PRIVACY POLICY

Last updated July 23, 2026

This Privacy Notice for Scriptre LLC ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

  • Visit our website at https://www.scriptre.com
  • Use Scriptre. Scriptre LLC provides AI-powered MCA underwriting software that analyzes bank statements and delivers funding decisions. We collect business and financial data submitted by users to power our analysis platform.
  • Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@scriptre.com.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not intentionally collect sensitive categories of personal information. Business financial records (such as bank statements) submitted to our platform — by you or through an email integration you enable — are processed solely at your direction to provide the underwriting analysis you request.

Do we collect any information from third parties? We do not collect information from third parties, except when your organization’s administrator connects an email integration (such as Google Gmail or Microsoft Outlook) — in which case we receive email data as described in the “Google User Data” section of this notice.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? Visit https://www.scriptre.com/contact or contact us at support@scriptre.com.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  5. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
  6. GOOGLE USER DATA (GMAIL INTEGRATION)
  7. HOW LONG DO WE KEEP YOUR INFORMATION?
  8. HOW DO WE KEEP YOUR INFORMATION SAFE?
  9. DO WE COLLECT INFORMATION FROM MINORS?
  10. WHAT ARE YOUR PRIVACY RIGHTS?
  11. CONTROLS FOR DO-NOT-TRACK FEATURES
  12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  13. AI ANALYSIS DISCLAIMER
  14. DO WE MAKE UPDATES TO THIS NOTICE?
  15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include: names, email addresses, usernames, passwords, contact preferences, billing addresses, and debit/credit card numbers.

Sensitive Information. We do not intentionally collect sensitive categories of personal information. Business financial records submitted for analysis are processed solely at your direction, as described in this notice.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by Stripe (https://stripe.com/privacy) and Supabase (https://supabase.com/privacy).

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services, including device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more in our Cookie Notice: https://www.scriptre.com/cookies.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, including:

  • To facilitate account creation and authentication and otherwise manage user accounts.
  • To deliver and facilitate delivery of services to the user.
  • To respond to user inquiries/offer support to users.
  • To send administrative information to you.
  • To request feedback.
  • To protect our Services as part of our efforts to keep our Services safe and secure.
  • To evaluate and improve our Services, products, marketing, and your experience.
  • To identify usage trends.
  • To comply with our legal obligations.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share information in specific situations and with the following categories of third parties: AI Platforms, Cloud Computing Services, Data Storage Service Providers, Payment Processors, Performance Monitoring Tools, User Account Registration & Authentication Services, and Website Hosting Service Providers.

We may also need to share your personal information in connection with a business transfer such as a merger, sale, or acquisition.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: https://www.scriptre.com/cookies.

5. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies ("AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions.

We provide the AI Products through third-party service providers, including Anthropic. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products.

Our AI Products are designed for: Text analysis, AI predictive analytics, AI automation, AI development, Image analysis, and AI insights.

All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties.

6. GOOGLE USER DATA (GMAIL INTEGRATION)

If your organization's administrator chooses to connect a Gmail account to Scriptre, we access Google user data through Google's OAuth consent process and the Gmail API. This section describes exactly what we access and how it is handled.

What we access. With your explicit consent, we access: (a) the email address of the connected Google account, and (b) email messages and attachments in the connected mailbox, on a read-only basis (gmail.readonly). We access mail only in accounts you affirmatively connect; we never access any Google account that has not been connected by your organization's administrator.

How we use it. We use Gmail data for exactly one purpose: identifying deal-submission emails and extracting the bank-statement PDF attachments they contain, so Scriptre can perform the underwriting analysis your organization requests. Where your organization configures an approved-senders list, only messages from those senders are processed. We do not use Google user data for advertising, we do not sell it, and we do not use it for any purpose unrelated to the deal-intake feature you enabled. Scriptre personnel do not read your email, except in the limited cases permitted by Google's policies: with your explicit permission, where necessary for security purposes (such as investigating abuse), to comply with applicable law, or as part of aggregated, anonymized internal operations.

Limited Use disclosure. Scriptre's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No AI/ML training. Google user data is never used to develop, improve, or train generalized artificial intelligence or machine learning models — by Scriptre or by our service providers. Bank-statement content is processed by our AI provider (Anthropic) solely to perform the analysis you request, under commercial terms that contractually prohibit Anthropic from training models on that content (Anthropic Commercial Terms, Section B: "Anthropic may not train models on Customer Content from Services").

How it is protected. Google OAuth tokens are encrypted at rest using AES-256-GCM; all data is transmitted over TLS; and all Gmail data is isolated per organization — one organization's connection and data are never accessible to another.

Retention and deletion. We do not retain email message bodies on our servers. Bank-statement attachments you direct us to analyze are stored as part of your organization's deal records and are deleted upon account deletion or on request. When you disconnect Gmail (one click in Scriptre), we delete the stored OAuth tokens and revoke Scriptre's access with Google. You may also revoke access at any time from your Google Account security settings.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

9. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If you become aware of any data we may have collected from children under age 18, please contact us at support@scriptre.com.

10. WHAT ARE YOUR PRIVACY RIGHTS?

You may review, change, or terminate your account at any time by logging in to your account settings or contacting us at support@scriptre.com.

Opting out of marketing communications: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link at the bottom of our emails or by contacting us.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers include a Do-Not-Track ("DNT") feature or setting. We do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.

To exercise these rights, visit https://www.scriptre.com/contact or email us at support@scriptre.com.

13. AI ANALYSIS DISCLAIMER

Scriptre LLC provides AI-powered underwriting analysis tools for informational purposes only. Our analysis does not constitute financial, legal, or investment advice. All funding decisions are made solely by the user and Scriptre LLC assumes no liability for decisions made based on our analysis.

14. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

Data Protection & Bank Statement Handling

We take the security and confidentiality of the financial data you submit seriously. The following describes how we handle bank statements and funder data:

  • Bank statements are processed for analysis; original statement files are retained as part of your organization’s deal records and are deleted upon account deletion or on request.
  • Funder data is never sold or shared with third parties.
  • Each funder's data is scoped to their organization only and is never visible to other funders.
  • Anonymized outcome data may be used to improve Scriptre's underwriting intelligence.
  • Raw bank statement data is not used to train AI models.
  • Document analysis is processed by Anthropic's API per their privacy policy at anthropic.com/privacy.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at support@scriptre.com, or by post at:

Scriptre LLC
Data Protection Officer
Broward County, FL
United States

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please visit: https://www.scriptre.com/contact.