Legal

Privacy Policy

Last updated April 03, 2026

About this service

Scribbl is an AI-powered field sales assistant. Our product, Bev, helps field sales representatives prepare for account visits, capture notes by voice after visits, and track follow-ups — all from a mobile app designed for on-the-road use. Scribbl is operated by Scribbl, Inc., a Delaware corporation.

Overview

Summary of Key Points

This summary provides key points from our Privacy Notice. Use the table of contents to find any section in full.

What we collect

Personal information you provide when registering or using the Services, plus automatically collected usage and device data.

Sensitive data

We do not process sensitive personal information.

Third parties

We do not collect information from third parties.

Data sales

We have not sold or shared personal information with third parties for commercial purposes.

Security

We use industry-standard organizational and technical measures. No system is 100% secure.

Your rights

Depending on your location, you may review, change, or request deletion of your data at any time.

To exercise your rights, submit a data subject access request or email hello@myscribbl.com.

Section 1

What Information Do We Collect?

This Privacy Notice applies to MyScribbl, Inc. (“we,” “us,” or “our”) and describes how we collect, store, use, and share your personal information when you use our Services, including when you visit https://myscribbl.com, use our mobile application (Scribbl), or engage with us in related ways.

Personal information you provide

We collect personal information that you voluntarily provide when you register, express interest in our products, or contact us. This may include:

  • Names
  • Phone numbers
  • Email addresses
  • Job titles
  • Usernames and passwords
  • Billing addresses
  • Debit/credit card numbers (handled by our payment processor)

Sensitive information: We do not process sensitive personal information.

Payment data

We may collect data necessary to process your payment. All payment data is handled and stored by Stripe. You may find their privacy notice at stripe.com/privacy.

Social media login data

If you register using a social media account (e.g., Google), we will receive certain profile information from that provider, as described in Section 6.

Application data

If you use our mobile application, we may collect the following with your permission:

  • Mobile device access — calendar, contacts, reminders, SMS messages, camera, and microphone. You can change permissions in your device settings at any time.
  • Push notifications — we may request permission to send push notifications about your account. You can opt out in your device settings.

Information collected automatically

When you use or navigate our Services, we automatically collect certain information — including IP address, browser and device characteristics, operating system, location, and usage data. This is used primarily for security, operation, and internal analytics.

  • Log and usage data — IP address, device info, browser type, pages visited, timestamps, and feature usage.
  • Device data — hardware model, OS, mobile carrier, and configuration.
  • Location data — device location via GPS or IP. You can disable this in your device settings, though some features may be affected.

We also collect information through cookies and similar technologies. See Section 4 for details.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Section 2

How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with law. We may also process your information for other purposes with your consent.

  • Account creation and authentication — to create and maintain your account.
  • Delivery of services — to provide you with the requested service.
  • User support — to respond to inquiries and resolve issues.
  • Administrative communications — to send details about products, services, and policy changes.
  • Feedback requests — to contact you about your use of our Services.
  • Security and fraud prevention — to keep our Services safe and secure.
  • Product improvement — to identify usage trends and improve the experience.
  • Legal compliance — to respond to legal requests and exercise our legal rights.

Section 3

When and With Whom Do We Share Your Information?

We may share information in specific situations:

  • Business transfers — in connection with a merger, sale, financing, or acquisition of all or part of our business.
  • Google Maps Platform APIs — we may share information with Google Maps Platform APIs (e.g., Google Maps API, Places API) to provide location-based features. Google Maps uses GPS, Wi-Fi, and cell towers to estimate location. You may revoke consent at any time by contacting us.

Section 4

Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies (web beacons, pixels) to gather information when you interact with our Services. These help maintain security, prevent crashes, save preferences, and support basic site functions.

We also permit third parties and service providers to use tracking technologies for analytics. To the extent these are considered a “sale” or “sharing” under applicable US state laws, you may opt out as described in Section 12.

Google Analytics

We may share information with Google Analytics to track and analyze use of the Services. To opt out, visit https://tools.google.com/dlpage/gaoptout. For more, see the Google Privacy & Terms page.

Section 5

Do We Offer AI-Based Products?

Yes. We offer products, features, and tools powered by artificial intelligence, machine learning, and similar technologies (collectively, “AI Products”). The terms in this Privacy Notice govern your use of the AI Products within our Services.

AI service providers

We provide AI Products through third-party service providers, including Microsoft Azure AI. Your input, output, and personal information may be shared with and processed by these providers to enable your use of our AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI service provider.

Our AI products include

  • AI applications and bots (Bev)
  • AI document and note generation
  • Natural language processing
  • AI insights and automation

All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with third-party providers.

Section 6

How Do We Handle Your Social Logins?

Our Services offer the ability to register and log in using third-party social media accounts (e.g., Google). When you do this, we receive certain profile information from your social media provider — which may include your name, email address, and profile picture.

We use this information only for the purposes described in this Privacy Notice. We are not responsible for other uses of your information by the third-party provider. We recommend reviewing their privacy policy.

Section 7

How Long Do We Keep Your Information?

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required by law (e.g., tax, accounting, or legal requirements). We will not keep your personal information longer than the period in which you have an active account with us.

When we have no ongoing legitimate business need to process your information, we will delete or anonymize it. If deletion is not immediately possible (e.g., data stored in backup archives), we will securely isolate it until deletion is possible.

Section 8

How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures to protect the security of personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed 100% secure. We cannot promise that hackers or unauthorized third parties will never defeat our security. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

Section 9

Do We Collect Information from Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 years old.

If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at hello@myscribbl.com.

Section 10

What Are Your Privacy Rights?

You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing consent

If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time by contacting us using the details in Section 15. This will not affect the lawfulness of any processing before withdrawal.

Account information

To review or change your account information, or to terminate your account, you may:

  • Contact us using the contact information provided.
  • Log in to your account settings and update your user account.

Upon a request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information to prevent fraud, troubleshoot problems, assist with investigations, or comply with legal requirements.

Cookies

Most browsers accept cookies by default. You can set your browser to remove or reject cookies, though this may affect certain Services features.

For questions about your privacy rights, email hello@myscribbl.com.

Section 11

Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. There is currently no uniform technology standard for recognizing and implementing DNT signals. We do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this Privacy Notice accordingly.

California law requires us to disclose how we respond to DNT signals. Because no industry or legal standard currently exists, we do not respond to them.

Section 12

Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to, correct, copy, or delete your personal information, and to withdraw consent to our processing.

Categories of personal information we collect

CategoryExamplesCollected
A. IdentifiersName, email address, phone number, account nameYES
B. California Customer RecordsName, contact info, financial infoNO
C. Protected classificationsGender, age, race, marital statusNO
D. Commercial informationTransaction info, purchase historyNO
E. Biometric informationFingerprints and voiceprintsNO
F. Internet / network activityBrowsing history, interactions with ServicesNO
G. Geolocation dataDevice locationNO
H. Audio / sensory informationImages, audio, videoNO
I. Professional / employmentJob title, work historyNO
J. Education informationStudent recordsNO
K. InferencesProfiles drawn from collected dataNO
L. Sensitive personal informationNO

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information belonging to website visitors, users, and other consumers.

Your rights

  • Right to know whether or not we are processing your personal data
  • Right to access your personal data
  • Right to correct inaccuracies in your personal data
  • Right to request deletion of your personal data
  • Right to obtain a copy of personal data you previously shared with us
  • Right to non-discrimination for exercising your rights
  • Right to opt out of targeted advertising, data sales, or profiling
  • Right to limit use and disclosure of sensitive personal data (California)
  • Right to opt out of voice or facial recognition data collection (Florida)

How to exercise your rights

Submit a data subject access request or email us at hello@myscribbl.com.

Request verification

Upon receiving your request, we will need to verify your identity. We will use only the personal information in your request to do so. We may request additional information for security or fraud-prevention purposes.

Appeals

If we decline to take action on your request, you may appeal by emailing hello@myscribbl.com. If your appeal is denied, you may submit a complaint to your state attorney general.

Section 13

Google User Data (OAuth)

Data accessed

If you connect your Google account, Google may provide us with the following data depending on the permissions you grant:

  • Basic account information: name, email address, profile photo, and Google account identifier.
  • Google Calendar data: list of calendars and events (title, start/end time, timezone, location, description, attendees, reminders, recurrence, and organizer).
  • OAuth credentials: access tokens and refresh tokens used to maintain your connection.

Data usage

We use Google user data only to:

  • Sign you in and link your Google account to your Scribbl account.
  • Display calendar information inside the Services.
  • If you grant write permissions, create, update, or delete calendar events at your direction.
  • Maintain security, prevent fraud, troubleshoot, and improve reliability.

Data sharing

  • We do not sell Google user data.
  • We do not share Google user data with third parties for advertising.
  • We may share limited Google user data with service providers that help us operate the Services (hosting, database, monitoring), only as necessary and under confidentiality obligations.
  • If AI features are used, we do not send Google Calendar data to AI providers unless you explicitly use a feature that requires it, and we only send the minimum necessary data.

Data storage & protection

We store Google user data and OAuth tokens using encryption in transit (TLS/HTTPS), encryption at rest where applicable, least-privilege access controls, and monitoring to prevent unauthorized access.

Data retention & deletion

We retain Google user data only while your account is active and the Google integration is enabled. You may request deletion or disconnection by emailing hello@myscribbl.com. Upon verified request, we will delete stored Google OAuth tokens and integration data from active systems within 45 days. Limited data may remain in backups for up to 90 days before deletion.

Limited use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Section 14

Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated “Revised” date at the top of this Privacy Notice. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. We encourage you to review this Privacy Notice periodically.

Section 15

How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact us by post or email:

MyScribbl, Inc.

1522 Western Ave Ste 24320

Seattle, WA 98101

United States

hello@myscribbl.com