Privacy Policy
Effective date: May 22, 2026
Scribbl (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what choices you have.
1. Information we collect
Account information: When you create an account we collect your email address, display name, and optionally a profile photo. This information is provided by you or by your OAuth provider (Google, GitHub).
Workspace content: Notes, whiteboards, chat messages, files, and meeting recordings you create inside Scribbl are stored on our servers. This content belongs to you.
Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and feature interactions. This helps us diagnose problems and improve the product.
Payment information: Billing is handled by Stripe. We never store your full card number. We receive a customer ID and subscription status from Stripe.
2. How we use your information
- To provide, operate, and improve the Scribbl service
- To send you transactional emails (account confirmations, billing receipts, meeting invitations)
- To respond to support requests
- To detect and prevent abuse, fraud, or security incidents
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your content to train AI models.
3. Data storage and security
Your data is stored on servers provided by Supabase (PostgreSQL database and file storage). Data is encrypted in transit using TLS and at rest using AES-256. Real-time collaboration features are powered by Liveblocks. Video calls are powered by LiveKit.
We take reasonable technical and organizational measures to protect your data, but no system is completely secure. Please use a strong, unique password and enable any available two-factor authentication.
4. Data retention
We retain your account data for as long as your account is active. If you delete your account, your personal information is removed within 30 days. Workspace content is retained as long as the workspace exists. Owners can delete a workspace and all associated data at any time from workspace settings.
5. Cookies
We use session cookies for authentication. We do not use third-party advertising cookies. Analytics, if any, are limited to privacy-respecting tools that do not track you across sites.
6. Third-party services
Scribbl integrates with the following third-party services, each with their own privacy policies:
- Supabase — database and storage
- Liveblocks — real-time collaboration
- LiveKit — video and audio
- Stripe — payment processing
- Resend — transactional email
7. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at inquiry@scribblapp.ca. We will respond within 30 days.
8. Children
Scribbl is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes we will notify you by email or via an in-app notice.
10. Contact
Questions about this policy? Email us at inquiry@scribblapp.ca.