Privacy Policy

1. Introduction

Diffsome Inc. ("we", "us", or "our") operates the Scribeling service at scribeling.com ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and organization details when you register
• Payment Information: Billing address and payment details processed through our payment providers (Toss Payments, Stripe)
• Content: Text, images, files, and other materials you upload or create through the Service
• Communications: Messages sent through live chat, support requests, and feedback
• Form Submissions: Data submitted through forms you or your end users fill out

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, and interaction patterns
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies: Session cookies, authentication tokens, and preference cookies

2.3 Information from Third Parties

• Social Login: Profile information from Google, Kakao, Naver, Instagram, or Facebook when you use social authentication
• Payment Processors: Transaction status and payment confirmations from Toss Payments and Stripe

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related notifications
• Create and manage your account and tenant environment
• Send administrative information, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats
• Power AI features including content generation and recommendations
• Comply with legal obligations

4. Data Isolation (Multi-Tenancy)

Scribeling operates on a multi-tenant architecture. Each tenant's data is logically isolated:

• Your tenant data is accessible only within your tenant environment
• Other tenants cannot access your data
• File storage is isolated per tenant
• We maintain strict access controls to prevent cross-tenant data access

5. AI and Data Processing

Our Service uses artificial intelligence (powered by third-party AI providers) to provide features such as content generation and smart recommendations. When using AI features:

• Content you submit to AI features may be processed by third-party AI providers
• We do not use your content to train AI models
• AI-processed data is subject to the same security measures as other data

Connected AI accounts (ChatGPT)

Some features run on an AI subscription you connect yourself (for example, logging in to ChatGPT via our Codex Connect page). When you connect an account:

• We store the login session needed to run generation on your plan — never your password
• The session is used only to generate content you (or integrations you configured) request
• Your prompts and generated content are processed by the connected provider under that provider's own terms and privacy policy
• You can disconnect at any time from your dashboard, which removes the stored session

WordPress plugin and other integrations

If you use our WordPress plugin (Scribeling AI Writer) or similar integrations, we receive the data those integrations send in order to fulfil your request: the topics and instructions you type, paragraph text you ask to rewrite, source URLs you paste, and your site's API credentials for authentication. Generated articles are returned to your own site; we do not publish them elsewhere.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist in operating our Service (payment processing, email delivery, cloud hosting, analytics)
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets
• Protection: To protect the rights, property, or safety of Diffsome, our users, or the public
• With Your Consent: When you have given explicit consent to share your information

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze Service usage and performance

You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of the Service.

8. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL)
• Secure authentication with hashed passwords
• Regular security assessments and monitoring
• Access controls and audit logging

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account termination, we may retain certain data for a reasonable period to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain backups for disaster recovery

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

12. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Diffsome Inc.
Email: [email protected]
Website: scribeling.com