ScriptFolk

Privacy Policy

Last updated:

Data Nutrition Label

A compact, plain-language summary of our default data practices.

Collection

  • Account and contact details
  • Enrollment and course activity
  • Payments via a payment processor

Storage

  • Encrypted in transit and at rest
  • Role-based access controls
  • Limited retention by purpose

Sharing

  • No sale of personal data
  • Vendors for payments & infrastructure
  • Minimal analytics where enabled

Control

  • Export and delete upon request
  • Cookie preferences stored locally
  • Opt-out of non-essential cookies

1. Information we collect

We collect information you provide to create and manage your account, enroll in courses, and communicate with us. This typically includes your name, email address, and billing information processed by our payment provider. We may also collect course activity (progress, completion events) and limited technical logs (such as timestamps and error diagnostics) to keep the platform reliable.

We avoid collecting unnecessary identifiers and do not intentionally collect sensitive personal data unless you explicitly provide it (for example, in a support request).

2. How we use information

  • Provide and maintain our courses and services (account access, enrollments, content delivery).
  • Process transactions and prevent fraudulent activity.
  • Respond to inquiries and provide customer support.
  • Improve content quality, platform performance, and user experience.
  • Comply with applicable legal obligations and enforce our terms.

3. Cookies

We use cookies and similar technologies for essential functions such as sessions and preferences. Where enabled, we may use minimal analytics to understand aggregated usage and improve performance.

You can control cookies through your browser settings. If our cookie consent banner is available on the site, your preference is stored locally (on your device) and can be changed by clearing site data in your browser.

4. Sharing

We do not sell personal data. We share limited information with vendors that help us run the service (for example, payment processors, hosting, email delivery), under contractual obligations to protect data and use it only for providing services to us.

5. Security

We use administrative, technical, and organizational safeguards designed to protect data, including encryption in transit and at rest, access controls, and periodic review of security practices. No method of transmission or storage is 100% secure, but we work to minimize risk.

6. Your rights

Depending on your location, you may have rights such as access, rectification, deletion, restriction, portability, and objection. To exercise your rights, contact [email protected]. We may request verification to protect your account and prevent unauthorized actions.

7. Retention

We retain personal data only as long as necessary for the purposes described in this policy, including providing the service, maintaining business records, resolving disputes, and meeting legal requirements. When data is no longer required, we delete or anonymize it according to our retention practices.

8. International

We operate globally. If you access the service from outside the region where our systems are hosted, your information may be transferred and processed internationally. Where applicable, we rely on recognized safeguards for cross-border transfers.

9. Changes

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page and update the “Last updated” date above.

View full legal text

This expanded version provides additional legal context. It is intended to be readable and practical, while acknowledging that requirements differ by jurisdiction.

Lawful bases (where applicable)

  • Performance of a contract: providing your account, enrollments, and course access.
  • Legitimate interests: improving the service, preventing fraud, securing systems.
  • Consent: non-essential cookies or marketing preferences where presented.
  • Legal obligation: tax, accounting, and compliance requirements.

Processors and sub-processors

We may use service providers that process data on our behalf (processors). We require contractual safeguards that restrict use, protect confidentiality, and include security commitments. We aim to select reputable vendors and limit data shared to what is necessary.

Contact & requests

For privacy questions or requests, contact [email protected] or call +1 (415) 550-1298. If you submit a request, we may ask for additional information to verify identity and scope the request.

Children

Our services are not directed to children under 13 (or the minimum age required by your jurisdiction). If you believe a child has provided personal data, contact us so we can take appropriate action.

Quick privacy request

Submit an access, export, or deletion request. This form validates locally and opens a confirmation modal.

Submitting opens a prefilled email draft to [email protected] (no data sent automatically).