Privacy Policy

Overview

This Privacy Policy describes how Open Protocol Labs, LLC ("we," "us," or "our") collects, uses, and protects your information when you use Scribe ("the Service"), our work-evidence aggregation platform.

Scribe is a timeline-based work-evidence aggregator that helps you automatically capture and organize your work activities across git repositories, file systems, and AI coding tool conversations.

Information We Collect

Account Information

• Email address (required for account creation and verification)
• Name (required for account personalization)
• Avatar image (optional, uploaded by you)
• Authentication data when you sign in via GitHub, Google, or Sigma Identity

Work Timeline Data

When you use our desktop application, we collect work evidence from your local development environment:

• Git Activity: Repository paths, branch names, commit hashes, timestamps, and author information
• File System Activity: File paths, modification timestamps, and change patterns
• AI Conversation Data: Timestamps, titles, summaries, and full content of conversations with AI coding tools (Claude, Cursor, Copilot, etc.)

Organization and Billing Data

• Organization membership and role information
• Team invite tokens and invitation history
• Stripe Customer ID and subscription status (payment details are processed by Stripe and not stored by us)

Technical Data

• Device identifiers for multi-device sync functionality
• Session cookies for authentication (HTTP-only and signed)
• Temporary cookies for specific workflows (e.g., wallet_unlocked with 5-minute TTL)
• BAP ID when using Sigma Identity authentication (Bitcoin-based pseudonymous identifier)

How We Use Your Data

• Service Delivery: Provide timeline visualization, project organization, and team collaboration features
• Invoicing: Generate invoices with work evidence for freelancers and agencies
• Account Management: Manage your account, authentication, and subscription
• Security: Detect and prevent security threats, including scanning for exposed secrets in your code
• Communication: Send transactional emails via Resend (account verification, invoice delivery, important service updates)
• Improvement: Analyze usage patterns to improve our service (anonymized data only)

Data Sharing

We share your data only with trusted service providers necessary to operate our service:

• Stripe: Payment processing for subscriptions
• Resend: Transactional email delivery
• Vercel: Web application hosting and infrastructure
• Turso: Database hosting and management
• Upstash: Session storage and rate limiting
• GitHub/Google: When you authenticate via these services, we receive basic profile information as permitted by your OAuth consent

We do not sell your data to third parties or use it for advertising purposes.

Data Storage and Jurisdiction

Your data is stored in the United States through our service providers (Vercel and Turso). Our infrastructure is designed with industry-standard security measures including encryption in transit and at rest.

For desktop application users, your work data is first processed locally on your device before being optionally synced to our cloud infrastructure.

Your Rights

• Access: Request a copy of your personal data
• Correction: Update or correct your account information through your profile settings
• Deletion: Request deletion of your account and associated data
• Export: Export your timeline data through our platform
• Withdrawal: Stop using our service at any time

To exercise these rights, please contact us at privacy@getscribe.ai.

Cookies

We use the following cookies to provide our service:

• Authentication Cookies: HTTP-only, signed cookies to maintain your login session (Better Auth)
• Workflow Cookies: Temporary cookies for specific user flows (e.g., wallet unlock verification with 5-minute expiry)

We do not use third-party tracking cookies or advertising cookies at this time.

Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently received personal information from a child under 13, we will delete such information from our records.

Beta Considerations

Important Notice: Scribe is currently in private beta. During this phase:

• Data may be deleted as part of beta testing and system improvements
• We will provide advance notice before any destructive changes that could affect your data
• You can export your data at any time through our platform
• Features and data structures may change as we iterate on the product

Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you via email and provide notice through our service. Your continued use of the service after such modifications constitutes your acceptance of the updated privacy policy.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at: