ScriptPad — Privacy Policy

🔒 ScriptPad — Privacy Policy

Last updated: July 20, 2026

In short: Your scripts and notes are stored on your own device and stay there by default. ScriptPad works fully without an account. Some optional features — signing in, Teams, the AI Assistant, and Pro subscriptions — do send specific data to our service providers. This page explains exactly what, and when.

1. Data Stored Locally on Your Device

By default, everything you create in ScriptPad — your scripts, folders, tags, notes, knowledge-base entries, and settings — is stored locally in your browser using Chrome's storage API (chrome.storage.local). If you never sign in, this data never leaves your device, and we never see it.

You can export all of it as a JSON file at any time via Settings → Export, and uninstalling ScriptPad removes it.

2. Data We Collect When You Use Optional Features

The following features are optional. You only share the data described if you choose to use them.

Feature	What is sent, and to whom
Account sign-in	If you create an account, your email address and password are sent to Supabase (our authentication and database provider) to create and secure your account. Passwords are stored by Supabase in hashed form; we never see your password.
Teams & shared scripts	If you create or join a team, the scripts shared to that team, the team name, invite code, and the email addresses of team members are stored in our Supabase database so team members can see the shared library.
AI Assistant	When you send a message to the AI Assistant, the text of your question, the relevant knowledge-base content you have saved, and your recent messages in that chat are sent — through our Supabase server — to Google (the Gemini AI model) to generate a reply. This text is not linked to your identity at Google. Do not put passwords or sensitive personal data into the AI Assistant.
Pro subscription	If you upgrade to Pro, your email address and account ID are used to create a subscription with PayPal, which processes the payment. Your card and billing details are handled entirely by PayPal — ScriptPad never receives or stores them.

Feature

What is sent, and to whom

Account sign-in

If you create an account, your email address and password are sent to Supabase (our authentication and database provider) to create and secure your account. Passwords are stored by Supabase in hashed form; we never see your password.

Teams & shared scripts

If you create or join a team, the scripts shared to that team, the team name, invite code, and the email addresses of team members are stored in our Supabase database so team members can see the shared library.

AI Assistant

When you send a message to the AI Assistant, the text of your question, the relevant knowledge-base content you have saved, and your recent messages in that chat are sent — through our Supabase server — to Google (the Gemini AI model) to generate a reply. This text is not linked to your identity at Google. Do not put passwords or sensitive personal data into the AI Assistant.

Pro subscription

If you upgrade to Pro, your email address and account ID are used to create a subscription with PayPal, which processes the payment. Your card and billing details are handled entirely by PayPal — ScriptPad never receives or stores them.

3. Third-Party Service Providers

ScriptPad relies on these providers only to deliver the features above. We do not sell your data, and we do not use advertising or tracking networks.

4. Chrome Permissions

ScriptPad does not request access to your browsing history, your tabs, your web requests, or the content of the websites you visit.

5. Analytics & Tracking

ScriptPad does not use cookies, advertising, fingerprinting, tracking pixels, or third-party analytics SDKs. The only "usage" data is a private count, stored locally on your device, of how often you use each script — used to show your "Most Used" scripts. It is never transmitted.

6. Data Retention & Deletion

7. Children's Privacy

ScriptPad is a professional tool for call center agents, sales representatives, and business users. It is not directed at children under 13 and does not knowingly collect information from children.

8. Changes to This Policy

If we change this policy, we will update this page and the "Last updated" date above. Significant changes to how data is handled will be reflected here before they take effect.