Last updated: October 7, 2026 Website: tahastudiolabs.com
This Privacy Policy explains what information TAHA Studio Labs ScriptForge ("ScriptForge," "we," "us") collects, how it is used, and the choices available to you.
ScriptForge is built to collect and retain as little personal data as possible. In particular:
To provide and secure your account and license, we collect:
| Data | Purpose |
|---|---|
| Email address | Account identification, login, communication about your purchase/subscription |
| Authentication credential (securely hashed) | Logging you into your account |
| Subscription/license status | Determining which features you're entitled to use |
| Transaction/license redemption record | Preventing misuse of a single license across multiple users |
We do not collect payment card details directly - these are handled by our payment processor under their own security and compliance standards (see §5).
To understand how many people visit our site, we record a one-way, salted cryptographic hash of your IP address (never the IP address itself), together with a first-seen date, last-seen date, and a running visit count. This is aggregate-only data: the hash cannot be reversed back to an IP address, and it is never linked to your account, email address, or any script or content you create. Only the site owner can view the resulting totals (unique visitor count and total visits); no individual visitor record is ever displayed or exported.
Your saved library ("Save to Library") is stored using your browser's local storage on your own device. This means:
We rely on a small number of third-party services to operate ScriptForge, each of which processes limited data on our behalf:
We do not sell or share your data with advertisers or data brokers.
We use only strictly necessary cookies required for login sessions to function. We do not use tracking or advertising cookies. If this changes in the future, we will update this policy and request your consent before any such cookies are set.
Depending on your location, you may have the right to:
To exercise any of these rights, contact us at [email protected]. Because we hold very little data about you, most requests can be fulfilled quickly.
We retain your account, authentication, and subscription data for as long as your account is active. If you request account deletion, we will remove your email, credentials, and subscription records within [30] days, except where our payment provider is required to retain transaction records for tax or legal purposes independently of us.
We use industry-standard practices to protect the limited data we hold, including encrypted connections (HTTPS), secure credential storage, and restricted internal access. No system is perfectly secure, but our architecture is deliberately designed so that even in the event of a breach, no script content or API keys could be exposed from storage, since we never write them to a database, file, or log - the only point at which either value exists on our servers is in memory, in transit, for the single "Format" request that uses it.
We may update this policy from time to time. Material changes will be reflected with an updated "Last updated" date at the top of this page.
Questions about this policy or your data can be sent to: [email protected]
This section applies only to businesses that TAHA Studio Labs has invited to its Growth Department service at tahastudiolabs.com/grow/. Everything above about ScriptForge still applies to ScriptForge itself.
Who is responsible. TAHA Studio Labs, Örebro, Sweden. Contact: [email protected].
What we collect. Your business profile (company name, website, location, product or service, target audience, brand voice, unique selling point, offers, competitors, customer reviews, brand words, campaign language), the pictures, founder story, FAQs and previous posts you upload, your email address, the language you choose, your consent record and the status of our work. We also keep the marketing strategy (Business Brain) and campaigns we create from it.
Why, and on what basis. To create your marketing strategy and campaign content, which is the service you asked for. We ask for your consent before you can enter anything, and the work is also covered by our agreement with you, including a data processing agreement (personuppgiftsbiträdesavtal) signed separately.
AI providers. To create content, your material is sent to third-party AI providers, for example Anthropic and Google, through our own ScriptForge tool at the moment we create your strategy or campaign. It passes through our server only for that request and is not stored there. These providers may process it outside the EU, for example in the USA, under their own data protection terms. We do not send them more than the work needs.
Where it is stored. Your profile, files, strategy and campaigns are stored with Cloudflare in the EU (EU jurisdiction for both the database and the file storage). Files are stored under random names and can only be opened by you or by TAHA Studio Labs while signed in. Login and notification emails are sent through Google Gmail and contain only your name and a link.
Customer reviews. Reviews you share may contain your customers' names. By sharing them you confirm that you have the right to do so.
How long we keep it. For as long as we work together, and 6 months after we stop working together. Then everything is deleted: your records in our database and every file you uploaded. Only an anonymous line remains that shows that a deletion happened and when.
Your rights. You can ask for a copy of everything we hold about you (we send it as one file), ask us to correct it, ask us to delete everything at any time, and withdraw your consent at any time. Email [email protected]. You can also complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), imy.se.
Campaign pages, counting and enquiries. When we publish a campaign page for you at tahastudiolabs.com/go/, we count visits and button clicks on it without cookies and without storing anyone's IP address: a random value that changes every day is used only to count unique visitors, and raw counting data is deleted after 90 days (daily totals that identify no one are kept while we work together). If the page has an enquiry form, people who use it give their name, a phone number or email address and a message. For those enquiries your business is the controller and TAHA Studio Labs is the processor, under an annex to our data processing agreement; each page carries its own privacy notice saying so. Enquiries are stored with Cloudflare in the EU, shown only to you (and to TAHA Studio Labs to run the service), and deleted 90 days after the offer ends. Pages are taken down 30 days after the offer ends, and at once if we stop working together.
Video clips. You can upload short video clips (MP4 or MOV, 60 seconds and 200 MB at most, up to 10) of your place, staff or products. They are stored in the EU with your other files, used only by TAHA Studio Labs to edit your content, and never sent to AI services: the AI only sees their file names. We read a clip's length from its file to check the limit and do not process it in any other way. If other people appear in a clip, you confirm that they have agreed to it. Clips are covered by export and deletion like everything else.
Language review. Campaign texts in Swedish or Spanish may be checked by a named language specialist for that language, working for TAHA Studio Labs, under a confidentiality and data processing agreement with us. They see only the texts to check, your brand voice and your words to use and avoid, never your profile, uploads or other clients. Every view and edit is logged, and these records are covered by export and deletion like everything else.
Cookies. One strictly necessary login cookie for the portal, valid 30 days. No tracking or advertising cookies.
Det här avsnittet gäller bara företag som TAHA Studio Labs har bjudit in till tjänsten Growth Department på tahastudiolabs.com/grow/.
Vem som ansvarar. TAHA Studio Labs, Örebro. Kontakt: [email protected].
Vad vi samlar in. Din företagsprofil (företagsnamn, webbplats, ort, produkt eller tjänst, målgrupp, varumärkesröst, unikt säljargument, erbjudanden, konkurrenter, kundomdömen, varumärkesord, kampanjspråk), bilderna, grundarens berättelse, vanliga frågor och tidigare inlägg som du laddar upp, din e-postadress, ditt valda språk, ditt samtycke och status för vårt arbete. Vi sparar också marknadsstrategin (Business Brain) och de kampanjer vi tar fram utifrån den.
Varför, och med vilket stöd. För att ta fram din marknadsstrategi och ditt kampanjinnehåll, alltså den tjänst du har beställt. Vi ber om ditt samtycke innan du kan fylla i något, och arbetet omfattas också av vårt avtal med dig, inklusive ett personuppgiftsbiträdesavtal som skrivs under separat.
AI-leverantörer. För att skapa innehåll skickas ditt material till externa AI-leverantörer, till exempel Anthropic och Google, via vårt eget verktyg ScriptForge när vi tar fram din strategi eller kampanj. Det passerar vår server bara för den förfrågan och sparas inte där. Leverantörerna kan behandla det utanför EU, till exempel i USA, enligt sina egna dataskyddsvillkor. Vi skickar inte mer än arbetet kräver.
Var det lagras. Din profil, dina filer, din strategi och dina kampanjer lagras hos Cloudflare inom EU (EU-jurisdiktion för både databasen och fillagringen). Filerna sparas under slumpade namn och kan bara öppnas av dig eller av TAHA Studio Labs efter inloggning. Inloggnings- och aviseringsmejl skickas via Google Gmail och innehåller bara ditt namn och en länk.
Kundomdömen. Omdömen du delar kan innehålla dina kunders namn. Genom att dela dem intygar du att du har rätt att göra det.
Hur länge vi sparar. Så länge vi arbetar tillsammans och 6 månader efter att samarbetet avslutats. Därefter raderas allt: dina uppgifter i databasen och alla filer du laddat upp. Kvar finns bara en anonym rad som visar att en radering skett och när.
Dina rättigheter. Du kan begära en kopia av allt vi har om dig (vi skickar den som en fil), be oss rätta uppgifter, be oss radera allt när som helst och ta tillbaka ditt samtycke när som helst. Mejla [email protected]. Du kan också klaga hos Integritetsskyddsmyndigheten (IMY), imy.se.
Kampanjsidor, besöksräkning och förfrågningar. När vi publicerar en kampanjsida åt dig på tahastudiolabs.com/go/ räknar vi besök och knapptryck utan kakor och utan att spara någons IP-adress: ett slumpat värde som byts varje dygn används bara för att räkna unika besökare, och rådata raderas efter 90 dagar (dagliga summor som inte kan kopplas till någon sparas så länge vi arbetar tillsammans). Om sidan har ett formulär lämnar den som använder det sitt namn, ett telefonnummer eller en e-postadress och ett meddelande. För de förfrågningarna är ditt företag personuppgiftsansvarigt och TAHA Studio Labs personuppgiftsbiträde, enligt en bilaga till vårt personuppgiftsbiträdesavtal; varje sida har en egen integritetstext som säger detta. Förfrågningarna lagras hos Cloudflare inom EU, visas bara för dig (och för TAHA Studio Labs för att driva tjänsten) och raderas 90 dagar efter att erbjudandet har slutat. Sidor tas ner 30 dagar efter att erbjudandet har slutat, och direkt om vi slutar arbeta tillsammans.
Videoklipp. Du kan ladda upp korta videoklipp (MP4 eller MOV, högst 60 sekunder och 200 MB, upp till 10) från din verksamhet, personal eller dina produkter. De lagras inom EU med dina andra filer, används bara av TAHA Studio Labs för att redigera ditt innehåll och skickas aldrig till AI-tjänster: AI:n ser bara filnamnen. Vi läser klippets längd ur filen för att kontrollera gränsen och behandlar det inte på något annat sätt. Syns andra personer i ett klipp intygar du att de har gått med på det. Klippen omfattas av export och radering som allt annat.
Språkgranskning. Kampanjtexter på svenska eller spanska kan granskas av en namngiven språkspecialist för det språket som arbetar för TAHA Studio Labs, enligt ett sekretess- och personuppgiftsbiträdesavtal med oss. Hen ser bara texterna som ska granskas, din varumärkesröst och dina ord att använda och undvika, aldrig din profil, dina uppladdningar eller andra kunder. Varje visning och ändring loggas, och uppgifterna omfattas av export och radering som allt annat.
Kakor. En nödvändig inloggningskaka för portalen, giltig i 30 dagar. Inga spårnings- eller reklamkakor.