Privacy Policy

Last Updated: September 13, 2026

ScripterKey ("ScripterKey," "we," "us," or "our") builds and operates software platforms including MailCRM (bulk email marketing SaaS), Mail Deck (B2B lead generation software), and Case Management System (legal practice management), along with the scripterkey.com website and shop. This Privacy Policy explains what information we collect, how we use it, and the choices you have, across all ScripterKey products and services (together, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

1. Information We Collect

We collect information in a few different ways depending on how you interact with us:

Information you provide directly

• Account details — name, business/company name, email address, phone number, and password (stored using industry-standard bcrypt hashing, never in plain text).
• Contact form and demo request submissions.
• Billing information when you purchase a subscription or digital product (processed by our payment partners — see Section 4).
• Content you upload or create within our products — for example, email lists and campaign content in MailCRM, lead data in Mail Deck, or case records in Case Management System.

Information collected automatically

• Usage data — pages visited, features used, timestamps, and general interaction patterns, used to improve our Services.
• Device and log data — IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies (see Section 3).

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain our Services, including multi-tenant account isolation and 24/7 automation features.
• Process transactions and send related information, including confirmations and invoices.
• Respond to inquiries, support requests, and demo bookings.
• Send administrative communications — service updates, security alerts, and policy changes.
• Monitor and analyze usage to improve performance, security, and product features.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

3. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our Services are used. You can control cookies through your browser settings; disabling cookies may limit some functionality (for example, staying logged into your dashboard).

• Essential cookies — required for login sessions and core site functionality.
• Analytics cookies — help us understand aggregate usage patterns so we can improve the product.

4. Payment Processing

Subscription and shop payments are processed securely through Razorpay (UPI, cards, net banking) and PayPal (international payments). We do not store your full card number, CVV, or banking credentials on our servers — that information is handled directly by our payment processors under their own security standards and privacy policies.

5. Third-Party Services

Certain features rely on trusted third-party providers, including:

• Google Workspace (OAuth2) — used by MailCRM to send email campaigns through your connected Google account, in accordance with Google's API Services User Data Policy.
• Razorpay & PayPal — for secure payment processing (see Section 4).
• Hosting & infrastructure providers — used to run our servers, databases, and automation (cron) systems.

These providers only receive the information necessary to perform their function and are bound by their own privacy and security obligations.

6. Data Security

We take security seriously across every ScripterKey product:

• Passwords are hashed with bcrypt — never stored in plain text.
• All database queries use parameterized statements (PDO) to prevent SQL injection.
• Multi-tenant architecture keeps each customer's data isolated at the query level.
• Access to production systems is restricted to authorized personnel only.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security — but we work continuously to protect your information using industry-standard practices.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. If you close your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes.

8. Your Rights & Choices

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict certain processing of your data.
• Export your data in a portable format.

To exercise any of these rights, contact us at scripterkey@gmail.com. We will respond within a reasonable timeframe.

9. Children's Privacy

Our Services are intended for businesses and individuals aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to remove it.

10. International Users

ScripterKey is based in India and primarily serves clients across India and worldwide. If you access our Services from outside India, your information may be transferred to, stored, and processed in India or other countries where our service providers operate. By using our Services, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last Updated" date. Continued use of our Services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, reach out any time: