Privacy policy

Who we are

CommaSpace ("we", "us") provides an AI-assisted content generation platform. For personal data processed through the platform and this website, the data controller is:

CommaSpace
Rose Farm Studios, Moore, Warrington, United Kingdom
info@scrive.live

This policy is written for users in the United Kingdom and the European Economic Area and reflects the UK GDPR and EU GDPR.

Data we collect

• Account details — name, email address, profile image and the sign-in method you use (email and password, Google or Microsoft).
• Workspace and team data — workspaces you own or join, team member roles, and invitations you send or receive.
• Content you create — inputs and briefs, knowledge base documents and any website addresses you ask us to analyse, brand and tone profiles, generated outputs, translations, versions and approval records.
• Billing records — subscription plan, billing status and payment references. Card details are handled by our payment provider and are never stored by us.
• Support conversations — messages you send through the in-app support assistant and any tickets you raise.
• Technical and usage data — generation and credit usage logs, timestamps, and standard server and security logs such as IP address and browser information.

How we use data, and our lawful bases

• Performance of a contract — creating and running your account and workspaces, generating, translating and storing content, managing credits, and taking payment for your plan.
• Legitimate interests — keeping the service secure and available, preventing abuse, diagnosing faults, responding to support requests, and improving features. We balance these against your rights.
• Legal obligation — retaining invoices and accounting records, and responding to lawful requests.
• Consent — where you opt in to product or marketing emails. You can withdraw consent at any time.

We do not sell personal data, and we do not use your content to train our own models.

Sharing with service providers

We share data with a small number of carefully selected service providers who process it on our behalf, under contract, and only where it is necessary to run CommaSpace:

• Hosting and infrastructure — application hosting, database and file storage.
• Authentication — account sign-in, including optional single sign-on if you choose to use it.
• AI processing — content generation, translation and tone analysis.
• Payments — subscription billing and payment processing.
• Email delivery — account, verification, invitation and notification emails.

These providers are bound by data processing terms and may only use your data to deliver their service to us. We can provide details of our current providers on request — see the contact details below.

We may also disclose data where required by law, or in connection with a business transfer, in which case this policy will continue to apply to your data.

International transfers

Some of these providers process data outside the United Kingdom and the European Economic Area. Where that happens, transfers rely on appropriate safeguards such as UK/EU standard contractual clauses or an adequacy decision.

Retention

We keep account and content data for as long as your account is active. When you close your account, your personal data and the content in your workspaces are deleted or anonymised. Billing and accounting records are kept for as long as required by law, and backups and security logs are cleared on their normal rotation.

Security

Access to your data is restricted to your account and the members of your workspace. Data is encrypted in transit, access to production systems is limited, and permissions are enforced at the database level. No online service can be guaranteed completely secure, so please use a strong, unique password.

Your rights

Subject to the conditions in data protection law, you have the right to access your data, correct it, have it erased, restrict or object to processing, receive a portable copy, and withdraw consent where processing is based on consent.

To exercise any of these rights, email info@scrive.live. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Cookies and local storage

We use only essential cookies and browser storage: your authentication session and small preferences such as your recently used interface settings. We do not use third-party advertising or cross-site tracking cookies. Clearing this storage signs you out.

Children

CommaSpace is a business tool and is not intended for people under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the service develops. The date at the top of the page shows when it was last revised, and material changes will be communicated to account holders by email or in the app.

Related pages

See our legal notice and terms of service.