Draft. This document is being reviewed and is not yet in force.
Privacy Policy
Version 0.9 Last updated 31 October 2026
Contents
This policy explains what personal information SendScripts.to, run by SendScripts.to, a sole proprietorship owned by David Sellers ("we"), collects, why, and what you can do about it.
1. Two roles
- For studios (voiceover artists and their team members who have accounts), we decide how your information is used. We are the controller.
- For studios' clients (people who send scripts, approve reads or message a studio), the studio decides how your information is used and we process it on the studio's behalf, under our Data Processing Agreement. Send requests about that information to the studio; we'll help them answer.
2. What we collect
| Who | Information | Where it comes from |
|---|---|---|
| Studios | Name, email, password (stored hashed), two-factor and passkey details, studio name, delivery address, logo, bio, reel, rates, invoice details, time zone, billing details (held by our payment processor), and when you agreed to our terms, from which IP address and browser | You |
| Studios' clients | Name, email, cc addresses, station or company details, phone number, scripts, pronunciation notes, messages and attachments, approvals and re-read notes (with the email that gave them), purchase order numbers | The client, or the studio |
| People asking for early access | Name, email, studio name, what you tell us | You |
| Everyone | IP address, browser and device details, pages used, and the date and time, in server logs; the cookies below | Your browser |
Audio uploaded by studios is voice recordings of the studio's own artists, not of clients.
3. Why we use it
| Purpose | Legal basis (UK/EU) |
|---|---|
| To provide SendScripts.to: accounts, client pages, orders, deliveries, messages, invoices and the emails that go with them | Contract with the studio; for clients, the studio's instructions |
| To keep the service secure: sign-in, access codes, rate limits, spam traps, preventing abuse | Legitimate interests |
| To support studios, including looking at a studio's data when they ask for help (every look is logged) | Contract; legitimate interests |
| To bill studios | Contract |
| To keep a record of who agreed to our terms, and when | Legitimate interests; legal obligation |
| To tell studios about changes to the service or their account | Contract; legitimate interests |
| To answer early-access requests | Legitimate interests |
| To meet legal obligations | Legal obligation |
We don't sell personal information, share it for advertising, or use scripts or audio to train AI models.
4. Who we share it with
- The studio, for anything its clients send.
- Our Subprocessors, who host, store and send on our behalf.
- The FCC: when a studio looks up a US station, we send the station's call letters (no personal information) to the FCC's public database.
- Authorities or others, when the law requires it, or to protect people's safety or our rights.
- A buyer, if our business is sold or reorganised; this policy will still apply.
Follow along in Perform listens to the artist's voice to keep their place in the script. The speech is recognised on their own device and never sent to us.
5. How long we keep it
- Studios choose how long approved audio is kept (14 days by default) and are warned before it's deleted.
- Orders moved to the trash are deleted after 30 days.
- When a trial ends without a subscription, the studio is deleted 30 days later. When a subscription ends, audio and uploaded files are deleted within 60 days, and the rest of the studio within 90 days. A studio that subscribes again inside those windows gets back everything still there. We email the studio two weeks before each deletion.
- Our own billing records of a studio's subscription (what we charged, and when) are kept for 7 years because tax law requires it. They hold none of the studio's scripts, audio or clients. The invoices a studio sent its clients are part of the studio and are deleted with it.
- Access codes expire after 10 minutes. Our host keeps server logs, including a record of each request, for up to 7 days. Our email provider keeps a copy of each email it sent or received for 30 days. Database backups roll off after 7 days.
- Records of who agreed to our terms are kept for as long as the account exists.
- Early-access requests are kept for 12 months after you last write to us, or until you open a studio or ask us to delete them, whichever comes first.
6. Cookies
We use only the cookies SendScripts.to needs to work. We don't use advertising or analytics cookies.
| Cookie | What it does | How long |
|---|---|---|
| Session and XSRF-TOKEN | Keep you signed in and protect forms | Until you close the browser, or 2 hours idle |
| remember_web | Keeps a studio signed in, if they tick "Remember me" | Up to 5 years, until you sign out |
| client_access_{studio} | Remembers a client verified with an emailed code | 30 days |
| delivery_reviewer | Remembers the email a client gave on a delivery page | 30 days |
| tz | Shows times in your own time zone | 1 year |
Perform mode saves its display settings in your browser's local storage on your own device; they're never sent to us.
7. International transfers
We're based in the United States and our service providers store data in the United States. If you're in the UK or EU, we protect transfers with the EU–US Data Privacy Framework where the provider is certified, or with Standard Contractual Clauses and the UK Addendum.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your information, to restrict or object to how it's used, and to withdraw consent. Studios can export and delete most of their data in the app. For anything else, write to legal@sendscripts.to. Clients should contact the studio first. We'll answer within the time the law requires, and we won't treat you differently for asking. UK and EU residents can also complain to their data protection authority.
9. Security
We use encryption in transit, hashed passwords, optional two-factor sign-in and passkeys, private storage for audio with short-lived download links, and logged staff access. No system is perfectly secure; we'll tell affected studios promptly if a breach affects their data.
10. Children
SendScripts.to is for businesses and isn't meant for anyone under 16. We don't knowingly collect children's information.
11. Changes and contact
We'll post changes here and email studios about significant ones. Contact: SendScripts.to, a sole proprietorship owned by David Sellers, [Address], legal@sendscripts.to.