Privacy Policy

1. Overview

This policy explains what data Scora collects and how we use it.

2. Data we collect

• Account data (email, hashed password, and passkey public keys if you add one).
• Content you upload (videos, audio, transcripts).
• Generated outputs.
• Usage data (jobs, plan, credits).
• A random device identifier stored in your browser, used only to keep the free plan fair (free videos are counted per device).
• Payment metadata.
• Mailing-list data (name and email), only if you explicitly opt in through the signup form on our home page. This is separate from your account: you can have one without the other, and unsubscribing does not affect your account.
• Error diagnostics when something breaks (the technical error, the page it happened on, and your account identifier), so we can fix it.

We do not store your card details — payments are handled by Stripe.

3. How we use it

• To provide the Service (transcribe, analyze, and score your videos).
• To manage your account and plan.
• To process payments.
• To send transactional emails (verification, password reset).
• To improve reliability.

4. Service providers (subprocessors)

To deliver the Service we send data to:

• OpenRouter, Groq and Featherless (transcription and transcript analysis) — they receive your video’s audio or transcript, never your account password.
• Google and Replicate (AI music generation and analysis).
• Stripe (payments).
• Purelymail (transactional email: verification, password reset).
• Sentry (error diagnostics).
• Our hosting provider.
• Google (Google Tag Manager) — loads on every page visit to enforce your cookie choice; receives your IP address and user-agent, but sets no cookie unless you accept (see section 5).
• Google (Google Ads, Google Analytics) and Meta (Meta Pixel) — ad-conversion and audience measurement, only if you accept analytics cookies (see section 5).

Our mailing list is not in this list: it runs on our own servers, so your name and email stay with us and are not passed to a third-party newsletter service.

Each processes data only to provide their function.

5. Cookies, local storage, and analytics

We use browser local storage to keep you signed in (auth tokens). This is essential to run the Service and is always on.

With your consent, we use third-party measurement cookies: conversion measurement (how many visitors sign up or subscribe after seeing our ads) by Google Ads and Meta Pixel, and audience measurement (which pages are visited, aggregate usage) by Google Analytics — managed through Google Tag Manager and Google’s tag.

No analytics cookie is set before you choose. We use Google Consent Mode v2: every storage permission starts as denied, so until you click “Accept” no tag may write a cookie or read one, and no advertising identifier is created. Clicking “Decline” keeps them denied.

Separately, we run Umami, a self-hosted analytics tool on our own servers: it counts page views in aggregate without cookies and without personal data (no identifiers, no cross-site tracking), which is why it runs regardless of the banner choice. Nothing is shared with third parties.

To understand how the site is used, Umami may also record anonymised session replays and heatmaps of the public pages and the app interface: where people click, scroll and how they move through a page. Passwords are never captured, and your videos, transcripts and soundtracks are never part of a recording. These recordings stay on our own servers, are used only to improve the product, and are deleted on a rolling basis.

To be precise about what does happen before your choice: the Google Tag Manager container script itself is downloaded from Google when the page loads, so that it can enforce those permissions. Loading it necessarily reveals your IP address and browser user-agent to Google, as any request to any server does. It does not identify you, does not set a cookie, and if you decline it stays permanently blocked from doing so — but we would rather state this plainly than claim nothing at all is loaded.

You can change your choice at any time by clearing this site’s cookies and data in your browser; the banner will then ask again. We use these cookies only to measure ad conversions and aggregate site usage — not to build advertising profiles — and we never sell your data.

6. Data retention

We keep different files for different periods:

• The video you upload is kept for about 1 day (so you can re-run the job without re-uploading), then deleted automatically.
• The finished, scored video is kept for 30 days after completion.
• The soundtrack audio and the analysis report are kept while your account is active, so you can re-download them.

You can delete your account — including all uploads, generated files, and job history — at any time from your account page. Deletion is immediate and also cancels any active subscription.

7. Your rights

Depending on your location (including under the GDPR and Brazil’s LGPD) you may request access to, correction of, or deletion of your personal data. Reach us through our contact form .

8. Security

Passwords are hashed; data is transmitted over HTTPS. No system is 100% secure.

9. Children

Scora is not intended for anyone under 16.

10. International transfers

Your data may be processed outside your country by the providers listed above.

11. Changes

We may update this policy and will post the new date here.

12. Contact

Use our contact form .