Privacy policy
Plain English, because your screenplay is your most valuable asset. Last updated August 25, 2026 · ScriptRisk is in beta.
The short version
- Your screenplay stays yours. Uploading it grants us no rights beyond running the analysis you asked for.
- Scripts are encrypted in transit (TLS) and at rest (application-layer encryption on top of Google Cloud Storage's own encryption).
- We never use your screenplay to train AI models, and our AI providers process it under terms that do not permit training on it.
- You can delete any analysis at any time from My reports when signed in; for anonymous runs, contact us and we'll remove them.
- We do not sell or share your data with advertisers. There are no ad trackers on this site.
What we collect
Your screenplay and its analysis. The uploaded script, the parsed scenes, and the generated report are stored encrypted so you can revisit the report, replay the run, and use the marked-up script view. Each analysis is tied to your account and appears only in your own My reports — never in any public listing. (Runs made before sign-in became required remain reachable only through their original unguessable links.)
Account basics. Running an analysis requires Google Sign-In, which gives us your name, email address, and avatar. We use them to show you your own report history and for nothing else. We never see your Google password. Browsing the demo, case studies, and recorded replays requires no account.
Operational logs. Standard request logs (timestamps, IP-derived rate-limit counters, error traces) kept to run and debug the service. Log lines do not contain screenplay text.
Who processes your data
Analysis runs on Google Cloud (Vertex AI Gemini models, Cloud Storage, Cloud Run, Firestore) in the United States. Clearance research questions — never your script text itself, only short research queries the desks compose — are sent to the Parallel Search API. Ratings comparisons query our own database of released-film content profiles on ClickHouse Cloud; your script text is not stored there. Each provider processes data under its own enterprise terms.
Retention and deletion
Analyses are kept until you delete them. Deleting a run removes the script, the report, and the ownership record from storage. If you want your entire account and history removed, email lalitlouis@gmail.com and we will do it manually within 7 days — a self-serve account deletion is on the roadmap.
Cookies
One cookie: a signed session cookie when you sign in. No analytics cookies, no third-party trackers.
Changes
If this policy changes materially, the "last updated" date above changes and the beta banner will say so. Questions: lalitlouis@gmail.com.