Last updated October 21, 2026
This page is being updated with counsel-approved wording.
This Privacy Notice for Scriptre LLC ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@scriptre.com.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? We do not intentionally collect sensitive categories of personal information. Business financial records, such as bank statements, reach Scriptre only through Scriptre's own intake: an upload in the app, your organization's Scriptre intake email address, a broker upload link, or a read-only bank connection you enable. They are processed solely at your direction to provide the underwriting analysis you request. Records are never collected from a connected Gmail account.
Do we collect any information from third parties? We do not collect information from third parties, except when your organization's administrator connects a Google account for communications. In that case we receive email data only for communications and deal status, as described in the “Google User Data” section of this notice, and never for underwriting or funding decisions.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? Make a privacy request at https://www.scriptre.com/privacy-request or contact us at privacy@scriptre.com.
We collect personal information that you voluntarily provide to us when you register on the Services, ask for information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information we collect may include: names, email addresses, usernames, passwords, contact preferences, billing addresses, and debit/credit card numbers.
Sensitive Information. We do not intentionally collect sensitive categories of personal information. Business financial records submitted for analysis are processed solely at your direction, as described in this notice.
Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by our payment processor.
We automatically collect certain information when you visit, use, or navigate the Services, including device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information.
Like many businesses, we also collect information through cookies and similar technologies. You can find out more in our Cookie Notice: https://www.scriptre.com/cookies.
We process your personal information for a variety of reasons, including:
We may share information in specific situations and with the following categories of third parties: AI Platforms, Cloud Computing Services, Data Storage Service Providers, Payment Processors, Performance Monitoring Tools, User Account Registration & Authentication Services, and Website Hosting Service Providers.
We may also need to share your personal information in connection with a business transfer such as a merger, sale, or acquisition.
A list of the service providers that process personal information on our behalf is available on request at privacy@scriptre.com.
We may use cookies and similar tracking technologies to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: https://www.scriptre.com/cookies.
As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies ("AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions.
We provide the AI Products through AI processing providers acting on our behalf. Your input, output, and personal information are shared with them only to provide the AI Products you use, never for training AI models, and only with providers we have accepted for that use.
Our AI Products are designed for: Text analysis, AI predictive analytics, AI automation, AI development, Image analysis, and AI insights.
All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties.
This section explains how Scriptre handles information it receives from Google when an organization connects a Google (Gmail) account, and anything derived from that information (“Google user data”).
When we receive it. Scriptre receives Google user data only if an administrator of your organization chooses to connect a Google account and approves Google's consent screen. We never access a Google account that has not been connected this way.
What we access. We request three permissions, and only these: openid, to confirm which Google account was connected; email, to show that account's email address in your settings; and gmail.readonly, read-only access to the messages and attachments in that mailbox. We do not request, and cannot use, any permission to send, compose, change or delete email. These limits are enforced in our software.
How we use it. We use Google user data only to provide the communication features you see in Scriptre: showing your team's correspondence with brokers and merchants next to the related deal, keeping that correspondence matched to the right deal, and keeping the status of a submission up to date.
What we never use it for. We never use Google user data, or anything derived from it, for underwriting, to judge creditworthiness, to decide eligibility, to score risk, or for any other funding purpose. A Gmail message or attachment is never imported or analyzed as deal evidence: bank statements and other deal documents reach Scriptre only through Scriptre's own intake (an upload in the app, your organization's Scriptre intake email address, a broker upload link, or a read-only bank connection). We do not use Google user data for advertising, and we do not sell it.
Artificial intelligence. We do not use Google user data, raw or derived, to develop, improve or train artificial intelligence or machine learning models, whether generalized models or Scriptre's own models and examples, and neither do our service providers. We do not send Google user data to any AI service.
Who can see it. Google user data is visible only to authorized members of the organization that connected the account, and is kept separate from every other organization's data. Scriptre personnel do not read it, except with your explicit permission for specific messages, where necessary for security (such as investigating abuse), to comply with applicable law, or when it has been aggregated and anonymized for internal operations.
Sharing. We transfer Google user data only as needed to provide or improve the communication features described above, to comply with applicable law, or as part of a merger, acquisition or sale of assets, only after you give your explicit consent beforehand. The service providers that host Scriptre's systems store it on our behalf, encrypted, under contract, and may not use it for any other purpose.
How we protect it. Access credentials from Google are encrypted at rest with AES-256-GCM and are never shown to anyone. Data in transit is protected with TLS. Each organization's connection and data are isolated from every other organization.
How long we keep it, and how to delete it. You can disconnect Google at any time in Scriptre's settings. Scriptre erases its stored access credentials at the moment you disconnect and asks Google to revoke Scriptre's access; your settings show whether Google confirmed the revocation. We keep messages, attachments and anything derived from them only while the connection is active, and delete them within 30 days after you disconnect or ask us to delete them, unless the law requires us to keep them longer. Records of the connection itself (who connected, when, and changes to access) contain no message content. We keep them for 1 year, except the record of a connection that is still active, which we keep until 1 year after it ends. Backups that may contain this data are overwritten within 35 days. Disconnecting does not delete anything in your Google account. You can also remove Scriptre's access at any time from your Google Account's security settings (Third-party apps with account access).
Limited Use. Scriptre's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Among other things, that policy prohibits “Transferring, selling, or using user data to determine credit-worthiness or for lending purposes.”
Questions. SCRIPTRE LLC, privacy@scriptre.com.
Deal records. Your organization's deal records (applications, bank statements, analyses, decisions, offers and the messages Scriptre sent) are kept while your organization's account is active. An admin of your organization can ask us to delete one deal's records or all deal records. Deletion starts once 7 days have passed, and until then the admin can cancel it. Deletion is finished within 30 days of the request. The history of team membership changes is kept with the deal records, and is deleted with all deal records.
Closing your organization. An admin can close your organization. We confirm on screen when it is closed, and access ends for everyone at once. The admin can cancel the closure for 8 days after closing, and Scriptre support can cancel it until 30 days after closing; after that, it can no longer be cancelled. We delete or anonymize the organization's information within 90 days of closing.
Team details. The names, email addresses and roles of your organization's team, and their sign-in accounts, are deleted or anonymized within 90 days of closing, except where they appear in the security and access logs described next.
Security and access logs. Records of who accessed your organization's information, of support access, of security checks and of what the Scriptre desktop app did (the files it opened or uploaded and the actions it blocked) are kept for 1 year after they are recorded, including after your organization is closed, and are then deleted. A record that a newer log entry refers to is kept until that entry is deleted.
Billing records. Billing records and invoices are kept while your account is active, and for 7 years after your organization is closed, as tax law requires.
When the law requires more. If the law requires us to keep information, for example because of a legal claim, we keep it for as long as that requirement lasts, and deletion waits until it ends.
Privacy requests. Records of privacy requests and how we answered them are kept for 2 years after the request is closed, and are then deleted.
Backups. Database backups are overwritten within 35 days.
Account status and deletion status are separate. A request acknowledgement does not establish that records, provider-held copies, or backups have been deleted.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.
We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@scriptre.com.
You can make a privacy request at https://www.scriptre.com/privacy-request or by email at privacy@scriptre.com: to see, correct or delete the personal information we hold about you, or to opt out of marketing email. We respond within 30 days.
If you are an admin of a Scriptre customer, you can also, in your settings, ask us to delete one deal's records or all deal records, or close your organization, as described in section 7. You may also review your account settings or contact us to request account changes or closure. Confirmation that your organization is closed is not confirmation that deletion has finished.
Opting out of marketing communications: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link at the bottom of our emails or by contacting us.
Most web browsers include a Do-Not-Track ("DNT") feature or setting. We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.
To exercise these rights, make a privacy request at https://www.scriptre.com/privacy-request or email us at privacy@scriptre.com.
Scriptre LLC provides AI-powered underwriting analysis tools for informational purposes only. Our analysis does not constitute financial, legal, or investment advice. All funding decisions are made solely by the user and Scriptre LLC assumes no liability for decisions made based on our analysis.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
We take the security and confidentiality of the financial data you submit seriously. The following describes how we handle bank statements and funder data:
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at privacy@scriptre.com, or by post at:
SCRIPTRE LLC
Data Protection Officer
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please make a privacy request at: https://www.scriptre.com/privacy-request.