you and do not collect payment-card details for Script Epic. AI charges are handled by OpenRouter under your own account.

5. Data retention and account deletion

While your account is active, we retain your account and content so you can use the service.
When you request deletion, your account enters a 30-day grace period. During this window you can restore your account by signing back in / contacting support; your content is retained so restoration is possible.
After the grace period, we permanently delete your account, your screenplays and their scenes and related content, your stored provider connection and credential, your sessions, and your security tokens.
We may retain limited operational records in anonymized form (for example, aggregate usage and cost telemetry with the account identifier removed) and security/audit records as needed to operate the service and meet legal obligations.

Disconnecting OpenRouter in Script Epic removes the connection stored in Script Epic, but may not revoke the credential on OpenRouter's side. Manage or revoke it in your OpenRouter account. Deleting your Script Epic account is separate from closing your OpenRouter account.

Backup retention windows are subject to operational confirmation; copies in backups may persist for a limited period after deletion and are overwritten on the normal backup cycle (to be confirmed).

6. Security

We use measures such as password hashing, encryption of provider credentials at rest, and session controls. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

7. Your choices and controls

Update your profile and connection in Settings.
Change your password or email; these actions sign out your other sessions.
Export your screenplays from the app.
Delete your account from Settings.
For a copy of your personal data or other privacy requests, contact support@scriptepic.com.

8. Children

Age-eligibility and any children's-privacy provisions to be finalized with counsel (placeholder).

9. International processing

Where processing occurs and any international-transfer terms to be confirmed with counsel and infrastructure (placeholder). We do not claim that data is processed only in your country.

10. Changes and contact

We may update this policy and will update the version on material changes. Privacy questions and data requests: support@scriptepic.com.