Skip to main content
ScribePress

Privacy Policy

Effective date: 15-06-2026  ·  Last updated: 16-06-2026

1. Who We Are

ScribePress is operated by Michael Rubinstein, trading as Tjabo Digital, a freelance business registered in Israel (“we”, “us”, “our”). We operate the ScribePress platform at scribepress.co and any associated subdomains (collectively, the “Service”).

For privacy matters, contact us at [email protected].

We process personal data of individuals in the European Economic Area. That processing is subject to the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”), and we are the data controller for the personal data described in this Policy.

2. What This Policy Covers

This Privacy Policy explains what personal data we collect when you use the Service, why we collect it, the legal basis for processing it, how we use and share it, how long we keep it, and what rights you have.

It applies to all users of the Service: visitors to scribepress.co, registered account holders, and subscribers.

It does not apply to third-party websites or services linked to or integrated with the Service. Those third parties have their own privacy policies.

3. Personal Data We Collect

3.1 Account data. When you create an account using Google Sign-In, we receive your name, email address, and profile photo from Google. We store this to identify your account and provide the Service.

3.2 Subscription and billing data. Billing and payment processing is handled by Paddle. We receive confirmation of your subscription status, plan type, and billing history. We do not receive or store your payment card details. Those stay with Paddle.

3.3 Content data. Content you create, upload, import, or generate within the Service, including topics, drafts, published posts, site configurations, and settings.

3.4 Usage data. Information about how you use the Service: pages visited, features used, actions taken, timestamps, and session duration. We use this to understand how the Service is used and to improve it.

3.5 Technical data. IP address, browser type and version, device type, operating system, screen resolution, referring URL, and language preferences, collected automatically when you access the Service.

3.6 Integration data. If you connect Google Search Console or Google Analytics, we access search performance and analytics data from those accounts on your behalf. We use that data only to provide the features you have enabled.

3.7 Communications data. Messages, queries, or feedback you send us by email or through the contact form.

3.8 WordPress connection data. If you connect a WordPress site, we store your site URL and API credentials to enable the publishing integration. We do not read or store content from your WordPress site beyond what is needed to publish what you generate through the Service.

4. How We Use Your Personal Data and Our Legal Basis

We only process your personal data where we have a lawful basis. Here is what that means in practice:

Providing the Service (contract performance). Creating and managing your account, running your content through the pipeline, and delivering the features you have subscribed to.

Billing and payment administration (contract performance). Processing subscription payments, managing billing records, and handling refund requests.

Service improvement (legitimate interests). Analysing usage patterns, diagnosing issues, and developing new features. We do not override your rights in doing so.

Security and fraud prevention (legitimate interests). Detecting and preventing unauthorised access, abuse, and security incidents.

Transactional communications (contract performance / legitimate interests). Account confirmations, receipts, and service notifications.

Marketing communications (consent). Product updates and newsletters where you have opted in. You can withdraw consent at any time by clicking unsubscribe in any marketing email or by contacting us at [email protected].

Legal compliance (legal obligation). Retaining records and responding to lawful requests from courts, regulators, or law enforcement.

5. AI Model Providers and Content Processing

ScribePress routes content through third-party AI providers to run the pipeline. When you submit a topic or start any pipeline stage, your instructions, topic, site context, and any content you provide are sent to one or more of the following:

We keep personally identifiable information out of AI requests wherever possible. That said, if you include personal data in the content or instructions you provide, it will be transmitted to the relevant provider.

Each provider processes data under its own terms. We are not responsible for how they handle data after it is transmitted. We recommend reviewing each provider's privacy policy before using the Service.

We do not use your content or pipeline outputs to train our own AI models. We have no control over whether third-party providers use API request data for their model training. Check each provider's terms for details on that.

6. Data Sharing

We do not sell your personal data or share it with third parties for their own marketing.

Service providers. We work with third-party companies to run the Service. They process data only on our instructions and are bound by data protection obligations. Current providers:

  • Railway (infrastructure hosting)
  • Firebase / Google (authentication)
  • Resend (transactional email delivery)
  • Paddle (subscription billing and payment processing)
  • Vercel (frontend hosting)

AI model providers. As described in section 5.

Google APIs.When you connect Google Search Console or Analytics, data is exchanged with Google's APIs under the authorisation you grant, and is governed by Google's terms.

Legal requirements. We may disclose personal data if required by law, court order, or a governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of ScribePress, our users, or the public.

Business transfers. If we sell or transfer the Service or our business, your personal data may move as part of that transaction. We will tell you before your data becomes subject to a different privacy policy.

7. International Data Transfers

We are based in Israel, which the European Commission has recognised as providing an adequate level of data protection for transfers from the EEA.

Some service providers and AI model providers are based in the United States or other countries without an adequacy decision. Where that is the case, we rely on Standard Contractual Clauses approved by the European Commission, or on the derogations permitted under Article 49 of the GDPR.

You can request a copy of the relevant safeguards by emailing [email protected].

8. Data Retention

  • Account data: Kept for the life of your account and for 12 months after deletion, then permanently deleted or anonymised.
  • Content data: Kept for the life of your account. Deleted within 30 days of account deletion unless retention is required by law.
  • Billing records: Kept for 7 years from the transaction date to comply with tax and accounting law.
  • Usage and technical data: Kept in aggregated or anonymised form for up to 24 months.
  • Communications data: Kept for 3 years, or longer where required for legal purposes.

Where law requires longer retention, we comply. Where it is no longer needed, we delete or anonymise it.

9. Cookies and Tracking

Essential cookies keep your session active. You cannot disable these without breaking the Service.

Analytics cookies help us understand how the Service is used. We only place these with your consent.

Third-party cookiesmay be set by services integrated with the platform. We do not control these; they are covered by the relevant third party's policy.

You can manage your preferences through the cookie banner or your browser settings. Disabling certain cookies may affect how the Service works. Full details are in our Cookie Policy.

10. Your Rights

  • Access. Request a copy of the personal data we hold about you.
  • Rectification. Ask us to correct inaccurate or incomplete data.
  • Erasure. Ask us to delete your personal data where it is no longer needed.
  • Restriction. Ask us to limit how we process your data in certain circumstances.
  • Portability. Receive your data in a structured, machine-readable format and transfer it to another provider where technically feasible.
  • Objection. Object to processing based on legitimate interests. We stop unless we can show compelling grounds that outweigh your rights.
  • Withdraw consent. Where we rely on consent, withdraw it at any time. This does not affect processing already carried out.
  • Israeli law. Under the Israeli Privacy Protection Law 5741-1981 you have the right to access and correct personal data we hold about you.
  • CCPA (California residents). You have the right to know what personal information we collect, to delete it, to correct inaccuracies, and to opt out of its sale or sharing. We do not sell or share personal information as defined under the CCPA.

To exercise any of these rights, email [email protected]. We respond within 30 days and will not discriminate against you for making a request. We may ask you to verify your identity first.

You can also lodge a complaint with your local data protection authority. In the EU, that is the supervisory authority in your member state. In Israel, it is the Privacy Protection Authority.

11. Children's Privacy

The Service is not for anyone under 18. We do not knowingly collect personal data from children. If you think we have done so accidentally, contact us at [email protected] and we will delete it promptly.

12. Security

We use technical and organisational measures to protect your personal data: encryption in transit and at rest, access controls, and regular security reviews. No online service is completely secure, and we cannot guarantee absolute security.

If a breach is likely to affect your rights and freedoms, we will notify you without undue delay as required by law.

13. Changes to This Policy

We may update this Policy when our practices change, the Service changes, or the law requires it. For material changes, we will email you and post a prominent notice in the Service at least 14 days before the update takes effect. The revised Policy will be at scribepress.co/privacy with the new effective date.

Continuing to use the Service after the effective date means you accept the changes. If you do not, stop using the Service and delete your account.

14. Contact

Michael Rubinstein, trading as Tjabo Digital
Email: [email protected]
Website: scribepress.co

We aim to respond to all privacy enquiries within 30 days.

Get in Touch

We reply within 24 hours

Your message is sent directly to the ScribePress team. We don't share your information with third parties.