Privacy Policy

Last updated: June 9, 2026

This Privacy Policy explains what personal information ScribistIQ ("ScribistIQ," "we," "us," or "our") collects, how we use and share it, and the choices you have. It applies to the ScribistIQ website and service (the "Service"). By using the Service, you agree to the practices described here.

Information we collect

• Account information. Your name, email address, and (for password accounts) a hashed password. If you sign in with Google, we receive your name, email address, and profile image from Google.
• Billing information. Subscription plan, status, billing period, credit balance, and identifiers from our payment processor (Stripe), such as your Stripe customer and subscription IDs. We never receive or store your full card number, expiry, or CVC — those are handled directly by Stripe.
• Content you create. The premises, outlines, style samples, chapters, cover prompts, generated text, generated cover images, and generated audio associated with your account, so we can store them in your library and serve them back to you.
• Usage and device logs. For each generation and certain other requests we log the originating IP address, browser user agent, endpoint, timestamp, status, credit cost, model usage (token counts and cost), and request identifiers. These logs support rate limiting, abuse prevention, debugging, and proving service delivery in the event of a payment dispute.
• Waitlist and signup information. If you join a waitlist or signup funnel, we collect your email, name, IP address, and user agent.
• Analytics and advertising data.Page views, in-product events (such as starting a generation or beginning checkout), and advertising identifiers, as described in "Analytics and advertising" below.
• Communications. Messages you send us (for example, support requests) and the email address they come from.
• Promotional emails. If you create an account or join our waitlist, we may send you promotional emails about ScribistIQ features, offers, and updates. You can opt out at any time using the unsubscribe link in any such email; opting out does not affect transactional messages (for example, password resets, receipts, or security notices).

How we use information

We use the information above to:

• provide, operate, maintain, and improve the Service;
• create and secure your account and authenticate you;
• process payments, manage subscriptions, and administer your credit balance;
• generate, store, and deliver the content you request;
• prevent fraud and abuse, enforce our Terms, and defend payment disputes;
• measure and improve our marketing, including advertising attribution; and
• communicate with you about your account, transactions, and support requests.

Analytics and advertising

We use analytics and advertising tools to understand how the Service is used and to measure the performance of our advertising. These tools may set cookies or similar identifiers and may receive information about your device and activity:

• Product analytics (PostHog). We capture page views and in-product events, associated with your account once you are signed in, to understand feature usage. Anonymous autocapture is disabled.
• Meta Pixel and Conversions API.We use Meta's advertising tools to measure and optimize our ads. When you visit the Service or take certain actions (such as beginning checkout or subscribing), we may share event data with Meta, including a hashed (irreversibly encoded) version of your email address, your IP address, user agent, and Meta's advertising cookies (_fbp and _fbc), along with the event name and, for purchases, the transaction value. We do not send your plaintext email or your generated content to Meta.
• Error monitoring (Sentry). When an error occurs, we collect diagnostic information such as stack traces and request context to debug and improve reliability.

You can limit advertising tracking through your browser's cookie controls, your device's ad settings, and Meta's ad preferences. See "Your choices and rights" below for information on opting out of the sharing of personal information for advertising.

AI processing of your content

To generate books, covers, and audio, we send your inputs (such as premises, prompts, style samples, and prior generated text needed for continuity) to third-party AI providers, currently OpenAI (text) and Replicate (cover images and text-to-speech). These providers process your inputs to return output and may retain data for limited periods under their own terms (for example, for abuse monitoring). We do not use your generated content to train our own models, and we do not sell your content.

How we share information

We do not sell your personal information for money. We share information only as described here:

• Service providers (sub-processors) that perform functions on our behalf, listed below.
• Advertising partners(Meta) for measurement and optimization, as described above. Under some U.S. state privacy laws, this may be considered a "sale" or "sharing" of personal information; you may opt out as described below.
• Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of ScribistIQ, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

Sub-processors

We may add or change sub-processors, and will update this list when we do.

Cookies

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. Our advertising and analytics tools may set additional cookies and identifiers, including Meta's _fbp and _fbc cookies. You can control or block cookies through your browser settings; blocking strictly necessary cookies may prevent you from signing in.

Data retention

We keep account and content data for as long as your account is active. Usage and device logs (including IP address and user agent) are retained for up to 18 months for security, abuse prevention, and dispute defense, after which they are deleted or aggregated. We retain billing records as required for tax, accounting, and legal purposes. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we are required or permitted by law to retain it (for example, transaction records and logs needed to defend a payment dispute).

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to opt out of the sale or sharing of personal information for targeted advertising. To exercise these rights, email the address below. We will respond within the time required by applicable law (generally 30–45 days). We will not discriminate against you for exercising your rights.

• Account deletion. You may request deletion of your account and associated data. Deletion permanently removes your books, covers, audio, and credits and cannot be reversed.
• Do Not Sell or Share / opt out of targeted advertising. To opt out of our sharing of personal information with advertising partners, email privacy@scribistiq.com with the subject "Privacy Choices," and adjust your browser and Meta ad settings.
• Regional rights. Residents of Canada have rights under PIPEDA; residents of California have rights under the CCPA/CPRA; and residents of other U.S. states with privacy laws have comparable rights. Each includes the right to lodge a complaint with the applicable regulator.

International users

ScribistIQ is operated from Canada, and our providers process data in Canada, the United States, and other countries. If you access the Service from outside these countries, you understand that your information will be transferred to and processed in them, which may have different data-protection laws than your jurisdiction.

Security

We use technical and organizational measures designed to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Age requirement

ScribistIQ is intended only for adults 18 and older, and is not directed to anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has registered an account, contact us and we will delete it.

Data controller

ScribistIQ is operated from New Brunswick, Canada. For the purposes of PIPEDA and other applicable laws, the data controller is ScribistIQ, contactable at the email below.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date above; please review it periodically. Your continued use of the Service after changes take effect constitutes acceptance. We provide individual notice of changes only where, and to the extent, required by applicable law; where notice is not legally required, we will not separately notify you, and the current posted version governs.

Contact

Questions about privacy or to exercise your rights? Email privacy@scribistiq.com.