Privacy
We read your handwriting. We keep your pages for a day.
ScriptumIQ exists to read your private notes, so the privacy rules are part of the product's design, enforced in code, and short enough to read in full. For a security or procurement review, the data handling sheet has the detail.
What we collect
- Your email address, password hash, timezone and settings, and a device token for your reMarkable account.
- Each night, the notebook pages you changed that day, the images rendered from them, and the documents generated from them.
- What we read from those pages — actions, calendar entries, meeting notes, meetings to set up, and each day's new writing — so tomorrow's planner can be updated without reading your notes again.
- Your handwriting sample, role and industry, and the names and terms you add to your lexicon, if you provide them, and the corrections you make.
- Meetings you type in or forward to your calendar address.
- Run history: counts, timings and model usage. Never the text of a page.
What is encrypted
- Everything we keep that you wrote, typed or set is encrypted with our data key (AES-256) before it reaches the database: actions, calendar entries, meeting notes and their titles, each day's Notes, Inbox items, corrections, your lexicon, profile and settings, notebook names, your handwriting sample, and your reMarkable device token — as is every downloaded page, rendered image and generated document in the one-day cache.
- Database backups are encrypted again with a separate key and kept for seven days, so anything deleted is gone from them within a week.
- The database is not exposed to the internet and is reachable only by our own application on the same server; between you and us, everything travels encrypted (HTTPS).
- Passwords are never stored — only a salted scrypt hash.
How long we keep it
- Downloaded pages, rendered images and generated documents live in a one-day rolling cache. Each run deletes the previous night's cache and logs the deletion; a 48-hour sweep is the failsafe.
- What we read from your pages, your settings and your typed meetings are kept while your account exists. You can delete any action, meeting note or day of Notes at any time, and all of it goes when you delete your account.
- The Daily Update and Daily Puzzle archives on your tablet keep one week.
- Email you send to support@ or admin@ is kept, encrypted, for 90 days so we can follow it up, and then deleted.
- An email we send you is held, encrypted, only until it has gone, so a retry sends exactly the same message — and never longer than 24 hours. After that we keep only a note that it went (its kind and when, not the address or the words) for 30 days, so it is not sent twice.
Who reads your pages: Anthropic
- Page images, with your ink conventions, lexicon and handwriting sample, are sent to Anthropic's Claude API to be read. Nothing that identifies your account is sent with them.
- Anthropic does not use this data to train its models — its commercial terms do not allow it without our express permission, which we have not given. ScriptumIQ trains no model of its own.
- Anthropic keeps API requests and responses for up to 30 days, and the overnight batch for 29 days, before deleting them; content flagged for breaking its usage policy may be kept longer. We have no zero-retention agreement with Anthropic today.
- The Daily Update's news searches and the Daily Puzzle carry none of your content.
- If you email us, we may ask Claude to summarise that one email and suggest a reply. It is sent only when we choose to, on the same terms as above.
Who else handles it
- reMarkable — your notebooks are read from, and our documents written back to, the reMarkable cloud account you pair.
- Resend, our email provider, delivers meeting-note emails and the PDFs you choose to have mailed, to your login address and the one delivery address you confirmed, and receives the email you send us. No address is ever taken from a page.
- Stripe takes payment on its own pages; we see your plan and status, never your card.
- Hostinger hosts our server and database.
- Calendar invites reach other people only when you confirm a draft, through the calendar you connected.
What we log
Counts and ids, not text. A log line says "6 pages, 11 tasks", never what the tasks were or what a notebook is called.
Operators
Our admin portal shows account status, run counts, costs, ratings and comments — never note content. The one tool that shows page images (a reading-accuracy comparison) reads only the operator's own account, is behind the admin sign-in, and deletes its reports within 24 hours.
Your controls
- Choose which folders are read. Turn off per-meeting and weekly emails. Remove the delivery address at any time.
- Deleting your account cancels your subscription and removes your settings, everything read from your pages, cached files and the device token immediately. A record that the deletion happened, with your email address, is kept in our audit log. The notebooks on your tablet are never touched.