Legal
Privacy Policy
Last updated: 21 August 2026
Grevelingenstraat 196, 8226 GL Lelystad, the Netherlands
Chamber of Commerce (KvK) 92949584 · VAT ID NL004988586B25
support@scribbleflip.com
ScribbleFlip ("we", "us", "our") provides an AI-powered content repurposing tool at scribbleflip.com (the "Service"). This policy explains what personal data we collect, why, and what rights you have over it. For any privacy question, contact support@scribbleflip.com.
1. What data we collect
| Data | Why we collect it |
|---|---|
| Email address | Account creation, login, transactional email (password resets, receipts). |
| Password | Stored as a salted bcrypt hash — we never see or store your plain-text password. |
| Text you submit for transformation | Sent to our AI provider to generate your content, and saved in your history so you can revisit past results. |
| Usage data (flip counts, timestamps, plan tier) | Enforcing plan limits, showing your analytics dashboard, product improvement. |
| Payment details | Handled entirely by our payment processor — we never see your card number. We store your subscription status and related billing identifiers. |
Session cookie (sf_session) | Keeps you logged in. Strictly functional — not used for tracking or advertising, so it does not require cookie consent under EU law. |
| IP address, basic request logs | Security, abuse prevention, debugging. |
2. Who we share it with
We use a small number of third-party providers to run the Service. Each receives only the data it needs for its specific task, under its own privacy and security obligations, and none of them may use your data for their own purposes.
| Provider | What it does | What it receives |
|---|---|---|
| OpenAI | Generates the repurposed content | The text you submit for a flip |
| Stripe | Processes payments and subscriptions | Your email address and payment details — card details go to Stripe directly and never reach us |
| Resend | Sends transactional email | Your email address and the message contents |
| Railway | Hosts the application and its database | Everything stored in your account |
Some of these providers are based outside the European Economic Area, or may process data there. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses or on an adequacy decision such as the EU–US Data Privacy Framework.
We do not sell your data, and we do not use it for third-party advertising.
3. How long we keep it
We keep your account and transformation history for as long as your account is active. If you delete your account (see Section 5), we delete your personal data within 30 days, except where we're legally required to keep records longer (e.g. financial/tax records related to payments).
4. Legal basis (EU/EEA users)
- Contract — processing needed to provide the Service you signed up for.
- Legitimate interest — security, fraud prevention, improving the product.
- Consent — only where we explicitly ask for it (currently: none beyond account creation).
5. Your rights
Under the GDPR (and similar laws elsewhere), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data ("right to erasure").
- Export your data in a portable format ("right to data portability").
- Object to or restrict certain processing.
To exercise any of these rights, email support@scribbleflip.com or use the contact form. We'll respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).
6. Security
Passwords are hashed with bcrypt and never stored in plain text. Traffic to the Service is encrypted in transit (HTTPS). Access to production data is limited to what's needed to operate the Service. No system is 100% secure, but we take reasonable technical and organizational measures to protect your data.
7. Children
The Service is not directed at children under 16. We don't knowingly collect data from children.
8. Changes to this policy
We may update this policy from time to time. Material changes will be announced by email or an in-app notice. The "Last updated" date above always reflects the current version.
9. Contact
Questions about this policy or your data? Reach us at support@scribbleflip.com or via the contact page.