privacy, in plain english.

scrub is made by scrub Labs, a company in the united states. when this page says we, that's who. write to privacy@getscrub.dev about anything here.

• your waitlist email, and the optional note about what you're building.
• the messages you send to the api, once it ships, and the decisions we return.
• basic request logs: ip, user agent, path, timestamp. our host keeps these on its normal rolling window.

two things. to answer the request: we read the message, decide, and send the decision back. to make scrub better: messages and decisions go into the review sets, rules, and models we improve over time, so scrub gets better at the slang and edge cases your users actually write.

that's it. we don't use your content for anything else.

• sell your data. to anyone, for any reason.
• share it for advertising. there are no ad partners.
• hand it to third parties, except the two providers that run the service (§07).
• track you on this site. no analytics cookies, no pixels.

• waitlist email: until you ask us to remove it, or about 30 days after launch.
• api messages and decisions: up to 90 days for the improvement work in §03, then deleted. rules and examples we've already learned from them stay.
• request logs: our host's default window.

• see, correct, or export what we hold on you. email us.
• delete it. we do this within 30 days, and tell you if anything has to stay for legal or billing reasons.
• opt out of improvement use. at launch this is a setting on your account. until then, email us and we'll flag your keys.

if you're in the eu, uk, or california you have extra rights under gdpr and ccpa. same email, and we answer within the legal window.

two providers, both bound to terms at least as strict as this page: an edge hosting platform that runs the site and the api close to your users, and convex, the database where waitlist signups live. if that list grows, we'll say so here first.

encrypted in transit and at rest. keys hashed. access to content limited to the small team doing the improvement work, and logged. the details are on the security page.

• children. scrub is sold to companies, not people. we don't knowingly collect data from anyone under 16, and we delete it if we learn we have.
• where it lives. we're hosted in the us. if you're in the eu or uk, your data crosses the atlantic under standard contractual clauses.
• changes. we update this page and email anyone affected. previous versions on request.
• contact. privacy@getscrub.dev for privacy, hi@getscrub.dev for everything else.