Privacy Policy

Overview

Scriva ("we", "our", or "us") is a research and writing platform available as a web application. This privacy policy explains how we collect, use, and protect your data.

Data We Collect

• Account information — your email address and username, used to identify you and personalise your experience
• Authentication tokens — your session token, stored locally in your browser to keep you signed in
• Research content — URLs, PDFs, and documents you choose to save as sources, along with any annotations or highlights you create
• Project data — project names and associated content you create within Scriva
• Usage data — which features you use, and how you first found Scriva (the site that linked to us, or the campaign link you followed)

How We Use Your Data

Data is used solely to provide the Scriva service — organising your research, enabling semantic search across your sources, and generating citations. We do not use your data for advertising, profiling, or any purpose unrelated to the service.

Data Storage

Your data is stored securely on our servers. The titles and text of your documents are encrypted at rest. Authentication tokens are also stored locally in your browser.

Data Sharing

We do not sell or trade your personal data. We use a small number of service providers to run Scriva, and they process data only on our behalf:

• Supabase — sign-in and file storage
• OpenAI and Groq — AI features. When you ask Ora a question, search your sources or build a topic brief, the relevant text is sent to them to produce the result. They do not use it to train their models.
• Resend — account emails, invitations and, if you agreed to it at signup, our newsletter
• OpenAlex — the search terms you use to find papers

When you share a document or project, the people you share it with can see its content.

Your Rights

You can delete your account and its data at any time from your profile page.

Contact

If you have any questions about this privacy policy, email us at admin@scriva.so.