Legal

Script Security

Last updated: May 23, 2026

Your scripts are yours.

We never use them to train AI. We never sell them. We never share them. This page explains exactly how we keep that promise.

What happens when you upload or write

  • 1. Parsed in your browser, or typed in our editor

    For uploads, your file is read and parsed locally. We never receive your raw file — only the cleaned-up text needed to power your analysis. For drafts written in the ScriptDen editor, we receive the structured block content you type (scene headings, action lines, character cues, dialogue).

  • 2. Encrypted, then stored in your private account

    Before it touches our database, your script is encrypted on our server with AES-256-GCM. This applies to uploaded scripts and to drafts written in the editor. Even a database leak would surface only opaque ciphertext. Every row is also protected by row-level access control — only your user account can read your scripts and drafts.

  • 3. Only you can see it — and you can see who touched it

    No other user can ever fetch your scripts or drafts, even by guessing IDs. Every script has an Activity log on its page showing every view, export, and edit — visible only to you.

  • 4. Delete anytime, permanently

    Hitting delete is a hard delete — the script, its analysis, its activity log, and (for drafts) its revision snapshots are removed immediately. You can also delete every script and draft, or your entire account, from the Billing page.

What happens when you save a draft revision

The editor lets you manually save snapshots of a draft as revisions. Each revision is encrypted with the same AES-256-GCM key and protected by the same row-level access controls as the draft itself. Revisions live in a separate table, but they are not independent copies — they are tied to the parent draft and are deleted automatically when the draft is deleted. We do not keep hidden backups of deleted drafts or revisions.

Where analysis runs today

100% in your browser. Every analysis feature currently in ScriptDen — scene timeline, character graph, dialogue vs action, sentiment, locations, storyboard — is computed locally on your device using plain JavaScript. No script text is sent to any AI model.

AI features (opt-in, per script)

ScriptDen now supports optional AI-powered helpers — per-scene summaries, AI sentiment scoring, and (for Kannada) character cue extraction. These are off by default. You turn them on for a specific script during upload.

Three guarantees that will never change:

  1. Opt-in, per script. AI features are off by default. You turn them on for a specific script when you want them.
  2. Snippet-scoped. We send only the single scene needed for the feature — never the full 120 pages. Each request is independent.
  3. Zero retention, no training. AI calls go through the Lovable AI Gateway, which routes to providers (Google Gemini, OpenAI) under zero-retention API terms. Your content is not used to train any model and is not stored after the response is returned.

AI helpers are available for all supported analysis languages (English, Spanish, Kannada). The same opt-in and snippet-scoping rules apply regardless of language.

What we never do

  • Train AI models on your scripts. Not ours, not anyone's.
  • Sell or share script content with third parties.
  • Log script text in our application logs.
  • Allow engineering staff to browse user content casually — production access is restricted and audited.
  • Use anonymous accounts for uploads. You sign in first, so every script has a clear owner.

Your controls

  • Activity log — every script page shows the last 50 events (uploads, views, exports, deletions) so you can spot anything unexpected.
  • Watermarked exports — every PDF or CSV export carries a small footer with your email and the export timestamp, so if a copy ever leaks you know where it came from.
  • Delete a single script or draft — from the script or draft page; immediate and permanent, including any revision snapshots.
  • Delete everything — from the Profile page, a single action removes every script, draft, analysis, revision, and activity on your account.
  • Delete your account — also on the Profile page. Permanently wipes scripts, drafts, revisions, analyses, activity, and sign-in.

Transport and storage

All traffic between your browser and our servers is encrypted in transit (TLS / HTTPS). Script content is encrypted at rest with AES-256-GCM before it's written to the database, so the underlying Postgres stores only ciphertext. Title, author, and genre are kept as plain metadata so your library search keeps working.

Reporting a concern

Found something that doesn't match what's on this page? Email contactscriptden@gmail.com and we'll respond quickly.

See also our Privacy Policy and Terms & Conditions.