Privacy Policy
Last updated 28 July 2026
Scriptbit turns your prompts into finished video, which means sending them to AI providers on your behalf. This page says exactly what we collect, who else sees it, and how to get rid of it.
Who we are
Scriptbit is an AI video generation service operated by Anthony D’Amico, carrying on business as Scriptbit, a sole proprietorship based in Ontario, Canada.
For any privacy question, or to exercise any of the rights described below, email hello@scriptbit.com. We don’t publish a street address; if you need one for a formal request, ask and we’ll provide it.
Where we operate
Scriptbit is offered to residents of Canada and the United States. It is not directed at, or offered to, people in the European Economic Area or the United Kingdom, and we do not knowingly provide the service to them.
We are governed by Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
We collect only what the service needs to run:
- Account identity. Signing in uses Google, and it is the only sign-in method. From Google we receive your name, email address, and profile picture. We do not receive or store your Google password.
- What you create. The prompts you write, reference images and files you upload, URLs you paste for research, and the scripts, storyboards, images, audio, and video the service generates from them.
- Billing records. Your plan, renewal date, and a credit ledger recording every grant and every spend. Card details are handled entirely by Stripe and never reach our servers.
- Operational records. Per-render cost rows used to keep pricing honest, plus error reports and product analytics describing how the app is used.
We do not sell personal information, and we do not use your prompts or generated content to train our own models.
Why we use it
To generate the video you asked for, to keep your account and credit balance accurate, to take payment, to detect abuse and automated traffic against paid endpoints, and to diagnose failures.
Under PIPEDA we rely on your consent, given when you create an account and accept these terms, and limit our use to these purposes. If we ever want to use your information for something else, we’ll ask first.
Who processes your data
Generating a video means sending your prompt and any reference material to AI providers. This is the complete list of services that receive data, and what each one gets:
- Vercel — hosting and serverless compute; also AI Gateway, which routes some model requests, and BotID, which fingerprints traffic to paid endpoints to block automated abuse.
- Supabase — authentication and the primary database: your profile, projects, videos, and credit ledger.
- Google — sign-in (OAuth), and Gemini models for scripts, images, video, and speech.
- OpenAI — agent planning and image generation.
- Anthropic — research, scriptwriting, and directing agents.
- ElevenLabs — narration and background music generation.
- fal.ai — additional video model hosting.
- Cloudflare R2 — storage for every generated image, audio file, and video.
- Trigger.dev — runs the background rendering pipeline, so prompts and media pass through it.
- Firecrawl — fetches the content of URLs you paste for research.
- YouTube — when you paste a video link as a reference, we retrieve that video’s public data.
- Stripe — payments, subscriptions, and invoices.
- PostHog — product analytics and error reporting.
Each of these providers applies its own terms to the data it receives. If your work is confidential, treat anything you put into a prompt as disclosed to the providers above.
Your data leaves Canada
Every provider listed above stores and processes data outside Canada, primarily in the United States. This is worth stating plainly: while your information is held in another country, it is subject to that country’s laws, and may be accessible to its courts, law enforcement, and national security authorities.
By using Scriptbit you consent to your information being transferred and processed outside Canada.
How long we keep it
Your projects, generated media, and credit history are kept for as long as your account exists, because the service would not work otherwise. Deleting your account removes them.
Analytics and error reports are held separately by PostHog under its own retention settings, and are not removed by deleting your account. If you want those deleted too, email us and we’ll do it by hand.
Billing records are retained after account deletion where we’re required to keep them for tax and accounting purposes.
Deleting your account
You can delete your account from the account page at any time. Deletion removes your generated media from storage, and your account and its associated records from our database. It cannot be undone, and it does not refund unused credits.
Data already sent to an AI provider in the course of generating a video is governed by that provider’s retention policy, not ours.
Your rights
Under PIPEDA you can ask what personal information we hold about you, how we’ve used it, and who we’ve disclosed it to; ask us to correct anything inaccurate; and withdraw your consent, which means closing your account.
Email hello@scriptbit.com and we’ll respond within 30 days, as PIPEDA requires.
If you’re unhappy with how we’ve handled a request, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Security
Access to your projects and credit history is enforced at the database level, so one account cannot read another’s data. Payment card details never touch our servers — Stripe handles them. Traffic is encrypted in transit.
No service is perfectly secure. If we ever discover a breach that creates a real risk of significant harm to you, we’ll notify you and the Privacy Commissioner, as PIPEDA requires.
Children
Scriptbit is not intended for children. You must be at least 18 to use it, and we don’t knowingly collect information from anyone younger. If you believe a minor has created an account, email us and we’ll remove it.
Changes to this policy
We will update this page when our practices change, and will revise the date at the top. If a change materially affects how your information is handled, we will tell you before it takes effect.