Legal
Privacy policy
Last updated October 21, 2026
Scrybe is run by Scrollprep LLC. This page explains what we collect, why we need it, and the choices you have. We keep the product simple, and we try to keep the data simple too.
What we collect
Account details
Your name, email address, a hashed password, and the timestamps and security details Better Auth needs for sessions. If you sign in with a passkey or another provider later, we will update this page.
Résumé and site content
The file you upload, the parsed and polished résumé data, logos, highlights, your chosen address, color and display settings. Published pages are public by design. Your original upload is private and is deleted after 30 days.
Subscription details
Polar, our payment processor, handles card details. We receive the subscription id, status, renewal date and the fact that a payment succeeded. We never see your full card number.
Usage and technical data
We record a page view for each published page without cookies: the page address, country and referring host. We skip obvious bots. We also keep ordinary server logs needed to run and secure the service, and an upload count to enforce limits.
Reports and messages
If you report a page or email us, we keep what you send so we can follow up.
Why we use it
- To build, render, publish and update your page.
- To sign you in, verify your email and protect your account.
- To take payment, manage your subscription and handle refunds.
- To build your page and, when you ask, to polish it with AI.
- To keep the service reliable, prevent abuse and understand which pages are viewed.
- To answer support and legal requests.
AI processing
When you upload a résumé, its text is sent to DeepSeek's API to parse it. When you turn on AI polish, the relevant résumé text is sent to DeepSeek again. Organization names from your résumé are also sent to DeepSeek Search to find their icons. DeepSeek processes this to return a result; we do not use your résumé to train our own models. You can leave polish off. The page still builds without it.
Who processes data for us
- Cloudflare — hosting, Workers, D1 database, R2 storage, email delivery and analytics.
- Polar — subscription checkout, payment processing and billing portal.
- DeepSeek — résumé parsing and optional AI polish.
- Email and logo providers — transactional email and company logo lookups.
These providers process data on our instructions and under their own terms. Some are in the United States. We do not sell personal data or share it for advertising.
Cookies and local storage
The app uses a host-only session cookie so you stay signed in. We do not use advertising cookies or third-party analytics scripts on published pages. The public pages count views without cookies.
How long we keep it
- Account and site data: while your account exists.
- Original uploads: 30 days after processing.
- Unpublished drafts: 24 hours after the latest upload, or until you publish.
- Paused pages and held addresses: 90 days after pausing.
- Reports and support messages: as long as needed to resolve them and meet legal obligations.
- Webhook and security records: 30 days for deduplication and abuse checks.
When you delete your account, we remove your page, versions, uploads and account from D1 and both R2 buckets, and revoke the subscription in Polar. Backups and processor records may persist for a limited period under their retention rules.
Your choices and rights
You can hide your email or phone from your page, hide the page from search engines, change your address, or delete everything. Depending on where you live, you may also have the right to access, correct, export, restrict or object to processing, and to complain to a supervisory authority. Email hello@scrybe.me and we will help.
Security
Passwords are hashed, sessions are host-only on the app domain, and the private bucket is not bound to the public sites Worker. No service is perfectly secure; use a strong, unique password and tell us if you think your account was compromised.
Children
Scrybe is for people 18 and older. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
Changes
If we make a material change to this policy, we will tell you by email or in the app before it takes effect. The date at the top always shows the current version.
Contact
Privacy questions: hello@scrybe.me. Scrollprep LLC, USA.