Privacy Policy

ScribeInk Pte. Ltd. (UEN 202302364R), trading as Scribe.sg ("we", "our" or "us"), protects personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what personal data we collect, how we use and share it, and your rights. It applies to our website, the Scribe.sg platform and its apps, extensions and tools, and the services we provide. Our Data Protection Officer can be reached at hello@scribe.sg.

For personal data about our own customers, prospects and website visitors, we decide how it is used, and this policy applies. For personal data in our customers' content and workflows, we act as a data intermediary for that customer, under the data protection section of our Terms of Service; the customer is responsible for it, so please contact them first, and we will help them respond.

• Contact and enquiry details, such as your name, email, phone number and business, from our forms, our advertisements' lead forms, and our conversations with you.
• Account details, such as your name, email, profile picture and the organisations you belong to, from our sign-in provider. We never see or store your password.
• Billing details, such as what you bought and your payment history. Card details go to our payment processor, not to us.
• Your content: files, emails, messages and data you or your workflows bring into the platform, and the accounts you connect to it.
• Usage and technical data, such as logs, error reports, IP address, browser and device type, and how much of the service you use.
• Website analytics, such as the pages you visit, what you click and where you came from (see section 9).

We use personal data to:

• provide, operate, support and secure our services;
• bill you and manage your account;
• communicate with you, including about our services, which you can opt out of at any time;
• understand and improve our website and services; and
• meet our legal obligations and protect our rights.

We rely on your consent, on what is needed to provide the services you asked for, and on the other grounds the PDPA allows. You may withdraw consent at any time; if that stops us providing a service, we will tell you.

When a workflow uses an AI model, the content it is set up to send is sent to a third-party AI provider to produce a result. We do not use your content to train AI models. We may keep records of AI requests and responses for a limited time to troubleshoot problems, with access limited to our team.

Where you connect a Google account, we access its data only to run the workflows you set up, and only within the permissions you approve.

Scribe's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, sell it, or use it to train generalised AI models, and our staff do not read it except with your consent, for security, or where the law requires.

Our Chrome extension acts only when you or one of your workflows asks it to, in a window it opens itself, and on websites your organisation has approved. It does not watch your ordinary browsing, read your other tabs or history, or send us your passwords or login cookies. It sends us only the results a workflow asks for, and takes a screenshot of a page where a workflow step fails only if that workflow is set to.

A task you record stays in your browser unless you choose to send it to us or paste it into a workflow. A recording you send holds the steps: the addresses visited, what you clicked, what you typed into ordinary fields, and the labels of the page elements you used and of the rows or panels they sat in. It never holds a screenshot, or the contents of password, one-time-code or payment fields. Only you and your organisation's administrators can see it, and we delete it 30 days after you send it, or sooner if you delete it. If you ask us to improve a recording with AI, its steps are processed as section 5 describes.

We do not sell personal data. We share it with service providers who help us run our business, such as hosting, storage, sign-in, payments, email, AI models, analytics and error monitoring, each bound to protect it to a standard consistent with the PDPA. We may also disclose it where the law requires, to protect our rights or others' safety, or as part of a sale or reorganisation of our business.

Some providers process data outside Singapore. When we transfer personal data overseas, we make sure it receives protection comparable to the PDPA.

Essential cookies. We use cookies that our website and platform need to work, such as those that keep you signed in and remember your cookie choice. These do not need your consent.

Analytics cookies. On our public website, we use analytics cookies only if you accept them. They let us recognise a returning visitor and understand how the site is used. If you decline, or have not chosen yet, we still count visits in a way that stores nothing on your device. You can change your choice at any time with "Cookie settings" at the foot of our website, or by clearing your cookies. If your browser sends a Global Privacy Control or Do Not Track signal, we do not run website analytics.

We do not use advertising cookies, and we do not run analytics in the signed-in platform.

We keep personal data only as long as we need it for the purposes above or the law requires, then delete or anonymise it. You can delete your files in the platform, and when your account or organisation is closed we delete its data as our Terms of Service describe. We protect personal data with reasonable security arrangements and will notify you and the authorities of a data breach where the PDPA requires.

Under the PDPA you may ask to access or correct your personal data, withdraw your consent, and, where it applies, have your data transferred to another organisation. Contact our Data Protection Officer at hello@scribe.sg. We will reply within 30 days. We may charge a reasonable fee for an access request, and will tell you the fee first.

Our services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18.

We may update this policy. Each version carries a version number and an effective date, we will tell customers about material changes before they take effect, and earlier versions stay available at the foot of this page.

If you are not satisfied with our response, you may complain to the Personal Data Protection Commission.