ScriptCue™
by Transcensus
Privacy Notice
1. Who We Are
ScriptCue is developed and operated by Transcensus Ltd ("we", "us", "our"), registered in England and Wales, company number 17212811. We are the data controller for the personal data described in this Notice.
We are registered with the Information Commissioner's Office (ICO), registration reference C1931200.
If you have any questions about this Notice or how we handle your data, contact us at: info@scriptcue.uk
2. What Personal Data We Collect and When
ScriptCue does not collect, read, or transmit any content you enter into the desktop application or browser extension. Your scripts, imported documents, text, and meeting captions remain on your device and are never sent to us.
We collect a small amount of personal data solely in connection with licence management:
| Data | When collected | Why it qualifies as personal data |
|---|---|---|
| Licence key | At purchase, activation, and each validation check | Issued to a named purchaser; linked to your identity in our records |
| Device hardware fingerprint | At activation, deactivation, and periodic validation | Identifies your specific device; attributable to you as its owner |
| IP address | Transmitted automatically during validation, extension sign-in, and service-announcement requests | Can identify an individual subscriber |
| Timestamp | Each validation or extension sign-in request | Recorded alongside the above |
| Email address | At purchase and when you request a browser-extension sign-in code | Used to confirm your subscription, send the one-time code, receipts, and service communications |
| One-time sign-in code | When requested in the browser extension | A short-lived credential. Only a hash is stored by us; the code expires after 10 minutes and five failed attempts |
| Extension authentication token | After a successful browser-extension sign-in | A signed credential stored locally by the extension so you remain signed in. It includes your email address and expires after 180 days |
| Waitlist email address (optional) | When you voluntarily submit it via the waitlist form on scriptcue.uk | Used solely to notify you about ScriptCue updates you requested |
| Role / profession (optional) | If you select one when joining the waitlist | Aggregate only; helps us understand who ScriptCue serves |
The browser extension can optionally request access to Google Meet, Microsoft Teams, and Zoom so it can display automatically. You choose whether to grant this access. For launch, caption sync is a Microsoft Teams web beta: only Teams captions are read locally, only when you enable the feature. Meet and Zoom captions are not read. Captions are not sent to ScriptCue, Cloudflare, Resend, or Lemon Squeezy.
If you join the waitlist we will only use your email to send confirmation and relevant ScriptCue updates. You can unsubscribe and request deletion at any time by emailing info@scriptcue.uk.
3. Why We Collect It and Our Lawful Basis
We process this data under Legitimate Interests (Article 6(1)(f) UK GDPR).
Purposes:
- Licence activation and validation — to confirm that your licence is valid and active, and to prevent unauthorised sharing of licence keys.
- Browser-extension sign-in — to confirm control of the purchase email and unlock subscription features without consuming a desktop activation seat.
- Device management — to track how many devices a licence is active on and to enable you to transfer your licence to a new device.
- Fraud prevention — to detect and investigate fraudulent purchases or licence abuse.
- Service communications — to send your licence key, renewal reminders, and important notices about the software.
- Product update notifications — to notify you of new software versions, important bug fixes, and relevant product announcements. This is based on our legitimate interest in keeping customers informed about software they have purchased. You may object to this processing at any time by contacting us at info@scriptcue.uk.
We have a legitimate interest in protecting the integrity of our software licensing system. The processing is necessary for that purpose. The privacy impact on you is low: we collect only the minimum data required, no content is ever captured, and no data is shared for marketing or profiling purposes. Our interests do not override your fundamental rights and freedoms.
4. How Long We Keep Your Data
| Data | Retention period |
|---|---|
| Licence key and activation records | Retained for the duration of your licence, then deleted 90 days after expiry or cancellation |
| Device fingerprint | Deleted when the licence key it is associated with is deleted |
| IP address logs | Retained for up to 30 days for rate-limiting and abuse prevention, then deleted |
| Email address | Retained for the duration of your licence and for up to 12 months afterwards for legal and accounting purposes, then deleted |
| Hashed sign-in code | Stored in Cloudflare KV for no more than 10 minutes, then automatically deleted |
| Hashed sign-in rate-limit entries | Stored in Cloudflare KV for no more than one hour, then automatically deleted |
| Extension authentication token | Stored locally in your browser for up to 180 days, or removed earlier when you sign out or the token is rejected |
| Waitlist email and role | Retained until launch announcement is delivered, then deleted within 30 days unless the person becomes a customer (in which case standard email retention above applies). Deleted immediately on request. |
5. Who We Share Your Data With
We do not sell, rent, or share your personal data with third parties for marketing or any purpose other than those described in this Notice.
We share data only with the following categories of service provider, solely to the extent necessary to operate the licensing system:
- Hosting and validation infrastructure provider — Cloudflare, Inc. hosts our licence validation server, customer and waitlist databases, short-lived sign-in-code storage, and extension authentication endpoints. Requests are processed on their infrastructure. Cloudflare also provides aggregate, cookieless analytics for our website (scriptcue.uk); this produces visitor statistics only and creates no advertising profile.
- Analytics provider — Google Analytics 4 (Google LLC) is used to measure website traffic and user behaviour, including page views, UTM campaign attribution, and checkout events. Google Analytics uses cookies and collects your IP address (anonymised) and browser information. Data is processed in accordance with Google's privacy policy. You can opt out via Google's opt-out tool.
- Payment processor — Lemon Squeezy processes payments and provides us with your email address and licence purchase record. Their own privacy policy applies to data they hold.
- Transactional email provider — Resend (Drop, Inc.) delivers browser-extension sign-in codes, waitlist confirmation, and service emails on our behalf. Their own privacy policy applies to data they hold.
We require all service providers to process data only on our instructions and in accordance with applicable data protection law.
6. International Transfers
Our licence validation infrastructure and/or payment processor may be hosted in the United States or another country outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place:
- UK-US Data Bridge (where the recipient is certified), or
- UK International Data Transfer Agreements (IDTAs) / Standard Contractual Clauses (SCCs) approved for use under UK GDPR.
You can request details of the safeguards in place by contacting us at info@scriptcue.uk.
7. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data in certain circumstances.
- Right to restriction — you can ask us to restrict processing of your data in certain circumstances.
- Right to object — you can object to processing based on Legitimate Interests. We will stop processing unless we have compelling legitimate grounds that override your interests.
- Right to data portability — where processing is based on consent or contract, you can ask for your data in a machine-readable format.
- Right to lodge a complaint — you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
To exercise any of these rights, contact us at info@scriptcue.uk. We will respond within one month.
8. Cookies and Tracking
The ScriptCue desktop application and browser extension do not use cookies and do not employ tracking, analytics, or advertising technologies. The extension stores scripts, preferences, and its signed authentication token in browser extension storage. This storage is required for the product to work and is not used for advertising or cross-site tracking. No script, document, or caption content is captured, transmitted, or analysed by us.
Our website (scriptcue.uk) uses a privacy-focused, cookieless web analytics service (Cloudflare Web Analytics) to understand how visitors find and use the site — for example which pages are viewed and which referrer or campaign brought a visit — so that we can improve it. This service does not set cookies, does not store or read any information on your device, and does not track you across other websites or build an advertising profile. It records only aggregate usage data (such as page URL, referrer and campaign parameters, and general device and browser type), and processes your IP address transiently to estimate approximate country without storing it.
We rely on our legitimate interest (Article 6(1)(f) UK GDPR) in measuring and improving our website. Because no information is stored on or accessed from your device, these analytics do not require your consent under PECR, and no cookie banner is used.
9. Changes to This Notice
We may update this Privacy Notice from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect. The current version will always be available at https://scriptcue.uk/privacy and within the application.
10. Contact Us
Transcensus Ltd
Email: info@scriptcue.uk
If you are not satisfied with our response, you have the right to complain to the ICO:
Information Commissioner's Office — ico.org.uk