Privacy Policy

Effective: May 15, 2026  |  Solo Scriptor  |  한국어 →

Solo Scriptor ("we," "us") provides the Lampstand AI service in compliance with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This policy explains what personal data we collect, why, how long we keep it, and the rights you have.

1. Personal data we collect

Type	Items	When
Required	Email address, name (nickname)	Free-trial sign-up, subscription
Collected automatically	AI request counts, feature usage, credit usage	While using the service
Payment	Handled by the payment platform (we do not store card data directly)	At subscription payment

※ Your ministry data — sermon manuscripts, notes, and the like — is stored only on your computer and is never kept on our servers. During an AI request the content passes briefly through the API servers, but it is not stored permanently by us or the AI provider, nor used to train any model.

2. Why we collect it

• Creating and managing your subscription account; verifying your license
• Providing AI features (deducting credits, tallying usage)
• Customer support and responding to inquiries
• Detecting anomalies and maintaining security
• Meeting legal obligations (tax, e-commerce, etc.)

3. Processors (sub-processors)

To provide the service smoothly, we entrust the processing of personal data to the following:

Processor	Purpose	Location	Retention
Cloudflare, Inc.	API proxy, security, and CDN	USA	Until the contract ends
Supabase, Inc.	Account & usage database	USA	Until the contract ends
Google LLC	AI API (processing AI features)	USA	Immediately after processing
Gumroad, Inc.	Payment processing (merchant of record)	USA	Statutory retention period for payments

4. International transfers

Cloudflare, Supabase, Google, and Gumroad operate servers in the United States, so some personal data may be transferred there. Each maintains appropriate safeguards such as the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCC).

5. Retention

Item	Retention	Basis
Email, name	1 year after subscription ends	Support, legal obligation
Service usage records	1 year	Service improvement, dispute resolution
Payment records	5 years	Tax / commerce law

6. Deletion

Once the retention period passes or the purpose is fulfilled, electronic files are permanently erased by an irrecoverable method. Information that must be retained by law is stored separately and destroyed when its period expires.

7. Your rights

As a data subject, you may at any time exercise the following rights:

• Access — confirm the personal data being processed
• Rectification — correct inaccurate data
• Erasure — delete your data (except where the law requires retention)
• Restriction — stop processing for certain purposes
• Objection (GDPR) — object to processing based on legitimate interests
• Portability (GDPR) — receive your data in a structured format
• Do Not Sell/Share (CCPA) — we do not sell your personal information

8. Security measures

• Encryption in transit (HTTPS/TLS)
• Minimized database access and authentication controls
• Encrypted storage of API keys and auth tokens
• Protection against external attacks (Cloudflare WAF)

9. Contact

If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

10. Changes to this policy

If this policy changes, we will post notice on our website at least 7 days before the effective date. Changes affecting important rights will be notified by email 30 days in advance.

This policy is effective from May 15, 2026.