Privacy Policy · Scarlett · Scarlett
1. The Short Version
Scarlett collects account information, agent content, and integration data necessary to operate the service. We don’t sell it. You can export or delete your data at any time.
2. Who This Covers
This policy applies to all Scarlett users, including founders, operators, paid customers, trial users, and marketing site visitors.
3. What We Collect
Account data: Email, display name, password or magic-link sessions, and billing information (processed through a payment provider).
Workspace and agent data: User-configured content including business context, agent personalities, tasks, outputs, documents, chat history, and avatars.
Integration data: OAuth tokens and API credentials for connected services like email, calendar, GitHub, and Stripe, plus content returned during agent operations.
Device and usage data: Standard web telemetry including IP address, browser type, device information, pages viewed, and feature usage.
Communications: Support emails, tickets, and in-product feedback.
4. How We Use Your Information
We use collected data to operate the service, maintain security, provide support, improve products, process payments, and meet legal obligations. Notably: we do not sell your personal information.
5. How Scarlett Interacts With Your Data
Scarlett’s prompts are sent to LLM providers. She accesses third-party services you authorize. Outputs remain in your workspace. You maintain control and may revoke integrations or delete content anytime.
6. Third-Party Services
We partner with LLM providers, Stripe (payments), cloud infrastructure providers, email delivery services, and user-authorized integrations. Each vendor receives only necessary data under protective contracts.
7. Payments
Stripe processes payments. We receive limited metadata but never store full card numbers.
8. Cookies and Analytics
Essential cookies maintain sessions. We also use Google Analytics, PostHog, and Meta Pixel to understand site traffic, product usage, performance, conversion, and marketing attribution. These services may set cookies or similar identifiers and receive device and browser details, approximate location, page URLs, referrers, and interactions.
Depending on our PostHog project settings, analytics may include autocapture, heatmaps, and session replay. Meta Pixel supports advertising measurement and attribution. These providers process information under their own privacy terms; their tracking loads when the relevant service is configured on Scarlett.
9. How We Share Data
Data sharing occurs: with your authorization, with vendors under protective contracts, with the analytics and advertising providers described above, for legal compliance, or during business transfers. We do not sell your workspace content. Limited browser, device, and interaction data may be processed by our measurement providers for the purposes described in this policy.
10. How We Protect Data
Industry-standard safeguards include encryption in transit, access controls, and audit logging. Breach notification follows applicable law.
11. Retention and Deletion
Data remains during active account status. After account closure, workspace content deletes after 30 days (except legally required records). You may export, delete, or close accounts anytime.
12. Your Rights
You have data access, correction, export, and deletion rights. EU/UK users have GDPR protections. California users have CCPA rights. Contact will@tryscarlett.ai to exercise rights.
13. International Users
Scarlett operates from the United States. International users consent to US data transfer and processing.
14. Children
The service is not directed at minors. Child data discovery triggers immediate deletion.
15. Changes to This Policy
Material policy updates receive 14-day advance notice via email or in-service notification.
16. Contact
Scarlett