PRIVACY POLICY
Last updated: August 26, 2026
1. Introduction
You send us your texts. That’s no small thing, because your work is yours and you want to know where it ends up. This policy tells you exactly that: what data we have about you, what we do with it, how long we keep it, and how much say you have in it.
What happens to your texts is explained right after this, in Section 2. For most people, that’s the question that matters.
2. Your Texts and the AI Writing Coaching
ViaScripta is an AI writing coach. To give you feedback, we send the text you upload to Claude, Anthropic’s language model. Anthropic processes your text solely to generate the coaching you get back in the app. Below, we explain exactly what happens to your text.
Your text is not used to train AI models. ViaScripta accesses Claude through Anthropic’s commercial API. By default, Anthropic does not use texts received through this API to train or improve its models. So your writing does not end up in a training set.
Your text is processed only to give you feedback. The text goes to the model, and the model returns coaching. We do not read your text and do not check its content. Only if you report an issue that we cannot diagnose any other way do we open it, in order to resolve that issue.
Your text is not shared with third parties, except with Anthropic as our processor, and only to generate the feedback. A data processing agreement with Anthropic (Data Processing Addendum) is in place. It automatically forms part of the commercial terms we have accepted. The agreement states that Anthropic processes your data only on our instructions and does not sell or share it.
Anthropic is based in the United States. This means your text is processed outside the European Economic Area (EEA). This transfer is governed by the European Commission’s Standard Contractual Clauses (SCCs), which form part of the data processing agreement with Anthropic. This way, your text remains appropriately protected outside the EEA as well.
Anthropic deletes texts sent through the API within 30 days. During that period, they are used only to generate your feedback and to monitor for abuse. After that, Anthropic erases them automatically. Only when a text is flagged by the abuse filters, or when the law requires it, may Anthropic keep it longer.
You can delete your texts yourself at any time. You manage your own texts and feedback in your account. When you delete a text, everything connected to it is removed: the text itself, the feedback, the follow-up questions (the deep-dive buttons), and the data derived from them.
You remain the owner of your text. You write every word. AI does the coaching.
3. Important Information and Who We Are
3.1 Controller
ViaScripta, a trade name of Blatter Media (registered with the Dutch Chamber of Commerce, KvK, under number 54726204), is responsible for the processing of your personal data. If you have questions about this privacy policy, you can contact us at privacy@viascripta.com.
3.2 Changes to This Privacy Policy
We review our privacy policy regularly. This version was last updated on August 26, 2026.
4. Data We Collect
We collect only what we need to provide the service:
Account data: your name, your email address, and your password.
Your texts and the feedback on them. This is the core of the service and is described in detail in Section 2.
Text you paste on our homepage to try the coach, even if you don’t have an account.
Payment data: which subscription or pack you bought, when, and for what amount. Your card or bank account details go directly to Stripe and do not reach us.
Usage data: how many sessions you have used, when, and the status of your subscription.
Technical data: your IP address, your browser, and your device. We collect this through Google Analytics and Microsoft Clarity, as described in Section 10.
Email you send us, including any data you put in it yourself.
We do not intend to collect data through our website or service about website visitors under the age of 16, unless they have consent from a parent or guardian. However, we cannot verify whether a visitor is over 16.
We therefore encourage parents to be involved in their children’s online activities, to prevent data about children from being collected without parental consent.
If you believe that we have collected personal data about a minor without that consent, please contact us at privacy@viascripta.com and we will delete this information.
5. How We Collect Your Personal Data
We do this in three ways:
1. You provide it yourself: when you create your account, when you make a purchase, and when you email us.
2. Automatically during your visit: technical data through Google Analytics and Microsoft Clarity.
3. Through Stripe: which payments succeeded or failed, so we can keep track of your subscription.
6. How We Use Your Personal Data
We can’t simply use your data as we please. For every processing activity, we must be able to rely on one of the legal bases in the GDPR. In our case, there are three:
To fulfill our agreement. You have an account or a subscription with us, and to make that work, we need your data.
Because the law requires it. For example, the records we have to keep for the Dutch Tax Administration (Belastingdienst).
Because we have a legitimate interest. This applies to improving the website and the coaching. If your interest outweighs ours, your interest takes precedence.
Consent is a fourth legal basis under the GDPR. We use it only for Microsoft Clarity, as described in Section 10.
6.1 Purposes for Which We Will Use Your Personal Data
Below you can see what we use your data for and which legal basis we rely on:
| Purpose | Type of data | Legal basis |
|---|---|---|
| To provide AI writing coaching on the texts you upload | Account data, your texts and the feedback on them | Performance of a contract with you |
| To create and manage your account | Account data | Performance of a contract with you |
| To process your purchase and keep track of your sessions | Account data, payment data, usage data | Performance of a contract with you |
| To email you about your account, your purchase, or an issue | Account data | Performance of a contract with you |
| To improve our website and the coaching | Technical data, usage data | Necessary for our legitimate interests |
| To meet our record-keeping and statutory retention obligations | Account data, payment data | Necessary to comply with a legal obligation |
7. Data Security
We have taken technical and organizational measures to prevent your data from being lost, falling into the wrong hands, or being changed without our knowledge.
ViaScripta is a sole proprietorship. ViaScripta itself and the processors listed below have access to the systems that hold data. The processors process your data only on our instructions and are bound by a confidentiality obligation.
If you think your data is not properly secured, or there are indications of misuse, please contact us at privacy@viascripta.com.
8. Data Retention
We do not keep your data longer than necessary for the purpose for which we have it.
We keep your account, your texts, and the analyses of them for as long as your account exists. If you delete a text or your account, everything connected to it is removed. Within thirty days, your text is removed automatically from the AI service that creates the analysis.
We keep invoices and payment data for seven years. This is a statutory retention obligation set by the Dutch Tax Administration, and it also applies if you delete your account.
We keep email you send us for up to two years after our last contact.
Data from Google Analytics is stored with Google. We keep user-level data there for 14 months, counted from the visitor’s last visit.
Microsoft Clarity keeps recordings of visits for 30 days. Microsoft keeps aggregated data, such as heatmaps, for up to 13 months.
If you have a question about a specific retention period, email privacy@viascripta.com.
9. Your Legal Rights
The GDPR gives you a number of rights over your own data:
Access: you have the right to know what data we have about you and why.
Rectification: if something is incorrect, we correct it.
Erasure: if there is no longer a good reason to keep your data, we delete it. You can delete your texts and your account yourself.
Restriction: you can ask us to temporarily suspend the processing.
Portability: you get your data in a file that you can use elsewhere.
Objection: you can object to what we do with your data.
No decisions based solely on automated processing: you do not have to accept a decision that was made entirely automatically.
Withdrawal of consent: if you have given us consent for something, you can always withdraw it.
If you want to exercise any of the rights above, please contact us at privacy@viascripta.com.
To make sure the request comes from you, we may ask you for identification. We respond to your request as soon as possible, and always within four weeks.
10. Cookies
Our website uses cookies. Cookies are small text files that are stored on your computer, tablet, or smartphone when you visit this website.
Necessary cookies are required for the technical operation of the website and for your convenience. They make sure the website works properly and, for example, remember your preferences. No consent is required for these cookies.
We use analytics cookies through Google Analytics to measure how visitors use our website, so we can improve the site. We do not ask for consent for these cookies, because we have set up Analytics in a privacy-friendly way: we have a data processing agreement with Google, we do not share the data with other Google services, and IP addresses are anonymized. As part of this, Google may process data in the United States, on the basis of the European Commission’s Standard Contractual Clauses.
We also use Microsoft Clarity to see how visitors move around the page, with heatmaps and recordings of visits. We activate Clarity only if you consent to it through our cookie banner. Microsoft acts as our processor in this context and may process data in the United States, on the basis of the European Commission’s Standard Contractual Clauses.
You can change or withdraw your consent at any time through the cookie settings on our website. You can also refuse or delete cookies through your browser settings.
For detailed information about the cookies we use, see our Cookie Policy.
11. Third Parties and Processors
11.1 Third-Party Links
Our website may contain links to third-party websites, plug-ins, and applications. By clicking on these links or enabling these connections, you may allow third parties to collect or share data about you.
We have no control over these third-party websites and are not responsible for their privacy policies. When you leave our website, we recommend that you read the privacy policy of every website you visit.
11.2 Processors
We may use third parties that process personal data on our behalf. These “processors” provide us with services such as:
Strato, for hosting our website and the app
Stripe, for processing payments
Anthropic, for the AI processing of texts you upload
Google Analytics, for analyzing website use
Microsoft Clarity, for heatmaps and recordings of visits
We enter into a data processing agreement with all of these parties to ensure that they handle your data with care and use it only for the agreed purposes.
12. Complaints
If you have a complaint about the processing of your personal data, please contact us first. We will do our best to work with you to find a solution.
However, you always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the Dutch supervisory authority for data protection. You can do so through its website, https://autoriteitpersoonsgegevens.nl/, or by calling +31 88 1805 250.
However, we would appreciate the chance to address your concerns before you contact the Dutch Data Protection Authority, so please contact us first.
