Privacy Policy

Srijan (a registered proprietary firm) is the data controller for srijan.online, and Nexora Productions (a registered proprietary firm) is the data controller for scriptory.ink. Both are registered in Nagpur, Maharashtra, India.

Contact: [email protected].

Account data. Your email address, and your name if you give one. If you sign in with Google, we receive your email and basic profile from Google — never your password.

Content you create. Scripts, notes, comments, storyboards, production documents, and files you upload. Stored so you can come back to them.

Usage data. Which features you use and how often, to enforce plan limits and free-tier allowances, and to understand what to improve.

Payment data. Handled by Dodo Payments, our merchant of record. We never see or store your card details. We receive the fact of a payment, the plan bought, and a transaction reference.

Student verification. If you apply for student pricing, the school email and identity document you submit. Deleted once verification is decided and any appeal window has passed.

Live classes. If you join a live class, your camera and microphone streams pass through our video server in real time to other participants. We do not record you. An instructor may record their own camera and audio, and you are told when a session is being recorded.

Affiliate payout data. If you join the affiliate programme and request a payout, we collect your UPI ID or bank account details (name, account number, IFSC) to disburse your commission. This is used only to process payments and is never shared with third parties beyond our payment processing.

Technical data. IP address, browser and device information, and log data — used for security, abuse prevention and rate limiting.

We know this is the part that matters to a writer with an unfinished screenplay.

• Your scripts are private to you and anyone you explicitly share them with.
• Access is enforced at the database level, not just in the interface.
• Storyboard images and uploads are stored privately and served through links that expire in five minutes. There is no permanent public URL to your material.
• We do not read your scripts except where you ask us to help with a specific support issue.
• We do not use your content to train AI models, our own or anyone else's.

When you use an AI feature, we send the part of your content that feature needs — a few blocks around your cursor, the recent pages, one scene, or a scene digest — to a model provider, which returns a suggestion. That is how the feature works, and it is the same for every AI writing tool.

We send only what the feature requires, not your whole library. We instruct providers not to train on data sent through their API, and use API endpoints rather than consumer products for this reason. We cannot control a third party's own retention beyond their published terms, which is why the option below exists.

If you prefer, use your own key. You can supply your own AI provider key in settings, in which case those requests go to that provider under your own agreement with them. Keys are encrypted at rest with AES-256-GCM and are never displayed back to you in full — only the last four characters.

AI features are optional and can be switched off in your Scripty settings.

• To provide the service and store your work — performance of our contract with you.
• To take payment and prevent fraud — contract and legitimate interests.
• To send transactional email (receipts, class reminders, account notices) — contract.
• To enforce plan limits and free-tier allowances — contract.
• To keep the service secure and prevent abuse — legitimate interests.
• To meet tax and accounting obligations — legal obligation.
• To send marketing email — only with your consent, withdrawable at any time.

We do not sell personal data, and we do not use your data for advertising.

These providers process data on our behalf, only to deliver the function named:

Some of these operate outside India. Where data is transferred internationally we rely on the provider's standard contractual clauses or equivalent safeguards.

• Your content — until you delete it or close your account.
• Account data — until closure, then deleted or anonymised within 30 days.
• Backups — expire on an ordinary rolling cycle, normally within 90 days.
• Invoices and tax records — as long as tax law requires, currently 8 years in India.
• Student verification documents — deleted once the application is decided.
• Logs — normally 90 days.

• Encryption in transit (HTTPS) everywhere, and at rest by our hosting providers.
• Access to your content enforced at the database level, per user, per script.
• Your own API keys encrypted with AES-256-GCM and never shown back in full.
• Files served through short-lived signed links, never permanent public URLs.
• One active session per product, so a forgotten sign-in elsewhere is ended automatically.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

You can ask us to:

• Give you a copy of your data — most of it you can export yourself, at any time, on any plan.
• Correct anything inaccurate.
• Delete your account and data.
• Restrict or object to certain processing.
• Withdraw consent you have given, such as for marketing email.
• Nominate someone to exercise these rights if you die or become incapacitated.

Email [email protected] and we will respond within 30 days. If you are unhappy with our response you can complain to the Data Protection Board of India, or to your local supervisory authority if you are in the EU or UK.

We use cookies that are necessary for the service: keeping you signed in, enforcing one-device sign-in, and remembering your theme. We also set a referral cookie for 30 days if you arrive through an affiliate link, so the referral can be credited.

We do not use advertising or cross-site tracking cookies.

The service is not intended for children under 16. We do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

We will update this page when our practices change, and change the date at the top. For material changes we will tell you by email or in the product before they take effect.

[email protected]

Grievance Officers: Ashish Neware (Srijan Academy), [email protected]; Prathamesh Yadav (Scriptory / Nexora Productions), [email protected]. Registered address: Nagpur, Maharashtra, India.