We collect three categories of information. ACCOUNT INFORMATION is what you provide when you sign up — your email address, your name, and your password (stored hashed by our authentication provider; we never see the raw value). When you join or create an organization, we record your team memberships and role. CONTENT INFORMATION is everything you create in ShowScripter — episode rundowns, segment notes, research summaries, chat messages, live-show timing data. You own this content (see Terms section 03); we host it to make the service work. USAGE INFORMATION is the operational metadata our systems generate as you use the product — which features you touched and when, request timestamps, errors, your IP address, your browser's User-Agent, and similar diagnostic signals. We rely on a small number of third-party processors to operate the service — including Sentry (error monitoring) and PostHog (product analytics) — which process this usage information on our behalf under their own security and privacy commitments.
We use the information described above only to provide and improve the service. Specifically, to authenticate you and operate your account; to sync your content across your devices and your team; to send you transactional emails like team invitations and security notices; to investigate bugs and improve performance; to detect abuse and protect the platform from misuse; and to comply with our legal obligations. We do not use your information to build advertising profiles, and we do not feed your content into third-party AI training systems.
We share information only when necessary to run the service. We rely on trusted infrastructure providers — currently Supabase for database and authentication, and Railway for application hosting — who process data on our behalf under their own privacy commitments. If you connect optional integrations like Google Docs, we share the minimum information required for that integration to work, and only at your direction. If you connect ShowScripter to a third-party AI assistant — for example, linking it to Claude through our connector — the shows, rundowns, and segments you ask that assistant to read or create are shared with that assistant's provider at your direction and under their privacy policy; we share only what you request through that connection, scoped to your own organization, and you can disconnect it at any time. We will disclose information when legally required to do so, such as in response to a valid subpoena or court order. We do not sell your information to anyone.
Your account information and content are retained while your subscription is active. If your subscription ends and you do not renew, we keep your organization's content for 12 months so you can resubscribe and restore it, after which it is permanently deleted; we send you a notice before that deletion. If you delete your account or your organization yourself, we delete your content within 30 days, except where we are legally required to retain it longer (for tax, security, or legal-hold reasons). You may request earlier deletion at any time. Diagnostic and usage logs are retained for up to 90 days and then automatically deleted. Backups are kept on a rolling 30-day window. Records of your acceptance of these Terms and this Privacy Policy are retained indefinitely as part of our legal recordkeeping.
You can access, correct, export, or delete your information at any time. For a data export or deletion request, email support@showscripter.com — we will respond within 30 days. If you live in the European Union, the United Kingdom, California, or another jurisdiction that grants specific data-protection rights (access, rectification, erasure, restriction, portability, objection, withdrawal of consent), you may exercise those rights via the same contact path and we will honor them as the law requires.
We use a small number of cookies and browser local-storage entries that are essential to operate the service — authentication tokens that keep you signed in, session identifiers that route your real-time connection, and per-browser preferences such as your collapsed sidebar state or theme. We do not use third-party advertising cookies, cross-site tracking pixels, or session-replay tools. We use lightweight first-party analytics to understand which features producers use; the data is aggregated and never sold.
We protect your information using industry-standard practices: HTTPS for all traffic, password hashing handled by our authentication provider, row-level security on the database, automated backups, and rapid response to vulnerability reports. No online system can be perfectly secure, but we take incidents seriously. If you discover a security vulnerability, please email support@showscripter.com with "SECURITY" in the subject line so we route it directly to engineering.
ShowScripter is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from anyone under that age. If you believe a child has provided information to us, contact us and we will delete it promptly.
ShowScripter is operated from the United States and our infrastructure providers are located in the United States and other regions. By using ShowScripter you consent to your information being processed in those regions, which may have different privacy laws than the country you live in. We rely on standard contractual safeguards with our processors where applicable.
We may update this Privacy Policy as the product evolves or as the law changes. We will notify you of material changes by email and by an in-app notice; non-material clarifications may take effect immediately. The version date shown at the top of this page identifies which version of the Policy is currently in effect. The current Policy is always available at showscripter.com/privacy.
For privacy questions, data-access or deletion requests, or general feedback on how we handle information, email support@showscripter.com. For urgent security concerns, please put "SECURITY" in the subject line and we will route it accordingly.