Privacy Policy
Last updated: May 26, 2026
1. Who we are
Scribblez (scribblez.ai) is operated by Toby the Doby, LLC, based in Wisconsin, USA. You can reach us at team@scribblez.ai.
2. What we collect
Account data
Your email address, login provider (email magic link or Google), and a user ID we generate for your account.
Payment data
Purchase history, Stripe checkout session ID, payment intent ID, the credit pack purchased, amount, and currency. Card numbers are handled by Stripe — we never see or store them.
App usage data
Your credit balance and render jobs, including the prompt text you submit, your style/composition/aspect choices, the generated image, job status, timestamps, and any failure or refund state.
Analytics data (optional, with consent)
If you accept analytics, we record product events such as signup, pricing view, checkout started, checkout completed, render started, render succeeded, render failed, and low-credit CTA clicked. We do not send raw prompt text, generated image URLs, or email addresses to analytics.
Diagnostic data
Basic browser/device information, the route you were on, error messages, job IDs, and server logs — used only to operate and debug the service.
3. How we use it
- operate the service and your account;
- process payments and grant credits;
- run render jobs and store your library;
- prevent abuse and protect security;
- improve the product (only with your consent for analytics);
- communicate with you about your account.
4. Legal bases
Where the GDPR or similar laws apply, we rely on: contract (auth, payments, rendering); legitimate interest (security, fraud prevention, essential diagnostics); and consent (optional analytics).
5. Service providers
- Stripe — payment processing
- Lovable Cloud (Supabase) — database, authentication, hosting
- AI render provider — image generation
- PostHog — product analytics (only with consent)
- Email provider — transactional and auth emails
6. Retention
- Account data: kept while your account is active.
- Render history: kept until you delete it.
- Purchase records: kept as required by tax and accounting law (typically up to 7 years).
- Analytics events: up to 12 months.
- Server logs: up to 30 days.
7. Your choices
- Delete individual renders from your in-app library.
- Opt out of optional analytics at any time using the consent banner (or, when available, the in-app privacy settings).
- Email team@scribblez.ai to request a data export or full account deletion.
8. Cookies and local storage
We use essential browser storage for login, your session, your credit balance, and to remember your consent choice. Optional analytics storage is only used if you accept analytics.
9. Children
Scribblez is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18.
10. International transfers
Your data may be processed in the United States and in other countries where our service providers operate.
11. Security
We use encryption in transit, row-level security in our database, and rely on Stripe for payment data. No system is perfectly secure, but we work to protect your information.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email. The "Last updated" date at the top reflects the most recent revision.
13. Contact
Toby the Doby, LLC — team@scribblez.ai
