Privacy Policy

Data Collection Categories

We collect various types of information to provide and improve our services. The information we collect includes:

• Account Information: When you create an account, we collect your name, email address, and username to identify you on our platform.
• Profile Details: Optional information you may provide such as biography, profile picture, and website to personalize your presence on our marketplace.
• Transaction Data: When you make purchases or sales, we collect payment methods, purchase history, and billing address information to process transactions.
• Communication Records: We store records of your interactions with our support team, comments on listings, and other communications on our platform.
• Usage Information: We collect data about how you use our platform, including browsing patterns, search queries, and pages visited to improve our services.
• Technical Data: Information about your device, IP address, browser type, and operating system to ensure security and compatibility.

Usage Purposes

We use your personal data for various purposes, including:

• Account Creation and Management: To create and maintain your account, authenticate your identity, and provide access to our services.
• Order Processing and Fulfillment: To process transactions, deliver digital products, and manage your purchases of scripts and software.
• Author Payments and Tax Reporting: To facilitate payments to script developers, process commissions, and comply with tax reporting obligations.
• Customer Support: To assist with inquiries, resolve disputes, and provide technical assistance for platform-related issues.
• Platform Improvement: To analyze usage patterns, identify trends, and enhance the functionality and user experience of our marketplace.
• Security and Fraud Prevention: To detect, prevent, and address security risks, unauthorized access, and fraudulent activities.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including responding to legal requests.

Legal Basis for Processing

We process your personal data based on various legal grounds:

• Contract Fulfillment: Processing necessary to fulfill our contractual obligations to you regarding script purchases, sales, and platform usage.
• Legitimate Interest: Processing that serves our legitimate business interests, such as improving our platform, ensuring security, and developing new features.
• Consent: Processing based on your specific consent, particularly for marketing communications and certain types of data processing.
• Legal Obligation: Processing required to comply with applicable laws, such as tax regulations, financial record-keeping, and legal requests.
• Vital Interests: Processing necessary to protect vital interests, such as detecting and preventing security breaches that could harm users.
• Public Interest: Processing for public interest purposes, such as safety measures and content moderation to maintain platform integrity.

Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active Account Data: We retain your account information for as long as your account remains active. Upon account deletion, we remove personal data except where retention is necessary for legal purposes.
• Transaction Records: We retain transaction records for 7 years to comply with tax, financial, and legal requirements.
• Support Communications: We retain customer support interactions for 2 years after resolution to ensure continuity of service and address related inquiries.
• Marketing Preferences: We maintain your marketing preferences until you change them or delete your account.
• Usage Analytics: We retain identifiable usage data for 13 months, after which it is aggregated or anonymized for statistical purposes.

Internal Sharing

We may share your information within our organization:

• Between Platform Teams: Your data may be accessed by different internal teams to provide support and improve services.
• For Security Purposes: Our security and fraud prevention teams may access data to protect the platform and users.
• For Platform Improvement: Our development and analytics teams may use data to enhance features and user experience.
• Under Confidentiality Requirements: All staff accessing user data are bound by strict confidentiality obligations.
• With Limited Access: We enforce need-to-know principles and provide access only to data necessary for job functions.

Third-Party Service Providers

We work with trusted third-party service providers who perform services on our behalf:

• Payment Processors: We share transaction data with payment processors (Stripe globally and PayStack specifically for Nigerian users) to complete purchases and sales.
• Cloud Hosting and Storage: We use cloud services to host our platform and store data securely.
• Email and Communication Services: We use communication services to send notifications, updates, and marketing materials.
• Customer Support Tools: We utilize specialized tools to manage and respond to support requests.
• Analytics and Monitoring: We employ services to analyze platform performance and user behavior to improve our offerings.
• Data Protection: All service providers are bound by data protection agreements to ensure the security and confidentiality of your information.

Author Information Sharing

To facilitate the marketplace functionality between script buyers and sellers:

• Buyer Information: Limited buyer details are shared with script authors for purchases of their products.
• Transaction Details: Authors receive information about transactions related to their scripts.
• Support Requests: Information related to support queries for a specific script is shared with the author through our end-to-end encrypted messaging system.
• Reviews and Comments: Public feedback and comments on script listings are visible to authors and other users.
• Usage Statistics: Authors receive anonymized analytics about how their scripts are being used and performed.

Legal Requirements

We may disclose your information when legally required:

• Court Orders: We comply with valid court orders and legal processes requiring disclosure.
• Tax Authorities: We provide necessary information to tax authorities for financial reporting purposes.
• Law Enforcement: We cooperate with law enforcement for valid investigations when legally required.
• Regulatory Compliance: We share information necessary to meet regulatory obligations in jurisdictions where we operate.
• Intellectual Property Claims: We respond to Digital Millennium Copyright Act (DMCA) notices and other intellectual property claims.

Cookie Types

We use various types of cookies on our platform:

• Essential Cookies: Required for core platform functionality, like authentication and security. These cookies are necessary for our marketplace to work properly.
• Preference Cookies: Store your settings and preferences to enhance your experience and remember your choices between sessions.
• Analytics Cookies: Help us understand how users interact with our platform, which features are popular, and where improvements are needed.
• Marketing Cookies: Support our efforts to provide relevant advertising and promotional content based on your interests.
• Third-Party Cookies: Set by external services integrated with our platform, such as payment processors or analytics tools.

Cookie Purposes

We use cookies for several specific purposes:

• Authentication and Security: To identify you when you log in and protect against unauthorized access to your account.
• Session Management: To maintain your session as you navigate through our marketplace and use various features.
• Preference Storage: To remember your language preference, display settings, and other customization choices.
• Analytics and Performance: To gather data on how our platform is used, which helps us make improvements and optimize performance.
• Feature Enhancement: To support interactive features, like shopping carts, wishlists, and recently viewed items.
• Targeted Content: To deliver personalized content, script recommendations, and relevant marketplace offerings.

Cookie Management

You have control over cookies used on our platform:

• Consent Banner: We display a cookie consent banner on your first visit to obtain your preferences.
• Preference Center: Our cookie preference center allows you to customize which cookies you accept or reject.
• Browser Settings: You can manage cookies through your browser settings, including blocking or deleting them.
• Opt-Out Options: We provide specific opt-out mechanisms for non-essential cookies.
• Third-Party Controls: Links to opt-out of third-party services we integrate with are provided where applicable.
• Regular Updates: We conduct regular cookie audits and cleanup to ensure compliance with your preferences.

Cookie Lifespan

Cookies we use have different lifespans depending on their purpose:

• Session Cookies: Temporary cookies that are deleted when you close your browser, used primarily for maintaining your session state.
• Persistent Cookies: Remain on your device for a specified period, ranging from days to months depending on their function.
• Authentication Cookies: Typically last for up to 30 days to keep you logged in if you select "remember me" functionality.
• Preference Cookies: Generally stored for up to 1 year to maintain your personalized settings across visits.
• Analytics Cookies: Usually retained for up to 13 months to allow for year-over-year usage comparisons.

Right to Access

You have the right to know what personal data we hold about you and how we use it:

• You can request confirmation of whether we process your personal data.
• You can obtain a copy of your personal data in a structured, commonly used format.
• We will inform you about the purposes for which we process your data.
• We will disclose the categories of recipients with whom we share your data.
• We will provide information about how long we retain your data.
• You can access most of this information through our privacy dashboard in your account settings, or by submitting a formal data access request.

To submit an access request, please visit the Privacy section in your account settings or contact our Data Protection Officer at privacy@scriptvil.com.

Right to Rectification

You have the right to correct inaccurate or incomplete personal data:

• You can request corrections to any inaccurate personal information we hold about you.
• You can provide additional information to complete any incomplete personal data.
• You can update most account information directly through your profile settings.
• For information you cannot update yourself, you can submit a correction request.
• We may request verification of your identity before making changes to sensitive information.

Most information can be updated directly in your account settings. For assistance with complex corrections, please contact support@scriptvil.com.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances:

• You can request deletion when your data is no longer necessary for the purposes for which it was collected.
• You can request erasure when you withdraw consent and there is no other legal ground for processing.
• You can delete your account directly through the account settings, which will remove most personal data.
• Some data may be retained if required for legal compliance, such as transaction records for tax purposes.
• Data necessary to process any pending transactions will be retained until completion.
• We verify all deletion requests to protect against unauthorized account removal.

To delete your account, go to Account Settings > Privacy > Delete Account. For partial data deletion requests, please contact privacy@scriptvil.com.

Right to Restriction

You have the right to request temporary limitation of processing your personal data:

• You can request restriction while we verify the accuracy of your data if you contest its accuracy.
• You can request restriction when the processing is unlawful, but you oppose erasure.
• You can request restriction when we no longer need the data but you require it for legal claims.
• You can request restriction when you have objected to processing pending verification of legitimate grounds.
• During the restriction period, we will store but not further process the restricted data.
• We will notify you before lifting any processing restriction you have requested.

To request processing restriction, please submit a detailed request to privacy@scriptvil.com specifying which data and what processing you wish to restrict.

Global Operations

ScriptVil operates globally, which means your personal data may be transferred to and processed in countries other than your country of residence:

• Server Locations: Our servers are located in various regions to ensure optimal performance, including North America, Europe, and Asia.
• Service Providers: We engage service providers from around the world to deliver our services efficiently.
• International Users: Our multivendor marketplace connects developers and buyers from over 150 countries.
• Corporate Structure: Our business operations may require sharing data between different office locations globally.

Data Transfer Safeguards

When transferring your data internationally, we implement appropriate safeguards to ensure protection:

• Standard Contractual Clauses: We incorporate EU-approved Standard Contractual Clauses in our agreements with service providers and partners.
• Data Processing Agreements: We establish comprehensive data processing agreements that enforce strict data protection obligations.
• Privacy Shield: Where applicable, we work with entities certified under privacy frameworks that ensure adequate protection.
• Encryption and Security: All data in transit is encrypted using industry-standard protocols, regardless of destination.
• Data Minimization: We only transfer the data necessary to achieve the specific processing purpose.

Technical Security

We implement robust technical measures to protect your data:

• Encryption: All data is encrypted both in transit (using TLS) and at rest using industry-standard encryption algorithms.
• Access Controls: Multi-layered access controls restrict data access to authorized personnel only.
• Multi-Factor Authentication: We require multi-factor authentication for administrative access to systems containing personal data.
• Network Security: Advanced firewalls, intrusion detection, and prevention systems protect our network perimeter.
• End-to-End Encryption: Our messaging system uses end-to-end encryption to protect communications between buyers and sellers.
• Vulnerability Management: Regular security scanning, penetration testing, and prompt patching of vulnerabilities.

Organizational Measures

Beyond technical solutions, we implement organization-wide security practices:

• Security Training: Mandatory security awareness training for all staff members who access user data.
• Data Handling Policies: Comprehensive policies for data classification, handling, and secure disposal.
• Background Checks: Pre-employment background checks for employees with access to sensitive systems.
• Least Privilege Principle: Staff members have access only to the specific data needed for their role.
• Security Incident Response: Documented procedures for identifying, reporting, and addressing security incidents.

European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR and equivalent legislation:

• Right to Complain: You have the right to lodge a complaint with your local data protection authority.
• Right to Be Informed: You have the right to transparent information about our data practices.
• Automated Decision-Making: You have protections against solely automated decisions that significantly affect you.
• Data Transfer Transparency: You have the right to information about data transfers outside the EEA.

California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell.
• Right to Delete: You have the right to request deletion of your personal information with certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Authorized Agent: You may designate an authorized agent to make requests on your behalf.