Legal

Privacy Policy

Last updated: 30 July 2026

This Privacy Policy explains how WENOTIFT Inc(“we,” “us,” or “our”) collects, uses, shares and protects information when you use Scripta (the “Service”), a product operated by WENOTIFT Inc. WENOTIFT Inc is a Delaware corporation headquartered at 28 Geary Street, Suite 650, San Francisco, CA 94108, United States, with an operations office in Jakarta, Indonesia. By using the Service, you agree to the practices described here.

1Data We Collect

A. Data you provide directly.

  • Account data — the email address and password you register with. Passwords are stored only as salted hashes by our authentication provider; we never see or store them in readable form.
  • Meeting content— the transcripts, notes, recordings’ text output, summaries, decisions, action items, files and comments you create or upload into a workspace. This is the core of what the Service stores on your behalf.
  • Workspace data — workspace names, the people you invite, and the role you assign each of them.
  • Payment data — billing details processed by our payment provider. We do not store full card numbers.
  • Communications — messages, support requests and feedback you send us.

B. Data collected automatically. Device and log information, pages viewed, features used, and similar usage data, collected via cookies and similar technologies.

C. Data about third parties you enter.Meeting content routinely names people who are not Scripta users — colleagues, clients, an action item’s assignee. You are responsible for having a lawful basis to record and upload that information, and for telling those people where it is held if your local law requires it.

D. What we do not collect. We do not knowingly collect special-category (sensitive) personal data, or data from children under 18, and we do not require either to use the Service.

2How We Use Data

We use the information we collect to: operate, maintain, secure and improve the Service; generate summaries, extract decisions and action items from the content you submit; process payments and manage subscriptions; respond to your requests; detect and prevent fraud and abuse; and comply with legal obligations.

We do not use your meeting content to train AI models— neither our own nor a third party’s. Content is sent to our AI processing partners solely to return a result to you, and is not retained by them for training.

3Legal Bases (EEA/UK)

Where applicable law requires a legal basis, we rely on: performance of a contract (to provide the Service you request); our legitimate interests (to secure and improve the Service); consent (where you have given it, such as for certain cookies or marketing); and compliance with legal obligations.

4How We Share Data

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share data only as follows:

  • Service providers / subprocessors — hosting, database, authentication, storage, AI processing, email delivery and payment partners who process data on our behalf under confidentiality and data-protection obligations.
  • People you invite— anyone you add to a workspace can see that workspace’s content at the level of access you grant them. Sharing is always to a named person; there are no public links.
  • Legal & safety — where required by law, regulation or legal process, or to protect our rights, our users and the public.
  • Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

5Cookies & Tracking

We use cookies that are strictly necessary to keep you signed in and to keep the Service secure, and we may use limited analytics cookies to understand how the Service is used. You can control cookies through your browser, though disabling the necessary ones will prevent you from staying signed in.

6International Data Transfers

We operate internationally and may transfer, store and process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7Data Retention

We retain account and meeting content for as long as your account is active, or as needed to provide the Service. When you delete a workspace, its meetings, decisions, action items, comments and file records are deleted with it. When you close your account, we delete or de-identify your data within a reasonable period, except where we must retain it to comply with a legal obligation or to resolve a dispute. Backups are purged on their own cycle.

8Security

Data is encrypted in transit and at rest. Access to workspace content is enforced at the database level, not only in the interface: a request for a workspace you are not a member of returns nothing. We restrict internal access to what is needed to operate the Service.

No system is perfectly secure, and we do not claim certifications we do not hold. Scripta is not currently SOC 2 or ISO 27001 certified.

9Your Rights & Choices

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal data, to object to certain processing, and to withdraw consent. You may also have the right to complain to your local supervisory authority. To exercise any of these, contact us at the address below. We will not discriminate against you for exercising a right.

10Children

The Service is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.

11Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the date above, and for material changes we will provide additional notice.

12Contact

WENOTIFT Inc, 28 Geary Street, Suite 650, San Francisco, CA 94108, United States. For privacy questions or to exercise a right, email privacy@scripta.cloud.

See also our Services Agreement.