Privacy Policy

Last updated: 3 August 2026

1. Introduction

Skriptr AS, Sem Sælands vei 1, 7034 Trondheim, Norway ("we," "our," or "us") is the data controller for personal data processed through our platform (the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the rights you have over it.

This policy is information about how we process personal data; it is not a contract. Where processing requires your consent, we ask for it separately, for example through the cookie banner described in our Cookie Policy.

2. Information We Collect

2.1 Account and Authentication Information

When you create an account, we collect:

Email address
Profile information you choose to provide (for example, a display name)

2.2 User Content and Uploads

We collect and store:

Documents, text, and content you create or edit within the Service
PDF files and images you upload to your projects
Metadata associated with your uploads (file names, sizes, upload dates)
Project information, including project names and descriptions

Important: You may upload content that contains personal data. We process this content solely to provide the Service. We do not control what personal data you include in your uploads, and you are responsible for ensuring you have the right to upload such content.

2.3 Usage and Analytics Data

We collect usage information to understand how the Service is used and to improve it, including:

Page views and navigation patterns
Feature usage (e.g., document creation, PDF uploads, exports)
User interactions and events (sign-ups, logins, project creation)
Device information and browser type
IP addresses (for security and analytics purposes)

Analytics cookies are set only with your consent. See our Cookie Policy for details and to change your preference.

We also collect error and diagnostic information so we can detect and fix failures in the Service. Error reports include technical data such as your device and browser type, your IP address, session replay, and your account ID if you are signed in. This processing is based on our legitimate interest in keeping the Service reliable and secure (see Section 3.1) and applies regardless of your analytics cookie choice.

2.4 AI Processing Data

When you use AI features, we process information you provide to those features, such as:

Text content you submit for AI processing (e.g., rewriting, translation, summarization)
Information derived from your uploaded documents to enable features such as search and citations

We may use service providers to process this information on our behalf solely to provide the AI features you request. Neither we nor our AI service providers use your content to train AI models.

2.5 Support and Communication Data

If you contact us for support, we may collect:

Email address and contact information
Messages and communications you send to us
Information related to your support request

3. How We Use Your Information

We use the information we collect to:

Provide the Service: Create and manage your account, store and process your documents, and deliver requested features
Provide AI features: Process content you submit to AI tools and return outputs to you
Improve the Service: Understand usage and improve features, reliability, and user experience
Security: Detect and prevent fraud, unauthorized access, and other security threats
Communicate: Send account-related messages (such as verification and password reset) and respond to support requests
Compliance: Comply with legal obligations and enforce our Terms of Service

3.1 Legal Bases (EEA, UK, and Norway)

Where the GDPR applies, we rely on the following legal bases:

Performance of a contract (Art. 6(1)(b)): providing the Service, including your account, your documents and uploads, the AI features you request, collaboration, and paid subscriptions
Legitimate interests (Art. 6(1)(f)): securing the Service, preventing fraud and abuse, diagnosing and fixing errors, and understanding aggregate usage to improve the Service, where these interests are not overridden by your rights and freedoms
Consent (Art. 6(1)(a)): analytics cookies and any other processing we ask you to opt in to. You can withdraw consent at any time
Legal obligation (Art. 6(1)(c)): bookkeeping and tax requirements, and responding to lawful requests from authorities

4. How We Share Information

We do not sell your personal information. We may share information in the following situations:

4.1 Service Providers

We use trusted third-party service providers to operate and improve the Service. These providers process information on our behalf and under our instructions. Categories of providers may include:

Cloud infrastructure and storage providers (to host the Service and store your content)
Authentication providers (to let you sign in securely)
Analytics providers (to understand usage and improve the Service)
Error monitoring providers (to detect and diagnose technical failures)
AI processing providers (to provide AI features you request)
Payment processors (to process subscriptions, if you choose a paid plan)

If you would like to know more about our subprocessors, contact us using the details in the “Contact Us” section.

4.2 Legal and Safety

We may disclose information if we believe it is reasonably necessary to comply with a legal obligation, protect the security or integrity of the Service, prevent fraud, or protect the rights, property, or safety of us, our users, or others.

4.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction.

5. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our service providers operate globally and may process your data in various locations.

When we transfer personal data from the European Economic Area (EEA) or United Kingdom (UK) to countries outside these regions, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable, to ensure your data is protected.

6. Data Retention and Deletion

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

6.1 Account Data

We retain your account information for as long as your account exists. If you delete your account, we delete it as described in Section 6.4.

6.2 User Content

We retain your documents, uploads, and project data until you delete them or delete your account.

6.3 Analytics Data

Analytics data is collected only with your consent and retained for a limited period appropriate to the analytics purpose, after which it is deleted or aggregated. See our Cookie Policy.

6.4 Deletion

You can request deletion of your account and associated data by contacting us using the details in the “Contact Us” section. Once we verify your request, we will delete your account and associated data, subject to legal obligations and legitimate business needs. For example, we retain billing and transaction records for as long as accounting and tax law requires (generally five years under Norwegian law). Some information may remain in backups for a limited period before being permanently deleted.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal data:

7.1 Access and Portability

You have the right to access and receive a copy of your personal data.

7.2 Correction

You have the right to correct inaccurate or incomplete personal data.

7.3 Deletion

You have the right to request deletion of your personal data, subject to certain exceptions.

7.4 Restriction and Objection

You have the right to restrict processing or object to certain types of processing of your personal data.

7.5 Withdraw Consent

If we rely on consent for processing, you have the right to withdraw consent at any time.

7.6 Complaints

If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection laws.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

8. Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, and secure authentication mechanisms.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: support@skriptr.ai
Company: Skriptr AS
Address: Sem Sælands vei 1, 7034 Trondheim, Norway