§ · Legal
Privacy Policy.
What we collect, why we collect it, who else touches it, and how to make us delete it. No dark patterns, no selling your data.
Last updated October 11, 2026
1. The short version
- We collect your email, the public post data of accounts you ask us to analyse, anything you upload for analysis, and the public posts of a set of creators we measure ourselves to build niche averages.
- We never sell your data or share it for advertising.
- Your card details never reach our servers — our payment provider handles them.
- You can ask us to delete everything at any time by emailing a@getscrollsy.com.
2. What we collect
Account data. Your email address and authentication details, so you can sign in and we can contact you about the service.
Creator data you point us at. When you enter a handle, we retrieve that account’s recent public posts — the caption, view/like/comment/share counts, post date, duration, cover image and post link. For videos selected for deeper analysis we also generate and store a text transcript. We do not access private accounts, private messages, or anything requiring a platform login.
What you upload. Retention screenshots and draft captions you submit for checking.
Public creators we measure ourselves. To answer “is this number normal for my niche”, we run a set of public creator accounts through the same pipeline and keep the same public post data and transcripts described above. Those accounts are never named to other users except as a public video with its public counts; everything else appears only inside anonymised niche averages. If you are one of those creators and want your account removed, email a@getscrollsy.com and we will delete it and its stored posts.
Product analytics and errors. Pages visited, features used, and technical error reports, so we can find what is broken and what is confusing.
Billing records. Your plan, status and renewal date. Card numbers are handled entirely by our payment provider and are never stored by us.
3. Why we use it
- To produce your diagnoses, protocols, pre-post checks and scripts — the service you are paying for.
- To operate accounts, enforce plan allowances, and take payment.
- To fix bugs, keep the service secure, and prevent abuse.
- To email you about your account, your results, and material changes to the service.
- To compute anonymised aggregate benchmarks across accounts. These are statistical only and are structured so that individual accounts cannot be identified.
We do not use your content to train our own machine-learning models, and we do not use it for advertising.
4. Who else processes it
Running the product means trusting a small number of specialist providers. Each receives only what its job requires:
- Supabase — authentication and the database where your account, posts and results are stored.
- Vercel — hosting and delivery of the application.
- Apify — retrieves public post data for the handles you submit.
- Google (Gemini / Google Cloud) — the AI that transcribes video, reads retention screenshots, and writes the narrative parts of your results.
- DodoPayments — merchant of record; processes payments and holds your card details.
- PostHog — product analytics.
- Sentry — error reporting.
These providers operate in various countries, so your data may be processed outside India. We rely on their contractual data-protection commitments for those transfers. We will also disclose data where the law genuinely requires it.
5. How long we keep it
Account data, ingested posts and generated results are kept while your account is open, because your baseline and your verified experiments only mean something across time.
Delete your account and we remove your personal data and analysis results within 30 days, except records we must keep for tax and accounting (billing records, typically retained for the period local law requires) and anonymised aggregate statistics that can no longer be traced to you.
6. Your rights
You can ask us to show you what we hold, correct it, export it, or delete it. You can object to processing or ask us to restrict it. If you are in a region with specific data rights — such as the UK, EU or California — those rights apply to you and we will honour them.
Email a@getscrollsy.com and we will respond within 30 days. There is no charge for a reasonable request.
7. Cookies and tracking
We use cookies that are necessary to keep you signed in, plus first-party product analytics to understand which features get used. We do not run advertising trackers and we do not sell data to data brokers. You can block cookies in your browser, though sign-in will stop working without the essential ones.
8. Security, children, and changes
Data is encrypted in transit, access to production systems is restricted, and per-user database rules keep one account’s data out of another’s reach. No system is perfectly secure; if a breach ever affects your data we will tell you promptly and explain what happened.
Scrollsy is not intended for children under 13, and we do not knowingly collect their data.
If this policy changes materially we will notify you before it takes effect and update the date above. Related reading: Terms of Service and Refund & Cancellation Policy.