Privacy Policy
Draft: not yet in effect
This document is not final. Before it takes effect, Scripveil still has to confirm a contact address for privacy requests, an effective date. Until then, treat what follows as a description of how this website works today, not as a binding legal document.
- Version
- 1.2
- Last updated
- 24 September 2026
- Effective date
- Not yet in effect
Introduction and scope
This Privacy Policy explains how personal data is collected, used, shared, kept and protected when you visit the Scripveil marketing website (the Website) or use its early-access request form. In this policy, “Scripveil”, “we”, “us” and “our” mean the operator of the Website identified below, and “you” means anyone who visits the Website or contacts us through it.
“Personal data” means any information that relates to an identified or identifiable person, such as an email address. “Processing” means anything done with personal data, including collecting, storing, using, sharing and deleting it.
This policy covers only the Website. It does not cover the Scripveil application, accounts, projects, uploaded creative work, AI features, subscriptions or any other product system. Scripveil is in early access and those systems are not available through the Website. When any of them begins to collect personal data, separate privacy information will be published for it before that collection starts.
The people, businesses, projects, opportunities and activity shown on the Website are invented illustrations. They are not real individuals, and nothing shown in them is real personal data.
This policy should be read with the Cookie Policy, the Terms of Use and the Legal Information page.
Who is responsible for your personal data
The Website is operated by Scripveil, Kenya. That operator decides why and how personal data collected through the Website is processed and is therefore the “data controller” for it. Scripveil is not currently a registered company, so no company name, registration number, registered office or tax number is shown on this website. When a legal entity is established, these documents will be updated to name it.
Scripveil is currently operated from Kenya. We refer to Kenya as the location from which the Website is operated, and to the Kenya Data Protection Act, 2019 (the Data Protection Act) as the primary data-protection law we work to. Visitors can reach the Website from anywhere. This policy does not state which other countries’ laws apply to any particular visitor, and where the law of your own country gives you additional rights, those rights are not reduced by this policy.
For every privacy matter, including questions about this policy and requests to use your rights, contact [contact address to be confirmed].
Personal data we collect
The table below lists every category of personal data the Website collects or receives. We do not collect personal data beyond it.
| Category | What it includes | How we get it | When |
|---|---|---|---|
| Early-access request | Your email address; the plan that would fit (Creator, Professional, Team, Studio, Organization, Enterprise, or not sure); and, if you choose, which of the four creative domains you work in (Writing, Film, Game Development, Visual Arts) | You type it into the early-access form and submit it | Only if you submit the form, and only while early access is open on the Website |
| Request details | The date and time of the submission, and a fixed label showing it came from the Website | Added automatically by the Website to your request | Whenever you submit the form |
| Correspondence | Your email address, your name if you give it, the content of your message, and anything else you choose to tell us | You send it to us by email | Only if you write to us |
| Technical and connection data | Your IP address; the address of the page requested; the date, time and result of the request; the type and version of your browser and operating system; the device type; the language your browser prefers; and the address of the page that linked to us, where your browser sends it | Received automatically by the servers that deliver the Website, as happens on any website | Whenever you load a page or file from the Website |
What we do not collect. The Website has no accounts, no sign-in and no payments. We do not use analytics, advertising, session-recording or heat-map tools; we do not place tracking pixels or social-media plug-ins; we do not embed videos, maps or other companies’ content; and we do not load fonts or scripts from other companies’ servers when you visit. We do not set cookies or store anything in your browser (see the Cookie Policy). The early-access form does not ask for your name, telephone number, address, date of birth, location or payment details.
Sensitive data. Please do not send us special categories of personal data, such as information about your health, religion, ethnic origin, political opinions or sexual life, or any government identification numbers. We do not need them and do not ask for them.
Anti-spam field. The form contains a hidden field that people never see and only automated programs fill in. If it is filled in, the submission is discarded and is not forwarded or kept.
We do not obtain personal data about you from anyone else.
How and why we use personal data
We use personal data only for the specific purposes below, and each purpose relies on one of the lawful grounds the Data Protection Act allows. We do not use personal data for any other purpose without telling you first and, where the law requires it, obtaining your consent.
| Purpose | Data used | Lawful ground |
|---|---|---|
| To contact you about Scripveil early access, for example to tell you when access is available to you | Early-access request; request details | Your consent, given by deliberately submitting the form after being told its purpose |
| To read and reply to your message | Correspondence | You contacted us and expect a reply; and, where you ask us to act on your rights, our legal obligations |
| To deliver the Website to you, keep it available and working, and protect it against misuse and attacks | Technical and connection data | Our legitimate interest in operating a functioning and secure website, which we balance against your rights and which does not extend to profiling you |
| To comply with the law, respond to lawful requests from public authorities, and establish or defend legal claims | Any of the above, only as far as necessary | Legal obligation, or our legitimate interest in protecting legal rights |
Data minimisation. We ask for an email address and a small number of optional answers because that is what is needed to contact you about early access. We do not use the information to build profiles of visitors, to track you across other websites, or to sell to others.
Automated decisions. We do not make decisions about you by automated means that have legal or similarly significant effects, and the Website does not profile visitors.
Consent can be withdrawn. Where we rely on your consent, you may withdraw it at any time as described under “Your rights”. Withdrawal does not affect processing carried out before you withdrew.
Consent, contact and marketing
The early-access form is a request to be contacted about early access to Scripveil. The purpose is stated next to the submit button, with a link to this policy. The form does not tick anything on your behalf, does not require you to accept the Terms of Use, and does not ask you to agree to marketing.
Submitting the form does not subscribe you to a newsletter or a general marketing list. We will use your email address only to contact you about Scripveil early access. If we ever wish to use it for anything else, such as a newsletter or announcements about other products, we will ask you separately and you will be free to refuse without losing your place in early access.
At the date of this policy the Website sends no emails of its own, and submitting the form does not send you a confirmation email. Any message we later send you about early access will say why you are receiving it and how to tell us to stop.
You may tell us at any time, at [contact address to be confirmed], that you no longer want to hear from us. We will stop contacting you and, if you ask, delete your request.
Who receives personal data
We do not sell personal data and we do not share it for advertising. We disclose it only to the following categories of recipient, and only as far as is necessary:
- the hosting provider that runs the servers delivering the Website, which receives technical and connection data;
- the service that receives early-access requests on our behalf, which receives the early-access request and request details;
- our email provider, which handles correspondence and any emails we send you about early access;
- professional advisers (such as lawyers and accountants), under a duty of confidentiality; and
- public authorities and courts, where the law requires or permits us to disclose it.
Providers in categories (a) to (c) act for us. We give them access only to what they need to provide their service and they may not use it for their own purposes.
We have not yet named these providers because they are still being confirmed. We will name each one in this policy, together with where it operates, and update the version and date of this policy, before early-access requests are accepted.
Change of operator. Scripveil is not currently a registered company. If it becomes one, or its operation is transferred to another person or organization, personal data held for the purposes in this policy may be transferred to that successor so the same purposes can continue. We would update this policy to name the new operator and would not use your data for new purposes without meeting the requirements of the law.
Handling of data outside Kenya
The providers in the previous section may store or process personal data on servers in countries other than Kenya, and other than the country where you live. We have not verified where any personal data is stored, so we do not state that it remains in Kenya.
Where personal data is handled outside Kenya, we will do so only in a way that the Data Protection Act permits, which includes its conditions on the transfer of personal data out of the country. Once providers are confirmed, this policy will state where each operates.
How long we keep personal data
We keep personal data for no longer than is necessary for the purpose for which we collected it.
| Category | How long we keep it |
|---|---|
| Early-access request and request details | Until we have contacted you about early access and there is no further reason to keep it, or until you ask us to delete it, whichever comes first. We review requests and delete those we no longer need. |
| Correspondence | For as long as needed to deal with your message and any follow-up, and afterwards only where we have a legal reason or a legitimate need to keep a record. |
| Technical and connection data | In ordinary server records held by our hosting provider, for the period that provider keeps them. We will state that period here once it is confirmed. |
| Anti-spam field | Not kept. |
We have not yet set fixed retention periods. When we do, they will be stated in this table and the version of this policy will change.
Security
We take reasonable technical and organizational steps to protect personal data against loss, misuse and unauthorized access. These include:
- the Website’s code does not write your email address to its own logs;
- the address of the destination that receives early-access requests is held on the server and is not exposed in the pages sent to your browser;
- early-access submissions are checked and size-limited on the server before they are forwarded; and
- the Website reports that a request has been received only after the destination has actually accepted it, so a failed delivery is not presented as a success.
No website, network or method of storage is completely secure, and we cannot guarantee the security of information sent to us. If a personal data breach occurs that is likely to put your rights and freedoms at risk, we will notify the people affected and the relevant authority as the law requires.
Your rights
Under the Data Protection Act, you have the right:
- to be informed about how your personal data is used, which is the purpose of this policy;
- to access the personal data we hold about you;
- to object to the processing of all or part of your personal data;
- to have inaccurate or misleading personal data corrected;
- to have false or misleading personal data, or data we no longer have a lawful reason to keep, deleted;
- not to be subject to a decision based solely on automated processing that significantly affects you (we make none); and
- where the law provides, to receive your personal data in a structured, commonly used form.
You may also withdraw any consent you have given, at any time, by contacting us. If you live in a country whose law gives you further rights, you may exercise those rights too.
How to use your rights. Email [contact address to be confirmed] saying what you want and, so that we can find your information, the email address you used. We may ask you for further information to confirm that you are the person the data concerns, so that we do not give it to someone else. We will respond as promptly as we can and within the time the law requires. We do not charge for handling your request unless it is clearly unfounded or excessive and the law allows a charge.
There are limited cases where the law allows or requires us to refuse or restrict a request, for example where it would reveal another person’s personal data or where we must keep information to comply with a legal obligation. If we refuse, we will say why.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first at [contact address to be confirmed] so that we can put it right.
You also have the right to complain to the Office of the Data Protection Commissioner in Kenya, or to the data-protection authority in the country where you live or work.
Children
The Website and Scripveil are not directed at children. Please do not submit the early-access form or contact us if you are under 18 years old. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
Other websites
The Website may contain links to websites run by others. We do not control them and this policy does not apply to them. Please read their own privacy policies before giving them any personal data.
Changes to this policy
We will update this policy if what the Website does with personal data changes, and we will do so before the change takes effect. Each version shows its version number, the date it was last updated and its effective date. The full history is on the Legal Information page, and we do not alter the date of a past version.
If a change would use your personal data for a new purpose, we will ask for your consent where the law requires it before we do so.
Contact
Operator: Scripveil, Kenya. Email: [contact address to be confirmed]. Please use this address for questions about this policy, for requests to use your rights and for complaints.