// legal
last updated: july 14, 2026
ScriptOutlier (scriptoutlier.com) helps YouTube creators analyze outlier videos and generate scripts in their own voice. For anything in this policy, contact [email protected].
Account: your email, name and avatar, provided by Google when you sign in (or just your email if you use a sign-in link). We never see or store passwords — there are none.
Content you provide: transcripts and writing samples you paste, topics you request, and the outputs generated from them (voice profile, outlier analyses, scripts, clips). This content is the core of the service and belongs to you.
Billing: subscriptions are processed by Stripe. We store your subscription status and a Stripe customer reference. Your card number never touches our servers.
Technical and product usage: essential browser storage (your language preference and session) plus a limited set of authenticated product events, such as opening filters or successfully generating a script. We do not include titles, transcripts, prompts, note text or generated content. No analytics cookies, advertising trackers or ads.
To run the service: your samples and requests are sent to Anthropic (our AI provider) to generate your voice profile, analyses and scripts. Anthropic does not train models on this API data.
To bill you: Stripe handles payment, invoices and tax calculation based on your country.
To email you: transactional email only (sign-in links), sent via Resend from [email protected]. No marketing emails without your explicit opt-in.
To improve the product: we use aggregated product events to understand which features are useful, where flows fail and whether users reach a successful result.
We never sell your data. We never use your content to train AI models. Your scripts are yours.
If you use "Edit in Google Docs", we request the narrowest Google Drive permission that exists (drive.file): it only allows creating new documents and accessing documents this app created. We cannot see, read or touch anything else in your Drive.
Infrastructure providers that process data on our behalf: Supabase (database & authentication), Cloudflare (web hosting), Render (API hosting), Stripe (payments), Anthropic (AI processing), Google (sign-in and optional Drive export), Resend (email). Each is bound by its own privacy and security commitments.
You can request a copy of your data, or complete deletion of your account and everything in it (voice profile, analyses, scripts), by emailing [email protected]. Deletion is permanent and processed within 30 days.
We keep your account content while your account exists. Raw product events are retained for up to 90 days and are deleted with your account.
All traffic is encrypted (TLS). Database access is protected with row-level security — each user can only reach their own rows. Administrative keys never leave the server.
ScriptOutlier is not directed at children under 16 and we do not knowingly collect their data.
If this policy changes in a meaningful way, we'll note it here with a new date. Material changes affecting your rights will be announced in the app.