Privacy Policy

Effective Date: March 15, 2026  |  Last Updated: April 11, 2026

1. Introduction

ParentScript ("we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your data when you use our Service at parentscript.com.

2. Information We Collect

Information you provide directly:

• Account information: Name, email address, and password when you create an account. If you sign up via Google OAuth, we receive your name, email address, and profile picture from Google.
• Child profiles: Name (optional), age, gender, temperament, and any notes you choose to provide about your child. This information is used solely to personalize the advice you receive.
• Queries: The parenting situations you describe and the category you select. These are stored in your account so you can review past advice.
• Payment information: When you subscribe to a paid plan, payment is processed by our payment provider (Stripe). We do not store your credit card number, expiration date, or CVV on our servers.

Information collected automatically:

• Usage data: Pages visited, features used, queries submitted, timestamps.
• Device information: Browser type, operating system, device type.
• IP address: Used for rate limiting and general geographic analytics.
• Cookies: We use essential cookies to maintain your session and remember your login. We do not use advertising or tracking cookies.

3. How We Use Your Information

We use your information to:

• Provide and personalize the Service, including generating AI-powered parenting advice tailored to your child's age, gender, and temperament
• Maintain your account and query history
• Process payments for paid subscriptions
• Send transactional emails (account confirmation, password reset, subscription receipts)
• Improve the Service based on aggregate, anonymized usage patterns
• Ensure security and prevent abuse of the Service

We do NOT:

• Sell your personal information to third parties
• Use your data for advertising purposes
• Share your queries or child information with other users (unless you explicitly use the Share feature)
• Use your personal data to train AI models

4. AI Processing

ParentScript uses Anthropic's Claude AI model to generate parenting advice. When you submit a query, the following data is sent to Anthropic's API:

• Your child's age, gender, and temperament (from their profile)
• The situation you describe in your query

What is NOT sent: your name, email address, payment information, IP address, or any other personally identifying details.

AI training: Your queries and personal data are not used to train Anthropic's AI models. Anthropic's API terms prohibit using customer data for model training. We have a data processing agreement with Anthropic that ensures your data is processed solely to generate your response and is not retained by Anthropic beyond what is necessary for abuse prevention.

Limitations: AI-generated advice is not a substitute for professional medical, psychological, or therapeutic guidance. All responses include disclaimers directing you to qualified professionals when appropriate.

5. Data Sharing

We share your information only in the following limited circumstances:

• AI Provider (Anthropic): Child profile data and situation descriptions for generating advice. No personally identifying information is shared.
• Payment Provider (Stripe): Email address and payment details for processing subscriptions. Stripe's privacy policy applies to payment data.
• Shared Advice Pages: If you choose to share an advice page, a public link is created that displays the advice WITHOUT your child's name or any account information. Only the child's age and gender are shown.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

6. Data Storage and Security

• Your data is stored on servers located in the European Union.
• All data is encrypted in transit (TLS/SSL) and at rest.
• Passwords are hashed using bcrypt and cannot be recovered or viewed by our team.
• Access to production data is restricted to authorized personnel only.
• We perform regular security reviews of our infrastructure.

7. Data Retention

• Account data: Retained as long as your account is active. Deleted within 30 days of account deletion.
• Queries and responses: Retained as long as your account is active. Deleted with your account.
• Child profiles: Retained as long as your account is active. Deleted with your account.
• Payment records: Retained for 7 years as required for tax and accounting purposes.
• Server logs: Retained for 90 days, then automatically deleted.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and all associated data.
• Export: Request a machine-readable export of your data.
• Restriction: Request that we limit how we process your data.
• Objection: Object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us at hello@parentscript.com. We will respond within 30 days.

For EU/EEA Residents (GDPR)

Our legal basis for processing your data is:

• Contract performance: To provide the Service you signed up for.
• Legitimate interest: To improve the Service and ensure security.
• Consent: For optional features like newsletters (if applicable).

You have the right to lodge a complaint with your local data protection authority.

For California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

9. Children's Privacy

ParentScript is a service for parents and legal guardians. The Service is not intended for use by children under 18. We do not knowingly collect personal information from children. The child profile information (name, age, gender) is provided by the parent and is used solely to personalize advice for the parent.

10. Cookies & Analytics

We use only essential cookies required for the Service to function:

• Session cookie: Maintains your login session. Expires when you close your browser or after 30 days.
• CSRF token: Security cookie to prevent cross-site request forgery.

We do not use advertising cookies or third-party tracking cookies.

Analytics: We use Umami, a privacy-focused analytics tool that collects anonymous page view data (pages visited, referrer, browser type, country). Umami does not use cookies, does not collect personal information, and does not track individual users across sessions. All data is aggregated and cannot be linked to any individual.

11. How to Delete Your Data

You can request complete deletion of your account and all associated data (child profiles, queries, diary entries) by emailing hello@parentscript.com with the subject line "Delete my data." We will process your request within 30 days and confirm deletion by email.

12. Third-Party Links

Our Service may contain links to external resources or recommended books. We are not responsible for the privacy practices of external websites.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last Updated" date at the top reflects the most recent revision.

14. Contact

For questions, concerns, or requests regarding your privacy, please contact us:

Email: hello@parentscript.com

Data Protection: For GDPR-related inquiries, please include "Data Protection" in the subject line.