Last updated: December 2025
Overview
ScriptAttest ("we", "us") is committed to protecting your privacy. This policy explains
how we collect, use, and protect your information.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Organization name
- Billing information (for paid plans)
Content Data
When you use our CSP scanning and monitoring features, we process:
- Website URLs you authorize us to scan
- Page metadata and CSP headers
- CSP violation reports from your users' browsers
Usage Data
We automatically collect:
- CSP scan and violation report counts
- API usage metrics
- Error logs for debugging
How We Use Your Information
- Provide and improve the Service
- Process payments and manage subscriptions
- Send important service updates
- Provide customer support
- Analyze usage to improve features
Data Storage and Security
Your data is stored in secure AWS infrastructure. We use encryption in transit (TLS)
and at rest. Access is restricted to authorized personnel only.
Data Retention
- Indexed content: Retained until you delete it or close your account
- Violation reports: Retained according to plan limits (7-90 days), then deleted
- Scan results: Retained until you delete them or close your account
- Account data: Deleted within 30 days of account closure
Third-Party Services
We use the following third-party services:
- AWS: Cloud infrastructure and AI services
- Stripe: Payment processing
These providers have their own privacy policies and security measures.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data
- Opt out of marketing communications
Contact us to exercise these rights.
Cookies
We use essential cookies for authentication and session management.
We do not use tracking cookies for advertising.
Children's Privacy
The Service is not intended for users under 16. We do not knowingly
collect data from children.
Changes to This Policy
We may update this policy with notice via email or the Service.
Material changes will be highlighted.