1. Introduction
This Privacy Policy explains how Script & Flip LLC, a Pennsylvania limited liability company doing business as "QuestStudio" ("QuestStudio," "we," "our," or "us"), collects, uses, shares, and protects your personal information when you use our website, Android app, and Service.
Script & Flip LLC is the data controller responsible for your personal data.
We aim to follow privacy principles inspired by laws such as the GDPR, providing transparency and security for your data.
2. Information We Collect
Account & Identity
Email address, display name, and authentication credentials (hashes).
Payment Data
Handled by Stripe on web and Google Play on Android; we do not store full card numbers locally. We keep a hashed payment-method identifier to prevent repeated free-trial claims.
Usage & Technical
IP address, browser type, device info, log data, and cookies for security and analytics.
Content Data
Your prompts, uploaded media, and generated assets.
3. How We Use Your Information
To operate and provide the Service (AI generation, asset storage).
To process payments and manage subscriptions.
To maintain security and prevent abuse/prohibited content.
To improve product features through first-party product analytics, which may use a pseudonymous visitor identifier and may be associated with your account when you are signed in.
To attribute approved partner referrals using campaign parameters, a pseudonymous visitor identifier, and a first-party partner code retained for up to 30 days. Referral data may be connected to signup, generation, checkout, subscription, and refund records to calculate performance and manually reviewed commissions.
3.1. Microsoft Clarity & Analytics Services
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services.
These website-only Microsoft tools are not loaded by the QuestStudio Android app.
Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for:
Site Optimization – Understanding how users navigate and interact with QuestStudio to improve usability
Fraud & Security – Detecting and preventing fraudulent activity and security threats
Advertising – Measuring the effectiveness of our marketing campaigns
Microsoft may use this data in accordance with their privacy policy. You can learn more about how Microsoft collects and uses your data by visiting their Privacy Statement.
4. We Do Not Sell Your Data
Script & Flip LLC does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.
We disclose data to service providers needed to operate QuestStudio, including Stripe and Google Play for payments, Supabase for authentication and data storage, hosting and object-storage providers, support and monitoring providers, and AI model providers for generation. When you request an AI generation, the prompt and any media you choose to provide are sent to the selected model provider to produce the result. Their processing is governed by the applicable service terms, privacy commitments, and our provider arrangements.
5. Data Retention
We retain data only as long as necessary. Retention for assets depends on your plan:
Unsaved: ~48 hours
Apprentice: 30 days
Paid Users: While subscription is active (plus 35-day grace period after cancellation)
When you request account deletion, access is revoked and we begin removing stored assets and primary content records. Remaining QuestStudio account, authentication, purchase-entitlement, and ledger records are scheduled for permanent purge after 30 days. Records needed to retry failed storage cleanup may remain until that cleanup succeeds. A hashed payment-method identifier may remain after account deletion to prevent repeat trial claims; its deleted account reference is removed. Limited fraud-prevention, security, tax, accounting, or legal records may be retained when required, and payment processors may retain their own transaction records under their policies and legal obligations.
6. Your Rights
Depending on your location, you may have the right to access, correct, or delete your data ("Right to be Forgotten"). You can exercise these rights by contacting us.
You can use the Delete Account feature in Settings to revoke account access and start deletion. If you no longer have the app installed, follow our account-deletion instructions. The deletion timeline and limited-retention exceptions are described above.
7. Security
We implement technical measures like encryption in transit and access controls.
While no system is 100% secure, we strive to protect your privacy.
8. Contact
For privacy-related questions, please contact us: