Privacy Policy

1. Information We Collect

We may collect information you provide directly, including your name, email address, login details, billing details, and any content you create or store inside the app such as boards, schedules, and workspace data.

We may also collect technical information such as browser type, device information, IP address, and basic usage data needed to run, secure, and improve the service.

2. How We Use Information

We use information to:

• create and manage accounts
• provide the whiteboard, planning, and collaboration features
• process subscriptions and billing
• send service-related emails such as account confirmations and password resets
• maintain security, detect misuse, and improve the app

3. Legal Bases

Depending on the processing, we rely on:

• performance of a contract to provide accounts, boards, sharing, subscriptions, and support
• legal obligations for accounting, tax, fraud-prevention, and regulatory records
• legitimate interests in securing, maintaining, troubleshooting, and improving Scriboo
• consent where the law requires it, which may be withdrawn at any time

4. Payments and Billing

Payments are processed by Stripe. We do not store full payment card numbers on our own servers. Billing-related information may be shared with Stripe to create, manage, renew, or cancel subscriptions.

5. Service Providers

We use service providers only as needed to operate Scriboo. Current categories and principal providers include Supabase for authentication and database storage, Stripe for payments and subscription management, Vercel for website hosting and delivery, and configured email/SMTP providers for transactional and support messages. These providers process data under their own terms and applicable data-processing commitments.

6. Sharing of Information

We do not sell personal information. We may share information only when needed to operate the service, process payments, comply with law, enforce our terms, or protect the rights, safety, and security of users and the service.

7. Data Retention

Active account, board, calendar, and sharing data is kept while the account is open. When an account is deleted, Scriboo deletes or anonymizes app data without undue delay, subject to backups, security logs, unresolved disputes, and records that must be retained by law. Support correspondence is generally kept for up to 24 months after a request is closed. Security and operational logs are generally kept for up to 12 months. Stripe and other providers may retain billing, fraud-prevention, and accounting records for the periods required by applicable law and their policies.

8. International Transfers

Some providers may process data outside Poland or the European Economic Area. Where required, transfers are protected through an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism. Provider documentation contains further details about locations and safeguards.

9. Security

We use reasonable technical and organizational measures to protect personal information. However, no internet-based service can be guaranteed to be completely secure.

10. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to processing, and receive portable data. Where processing relies on consent, you may withdraw it. To make a request, contact us at support@scribooapp.com. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) at uodo.gov.pl.

11. Children's Privacy

The service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective date above.

13. Contact and Data Requests

If you have questions about this Privacy Policy, contact:

Scriboo
support@scribooapp.com