Scriven Labs logoScriven Labs
Join waitlist

Privacy Policy

Effective date: October 8, 2026

This is a starting template for Scriven Labs, provided for transparency during our early-access period. It is not legal advice; please review and adapt it with qualified counsel before launch.

1. Who we are

Scriven Labs ("Scriven Labs", "we", "us", or "our") provides a personal AI assistant that helps individuals and teams recall and reason over their own work. This policy explains what information we collect, how we use it, and the choices you have. If you have questions, contact us at [email protected].

2. Information we collect

  • Waitlist information. When you join our waitlist, we collect the email address you provide so we can contact you about early access.
  • Account information. If you create an account, we collect information such as your name, email, and organization.
  • Connected work data. With your explicit authorization, we access content from services you connect (for example code repositories, issue trackers, documents, and messages) to provide grounded, cited answers. We access only what your permissions allow.
  • Usage data. We collect basic logs, device and browser information, and product analytics to operate and improve the service.

3. How we use information

  • To provide, maintain, and improve the service.
  • To generate grounded answers that cite the underlying source you have access to.
  • To communicate with you about access, updates, and support.
  • To secure the service and prevent abuse.

4. How information is shared

We do not sell your personal information. We share information only with the service providers that help us operate the product, under agreements that limit their use of it; when required by law; or as part of a business transfer. Access to connected work data is governed by the permissions you grant and is enforced per user. The providers we rely on today are:

  • Vercel — website and application hosting.
  • Cloudflare — DNS and content delivery for our domains.
  • Supabase — our database (Postgres) and the marketing waitlist.
  • Upstash — Redis, for background job queues.
  • Anthropic — the AI model provider (Claude) that processes transcripts and content to generate grounded answers.
  • Voyage AI — converts text into embeddings so your work can be searched.
  • Deepgram — speech-to-text for live meeting audio.
  • Recall.ai — meeting capture when you add our notetaker to a call.
  • Resend — sending transactional email (such as invitations).
  • Google Analytics — website usage analytics, loaded only if you accept analytics cookies (see Cookies below).

We also use GitHub and Google as sign-in providers, and may use error-monitoring and product-analytics tools (such as Sentry, PostHog, and Langfuse) to operate and debug the service. We keep this list current as our service evolves.

5. Data retention

We retain information for as long as needed to provide the service and for legitimate business or legal purposes. You may request deletion of your account data as described below. Raw audio, where processed, is not stored beyond transcription.

6. Security

We use administrative, technical, and organizational measures designed to protect your information, including tenant isolation and least-privilege access to connected data. No method of transmission or storage is completely secure. Report security concerns to [email protected].

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact [email protected]. You can unsubscribe from marketing emails at any time using the link in the email.

8. Cookies

We use essential cookies that are required to run the site. We also use Google Analytics to understand how the site is used, but only if you accept analytics cookies — no analytics cookie is set and Google Analytics is not loaded until you opt in through the consent banner. Your choice is stored on your device and you can change it at any time using the "Cookie preferences" link in the footer. You can also control cookies through your browser settings.

9. International transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

10. Children

The service is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you.

Contact information

If you have any questions or comments about this Privacy Policy or how we handle your personal data, please contact us at: