Privacy Notice

• Account data — email address, hashed login credentials or the identifier from your Google sign-in, and account creation date. Used to create and secure your account and to give you access to your plan. Legal basis: performance of our contract with you.
• Text you submit and the results — the text you paste, the research sources found, the generated panel script, and the audio produced. Used to deliver the explanation and to store your session history so you can replay and re-download it. Legal basis: performance of our contract. Do not paste personal or confidential information about other people that you are not entitled to share.
• Subscription and entitlement data — plan status, renewal or expiry dates, and the payment provider's transaction and customer identifiers. Used to grant Standard and Deep dive access and to send purchase confirmations. Legal basis: contract and legal obligation (accounting).
• Usage and technical data — requests made, research depth chosen, error reports, device and browser information, and IP address. Used for security and abuse prevention, troubleshooting, and improving the product. Legal basis: legitimate interests in running a secure, working service.
• Support messages — what you send us and our replies, used to answer you. Legal basis: legitimate interests.
• Marketing emails — only if you opt in, and you can withdraw at any time. Legal basis: consent.

Session history and cached audio are also stored locally in your own browser so you can revisit past explanations offline; clearing your browser storage removes that copy.

• Merchant of Record — Paddle.com handles the sale, payments, subscription management, tax compliance, invoicing, and refunds. Paddle collects your payment details directly; we never see your card number.
• Service providers — hosting and database infrastructure, AI model and web-search providers that process your submitted text to produce research and speech, email delivery for transactional messages, and error monitoring.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law or to protect our legal rights.

We do not sell your personal data or your submitted text.

Some of our providers are outside the UK and EEA, primarily in the United States. Where data leaves the UK/EEA we rely on adequacy decisions or on Standard Contractual Clauses plus additional safeguards with the provider.

Account and subscription records are kept while your account is active and for up to seven years afterwards where tax and accounting law requires it. Submitted text, scripts, and audio are kept until you delete the session or close your account. Technical logs are kept for up to 12 months. When data is no longer needed we delete or anonymise it.

Under UK and EU data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format, and you can withdraw consent where we rely on it. Email support@scholarspeech.com and we will respond within one month. If you are unhappy with our response you can complain to your local supervisory authority — in the UK that is the Information Commissioner's Office.

We use appropriate technical and organisational measures, including encryption in transit, encryption at rest with our infrastructure provider, row-level access controls so you can only read your own records, and restricted administrative access.

We use only essential cookies and browser storage: a session token to keep you signed in, and local storage plus an offline database that hold your session history and cached audio on your device. We do not use advertising or cross-site tracking cookies. You can clear this data at any time through your browser settings, though doing so signs you out and removes locally saved sessions.

Questions about this notice or your data: support@scholarspeech.com.