Privacy policy

The words whose initial letters are capitalized have the meanings defined below. These definitions mean the same thing whether they appear in the singular or the plural. We use "Personal Data" and "Personal Information" interchangeably unless a particular law uses a specific term.

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access the Service or parts of it.
• Application refers to Screencake, the software program provided by the Company.
• CCPA/CPRA refers to the California Consumer Privacy Act as amended by the California Privacy Rights Act of 2020.
• Company (referred to as "the Company", "We", "Us" or "Our") refers to Screencake LLC, 1300 South Blvd, STE 33497, Charlotte, NC 28203, USA. For the purposes of the GDPR, the Company is the Data Controller.
• Consumer, for the purposes of the CCPA/CPRA, means a natural person who is a California resident.
• Cookies are small files placed on your device by a website. Ours are described in the Cookies Policy.
• Country/State refers to North Carolina, United States.
• Device means any device that can access the Service, such as a computer, a phone or a tablet.
• GDPR refers to the EU General Data Protection Regulation, and where we say GDPR we mean the UK GDPR too.
• Local Mode means using the desktop app without an account, where your scripts are stored only on your own device.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application, the Website, or both.
• Service Provider means a company or person that processes data on our behalf to help us run the Service. Under the GDPR these are Data Processors.
• Usage Data refers to data collected automatically, either generated by use of the Service or from the infrastructure itself.
• Website refers to Screencake, accessible from screencake.com.
• You means the individual accessing or using the Service, or the legal entity on whose behalf they do so. Under the GDPR you are the Data Subject.

In the desktop app's Local Mode, your scripts stay on your device. We cannot read them and we do not receive them. Local Mode makes no network requests of its own — the one exception is a model download you start yourself, described below — and our release tests assert exactly that.

With a paid plan, sign-in automatically uploads local scripts to your private workspace. Screencake keeps the local copy. Local scripts belong to the first account you use with them.

In the desktop and mobile apps, downloaded, unencrypted personal scripts remain on your device after sign-out. You can edit them there and sync the changes through the same account. In a browser, sign-out removes your scripts and account data from the browser. Team, shared, and encrypted scripts require account access.

When you sign in and sync, scripts are stored so they can be delivered back to your devices and to collaborators you invite. We access script content only when you explicitly ask us to, for example to help recover a file, and never for training, advertising or analysis. If you give a review link a recipient's name, that name is stored with the link and shown on the pages that link serves.

Cloud AI is off by default. If you turn it on in Account, and only then, the excerpt you ask about — a line and the lines around it, a scene, or a shot's description — is sent from our server to the provider for that one request: Anthropic for writing help, TypeSafe for breakdown suggestions, OpenAI for storyboard frames. Nothing is sent in the background, and a workspace can forbid it for its scripts. Under their API terms these providers process the excerpt to answer it and do not use it to train their models; OpenAI keeps an abuse-monitoring log for up to thirty days. We hold the request and its result for no more than a day, so you can collect the result, then delete both. Encrypted scripts and Local Mode never use it.

Where a feature uses a model on its own — scene search, and the natural voices for the table read (Kokoro, an open speech model) — the model runs entirely on your device. Its weights download once from a Screencake domain (models.screencake.com), only when you turn the feature on; that request carries nothing about you or your script. The app's security policy forbids the browser itself from connecting to any AI vendor. You can remove a downloaded model from the same place you turned it on. Your writing never trains a model, ours or anyone else's.

An account requires an email address, a name, and a password. Passwords are stored hashed, never in plain text. If you turn on two-factor authentication we also store the secret and your recovery codes, encrypted; if you enrol a passkey we store its public key, which cannot be used to impersonate you and is not biometric data. If you set up encrypted scripts we store your public key and your private key wrapped by your password and by your recovery key, neither of which we hold or can unwrap.

We do not ask for your postal address, your phone number, or your date of birth, and there is nowhere in the product to give them to us.

Paddle.com is our merchant of record for purchases made on our website. When you buy a plan there, your order is with Paddle: it collects and processes the payment, calculates and remits sales tax or VAT, and holds the billing details. We never see or store your card number — what comes back to us is the billing status, the plan, and the renewal date.

Subscriptions and credits bought inside the iPhone or iPad app are sold by Apple, and Apple holds those billing details. Your app sends us one thing: the transaction identifier Apple issued, which we send back to Apple to check what was bought and then keep against your account so the purchase can be honoured and restored. We never receive your card number, your Apple Account, or your name from Apple.

Paddle is an independent controller of the information you give it at checkout, and its own privacy policy governs that. Payment processors of this kind adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council.

Paddle also runs a small script on our public pages, the dashboard, the account page and the billing pages, so it can recover a failed payment or offer a cancellation survey without sending you away from Screencake. It receives the page you are on and, if you have bought a plan, the customer ID Paddle assigned you — nothing else, and never script text. It sets no cookies; our Cookies Policy has the detail.

We keep standard server logs of requests, errors, and timestamps, to keep the service running and debug problems. These logs do not contain script text.

When something crashes or errors, a diagnostic report goes to Sentry, our error-tracking provider. It contains the error, where in our code it happened, and which version of Screencake you were running, never your script text. Page addresses are stripped of anything identifying first, and we do not send your IP address to them. On the website this happens for everyone, because it is how we find out the site is broken. In the desktop app it happens only if you turn on performance monitoring, and never at all when you are working without an account.

In the desktop app you can also send us a bug report yourself, from Help ▸ Report a Bug…. It carries what you write and, if you leave the box checked, your app version, platform, browser engine, theme, workspace mode, the current page with identifiers stripped, whether you were online, your locale, and your window size. You see it before it is sent. It goes to our support inbox, not to Sentry.

We also count how often product features are used, and how often the pages of this website and its buttons are, in aggregate: a daily number per feature or page, nothing more. These counters are not tied to your account, your device, or your scripts. Writing offline without an account sends nothing at all.

Separately, you can turn on performance monitoring in your account settings. It is off unless you turn it on. With it on, we send page timings to Sentry: how long things took to load and respond, so we can find and fix what is slow. It never includes script text, and page addresses are stripped of anything identifying (script, production, and share-link identifiers are removed) before they are sent. We do not use session recording, and there is no advertising or cross-site tracking analytics anywhere in Screencake.

The website uses three cookies, all of them strictly necessary to sign you in and to protect your requests. We do not run third-party advertising or cross-site tracking cookies, which is why there is no cookie banner. Each one is named and explained in the Cookies Policy.

We use Personal Data to:

• Provide and maintain the Service, and monitor that it is working.
• Create and administer your Account, and give you access to the features your plan includes.
• Perform our contract with you, including processing a purchase and keeping your subscription accurate.
• Contact you about your account — security notices, invitations, renewal and payment notices, and replies to things you ask us.
• Tell you when someone comments on or mentions you in a script you can see. These are on by default; you can turn email and phone notifications off in your account settings, and every such email has a one-click unsubscribe link.
• Send occasional product news, where the law lets us. Every such email has an unsubscribe link, and where consent is required, we ask first.
• Keep the Service secure: detect and prevent fraud, abuse and unauthorized access, and defend legal claims.
• Understand which features are used, in aggregate, so we know what to improve.
• Evaluate or complete a merger, sale, or transfer of the business, in which case your data may be among the assets transferred.

We do not use your Personal Data for advertising, we do not sell it, and we do not use your Content to train models.

If you choose Ask the docs in documentation search, we send your typed question and public manual text to Fireworks through our server. We don't attach your account identity or script content; anything you type into the question is sent, so leave out private information. Searching without choosing Ask the docs never sends your query to an AI provider.

Fireworks does not use these inputs to train models. Its zero data retention policy for open models means prompts and answers are not stored persistently without opt-in. Prompt caches can remain in volatile memory for several minutes, and Fireworks keeps service metadata such as token counts. Screencake caches questions and answers to reuse an answer to the same question. If you report an answer, its text is included in your support report.

We do not sell personal information. We share data only with the providers required to run Screencake, and only to the extent they need it: Linode (hosting), Cloudflare (R2 for backups, release artifacts, storyboard images and profile pictures — stored in a private bucket, served from media.screencake.com on short-lived signed links through Cloudflare's cache, and deleted with the script or account; a removed image can remain in that edge cache for up to a day), Resend (transactional email), Paddle (our merchant of record for payments made on our website), Apple (the seller of anything bought inside the iPhone or iPad app — we exchange the transaction identifier with it to verify a purchase), Sentry (error reports, and page timings if you turn on performance monitoring), Anthropic, TypeSafe and OpenAI (the excerpt you send when you ask cloud AI for writing help, breakdown suggestions or a storyboard frame — only with cloud AI on, described above), Fireworks (your question and public manual text when you choose Ask the docs), and Slack (channel messages, only for workspaces whose admin connects one: names, titles, comment text and links — never script pages). We may disclose information if legally compelled, and will tell you unless prohibited.

Each of these is bound by a written contract that limits them to processing data for us, for the purposes we specify, and requires them to keep it confidential.

Beyond our Service Providers, Personal Data may be disclosed in a business transaction, such as a merger, acquisition, financing or sale of assets — we will give notice before your data becomes subject to a different privacy policy. It may also be disclosed to law enforcement or other public authorities where we are required to by law, or where we believe in good faith that it is necessary to comply with a legal obligation, protect our rights or property, prevent or investigate wrongdoing, protect the personal safety of users or the public, or defend against legal liability.

If you collaborate on a production, the people you invite can see the Content in that production and the name and email you signed up with. That is the point of collaboration, and it happens only for productions you join or invite others to.

Crew email addresses you enter on a production's crew list are used only to send the call sheets you choose to send, and are deleted with the script.

We take security seriously, but no method of transmission over the internet or of electronic storage is completely secure. While we use commercially reasonable means to protect your Personal Data, we cannot guarantee its absolute security. Our security page describes the specific measures in place.

Synced scripts are kept while your account is active. Delete a script and it is removed from active systems and ages out of routine backups. Delete your account and the same applies to your workspaces and everything in them. Two things stay, without your name attached: comments you left in someone else's workspace, and share links you made there — that is their content, and deleting it would take work away from people who still need it. Scripts kept only in Local Mode do not reach us. We have no copy to delete.

Beyond that, we keep different categories for different periods, and the periods below are maximums — we delete or anonymize sooner when the data is no longer needed:

• Account information — for as long as the account exists, and up to 24 months afterward to resolve any post-closure issues or disputes.
• Support correspondence — up to 24 months from when the conversation closes.
• Server logs and error reports — up to 24 months, for security monitoring and troubleshooting.
• Transaction records — invoice and purchase records for up to 10 years, because tax and accounting law requires it. Card details are not among them; we never hold those.

We may keep data longer where the law requires it, where it is needed to establish or defend legal claims, or where you ask us to. Residual copies can persist in encrypted backups for a limited period on our normal backup schedule, and are not restored except for disaster recovery, security, or legal compliance. For an encrypted script, backups hold only the encrypted copy.

Screencake is operated from the United States, and your information is processed there. If you are outside the United States, using the Service means your data is transferred to a country whose data protection laws may differ from your own.

Where we transfer Personal Data out of the EEA or the UK to a country without an adequacy decision, we rely on appropriate safeguards — the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or a recipient's certification under the EU-U.S. Data Privacy Framework where it applies — together with measures such as encryption in transit and at rest, access controls and data minimization. Write to us if you would like details of the safeguards used for a particular transfer.

Where the GDPR applies, we process Personal Data on these bases:

• Performance of a contract — creating and administering your Account, providing the Service, processing purchases, and providing support.
• Legitimate interests — securing the Service and preventing fraud and abuse, understanding and improving how it works, sending non-marketing service messages, enforcing our agreements, and evaluating a business transfer. Our interest is running the Service securely and sustainably, balanced against your rights.
• Consent — marketing email where consent is required, and performance monitoring, which is off until you turn it on and can be turned off again at any time, as is cloud AI: the switch in Account is your consent, and each request sends only the excerpt you ask about.
• Legal obligation — keeping transaction, tax and accounting records, and responding to lawful requests from courts and public authorities.

Withdrawing consent does not affect the lawfulness of what we did with it beforehand.

You can request a copy of your data, correct it, or ask us to delete it by emailing support@screencake.com. Much of it you can do yourself: account settings let you change your name and password, download everything you own as one archive (Account › Your data), and delete your account (the desktop and iOS apps open that page for you). Per-script export is always available and never gated behind a plan.

Where the GDPR applies you also have the right to request restriction of processing, to object to processing based on our legitimate interests or to direct marketing, to receive your data in a structured, machine-readable format and have it transmitted to another provider, and to withdraw consent. Depending on where you live you may have additional rights under local law; we apply these practices to everyone regardless.

We may ask you to verify your identity before we act on a request. We generally respond within one month and may extend by two further months where a request is complex, telling you if we do. You also have the right to complain to a supervisory authority — your local data protection authority in the EEA, or the Information Commissioner's Office in the UK.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. If that changes, we will update this policy and provide the information and safeguards the GDPR requires.

This section supplements the policy above and applies to residents of California. Below are the categories of personal information defined by the CCPA/CPRA, and whether we have collected them in the last twelve months.

• Category A: Identifiers. Real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name. Yes — your name, email address, and the IP addresses in our server logs.
• Category B: California Customer Records (Cal. Civ. Code § 1798.80(e)). Name, signature, physical description, address, telephone number, passport or licence number, insurance or financial account numbers, medical information. Yes, but only your name. We hold no address, phone number, government identifier, or financial account number — Paddle (our merchant of record on the web) and Apple (the seller in the iPhone and iPad app) handle billing details and we never receive them.
• Category C: Protected classification characteristics. Age, race, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex, sexual orientation, veteran status, genetic information. No.
• Category D: Commercial information. Records of products or services purchased or considered, purchasing histories or tendencies. Yes — which plan you are on and the billing status Paddle reports back to us.
• Category E: Biometric information. Fingerprints, faceprints, voiceprints, iris scans, keystroke or gait patterns. No. Passkeys and Touch ID never leave your device; we receive a public key, which is not biometric data.
• Category F: Internet or other network activity. Browsing history, search history, information on a consumer's interaction with a website or application. Yes — server request logs, and error reports with identifiers stripped out. No browsing history across other sites, ever.
• Category G: Geolocation data. Approximate or precise physical location or movements. No.
• Category H: Sensory data. Audio, electronic, visual, thermal, olfactory or similar information. No.
• Category I: Professional or employment-related information. Current or past job history or performance evaluations. No.
• Category J: Non-public education information. Education records maintained by an educational institution. No.
• Category K: Inferences drawn from other personal information. A profile reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes or aptitudes. No. We build no profiles and draw no inferences about you.
• Category L: Sensitive personal information. Government identifiers, account log-in credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, contents of mail or messages, genetic, biometric or health data, sexual orientation. Yes, in one narrow respect: your account credentials — a hashed password and, if you enrol them, second-factor secrets and recovery codes. We use them only to sign you in and to secure your account, which is a permitted purpose, and never to infer anything about you.

Personal information does not include publicly available information, deidentified or aggregated information, or information excluded from the CCPA/CPRA's scope, such as data covered by HIPAA, the FCRA, the Gramm-Leach-Bliley Act or the Driver's Privacy Protection Act.

We obtain personal information directly from you (the forms you fill in and the purchases you make), indirectly from your use of the Service, automatically through the strictly necessary cookies described in the Cookies Policy, and from Service Providers such as our payment provider.

We use it for the business purposes described above: operating the Service, supporting you, fulfilling the reason you gave it to us, detecting security incidents and fraud, internal administration and auditing, and responding to law enforcement requests and legal obligations.

In the last twelve months we disclosed Categories A, B, D and F for business purposes, to the Service Providers named above. Each is under a written contract that limits the recipient to the specified purpose and requires confidentiality.

We have not sold or shared the personal information of California residents in the preceding twelve months, and we do not sell or share personal information as the CCPA/CPRA defines those terms — including for cross-context behavioral advertising. There is therefore no "Do Not Sell or Share My Personal Information" link to offer you. If that ever changes we will update this policy, add the link and the opt-out methods, and honor opt-out preference signals such as Global Privacy Control.

We collect sensitive personal information only in the narrow sense described in Category L — your account credentials — and use it only to authenticate you and secure your account. We do not use or disclose it to infer characteristics about you, so the right to limit its use does not apply and we do not provide a separate process for it.

If you are a California resident, you have the right:

• To notice — to be told which categories of personal information are collected and why.
• To know and access — to request the categories collected, the sources, the purposes, the categories of third parties involved, and the specific pieces of personal information we hold about you.
• To correct inaccurate personal information.
• To delete your personal information, subject to the exceptions the law allows — for example where we still need it to provide something you asked for, to detect security incidents, to debug, or to comply with a legal obligation.
• To opt out of the sale or sharing of personal information. We do neither, but the right stands.
• To limit the use and disclosure of sensitive personal information, subject to the exception described above.
• Not to be discriminated against for exercising any of these rights — we will not deny you service, change your price, or give you a lesser product because you did.

To exercise any of them, email support@screencake.com. Only you or an authorized agent may make a request, and it must give us enough information to verify who you are and to understand what you are asking for. We will confirm receipt within 10 business days and respond within 45 calendar days, extendable once by a further 45 days if reasonably necessary, in which case we will tell you why.

Our Service does not respond to Do Not Track signals, because it does no tracking for those signals to stop. Some third-party sites do track browsing activity, and you can set a DNT preference in your browser's settings for those.

Under California Civil Code § 1798.83, the Shine the Light law, California residents with an established business relationship with us may ask once a year about personal data shared with third parties for those third parties' own direct marketing. We do not share personal information for that purpose.

Under California Business and Professions Code § 22581, a California resident under 18 who is a registered user may request removal of content they have publicly posted. Email us from the address on the account. Removal may not be complete or comprehensive, and the law does not require it in all circumstances.

The Service is not directed to anyone under 16, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has given us personal information, contact us and we will remove it as soon as reasonably possible.

Some countries and states set a higher age for consenting to the processing of one's own personal information. Where we rely on consent and the applicable age is higher than 16, we may require a parent or guardian's consent first.

The Service may contain links to sites we do not operate. If you follow one, you are on that third party's site, governed by its own privacy policy. We have no control over and take no responsibility for the content or practices of any third-party site, and we advise you to read the privacy policy of every site you visit.

If this policy changes in a way that affects you, we'll update the date at the top and notify account holders by email before the change takes effect. Changes are effective when posted on this page, and we encourage you to review it periodically.

Questions about this policy, or to exercise any right described in it: support@screencake.com, or Screencake LLC, 1300 South Blvd, STE 33497, Charlotte, NC 28203, USA.