Privacy Policy

Last updated: June 11, 2026. This document is a working baseline and may be refined with legal counsel.

1. Who we are

OnlyScript ("we", "us") operates the website onlyscript.io and the application app.onlyscript.io. For any privacy question, contact us at contact@onlyscript.io.

2. Data we collect

• Account data. Email address, password (stored hashed), display name, language and account settings.
• Content you upload. Media files (photos, videos, audio), scripts, model profiles and texts you generate. This content may include adult material; it is treated as confidential.
• Usage and billing data. Credit balance, top-up history, generation history, technical logs (IP address, timestamps, user agent) kept for security and debugging.
• Cookies. We only use strictly necessary session cookies for authentication. No advertising trackers, no third-party analytics cookies on the application.

3. How we use your data

• To provide the service: analyzing your media and generating texts.
• To operate your account: authentication, email verification, password resets, important service emails.
• To process payments and credit your wallet.
• To secure the platform: rate limiting, abuse and fraud prevention.

We do not sell your data. We do not use your content for advertising.

4. AI processing

Uploaded media are analyzed by Google Vertex AI under Google Cloud's enterprise terms. Per those terms, your content is not used to train Google's public models. Generated texts are produced from your media, your settings and your prompts, and stay inside your workspace.

5. Payments

Credit top-ups are processed by NOWPayments, a third-party cryptocurrency payment processor. We never see or store wallet private keys or full payment credentials. We store the order reference, the amount and the resulting credit grant.

6. Data sharing

Data is shared only with the processors required to run the service: our hosting provider, Google Cloud (media analysis) and NOWPayments (payments). Each processor is bound by its own data protection terms. We may disclose data when legally required.

7. Retention

Your content stays in your workspace until you delete it or close your account. Deleted scripts go through a trash stage before permanent removal. Technical logs are rotated automatically. You can request full account deletion at any time by email.

8. Your rights

Depending on your jurisdiction (including the GDPR if you are in the EU), you may have the right to access, rectify, export or delete your personal data, and to object to or restrict certain processing. Write to contact@onlyscript.io; we answer within 30 days.

9. Security

All traffic is encrypted in transit (TLS). Passwords are hashed. Workspaces are isolated from one another. Access to media files requires authentication and ownership checks.

10. Changes

We may update this policy. Material changes are announced on this page with an updated date.