Privacy policy
Last updated: Jul 08, 2026
This Privacy Policy explains how ScriptExpert collects, uses, stores and shares personal data when you visit our website, create an account, purchase or sell a digital product, subscribe to a service, contact customer support or otherwise use the ScriptExpert marketplace.
It also explains the choices and rights available to you under applicable data protection law, including the General Data Protection Regulation.
1. About this policy
ScriptExpert operates an online marketplace through which independent developers, designers and other digital creators can publish and license scripts, applications, templates, plugins, themes, software tools and other digital products.
ScriptExpert also provides certain services directly, including marketplace accounts, payment facilitation, product hosting, customer assistance and subscription-based tools for Authors.
This Privacy Policy applies to personal data processed through:
the ScriptExpert website and marketplace;
customer and Author accounts;
purchases, licences, subscriptions and payouts;
product reviews and support requests;
communications with ScriptExpert;
ScriptExpert applications, plugins and marketplace tools; and
other services that refer to this Privacy Policy.
This policy does not automatically apply to external websites, services or applications operated by Authors or other third parties.
2. Who is responsible for your personal data
The data controller responsible for the personal data processed by ScriptExpert is:
Legal name: Amicii Distral S.R.L
Registered address: Republicii 15, Eforie, Romania
Company registration number: 44857532
VAT number: RO44857532
Privacy email: contact[@]scriptexpert.net
General support: support[@]scriptexpert.net
In this Privacy Policy, “ScriptExpert”, “we”, “us” and “our” refer to the legal entity identified above.
3. The privacy roles of ScriptExpert and Authors
ScriptExpert and the Authors selling products through the marketplace have different responsibilities.
ScriptExpert is generally the data controller for information used to operate the marketplace, manage user accounts, process orders, administer payments and payouts, prevent fraud, provide customer support, manage subscriptions and comply with legal obligations.
When a customer purchases a product from an independent Author, ScriptExpert may provide that Author with limited information necessary to supply the product, confirm the licence, provide support or resolve a complaint.
Authors are generally independent data controllers for the personal data they receive and use for their own purposes. They are responsible for complying with applicable data protection law when handling customer information.
Authors may not use customer information obtained through ScriptExpert for unrelated advertising, data enrichment, sale to third parties or unsolicited marketing unless they have a separate lawful basis and provide all legally required information.
Where ScriptExpert and an Author process personal data under a different legal arrangement, the relevant responsibilities will be explained in the applicable product, service or contractual terms.
4. Personal data we collect
The information we collect depends on how you use ScriptExpert.
Account and identity information
When you register, we may collect your name, username, email address, password in encrypted or hashed form, country, preferred language, account type and profile information.
If you use ScriptExpert for business purposes, we may also collect your company name, business address, registration details, VAT number and professional role.
Customer and transaction information
When you purchase a product or subscription, we may collect information about the product, selected licence, price, currency, billing country, order date, invoice information, payment status, download activity, refund requests and transaction history.
We may also record whether you accepted specific contractual conditions, requested immediate delivery of digital content or acknowledged the consequences for a statutory withdrawal right.
Payment information
Payments may be processed by [name of payment provider or providers].
Complete payment card information is normally entered directly into the systems of the payment provider and is not stored by ScriptExpert. We may receive limited payment information such as the payment status, transaction identifier, card type, expiration date or final digits of the payment card.
This section must be adjusted if ScriptExpert directly collects or stores complete payment card details.
Author verification information
Authors may be required to provide additional information before publishing products or receiving payouts.
This may include:
legal name and date of birth;
residential or business address;
telephone number and email address;
government-issued identification documents;
company registration documents;
tax identification and VAT information;
bank account or payout information;
beneficial ownership information;
confirmation of professional trader status; and
other information required for identity, tax or regulatory verification.
Verification may be performed by ScriptExpert or by a specialist identity or payment service provider.
Product and marketplace content
We process information contained in Author profiles, product listings, product descriptions, screenshots, demonstrations, licence details, documentation, changelogs and uploaded files.
We also process customer reviews, ratings, questions, comments and other marketplace contributions.
Some of this information is public and may be visible to visitors, registered users and search engines.
Communications and support information
When you contact us, we process your message, contact information, order details and any files or technical information included in the communication.
Support requests may include screenshots, error logs, device information, hosting details or other information needed to understand and resolve the issue.
You should not include passwords, payment card details, private encryption keys, production credentials or unnecessary personal data in support messages.
Technical and usage information
When you access ScriptExpert, we may automatically collect:
IP address;
device and browser type;
operating system;
language and regional settings;
pages visited and features used;
referral and destination addresses;
login and account activity;
download and upload events;
approximate location derived from an IP address;
cookie and similar technology identifiers;
diagnostic, performance and error information; and
security and fraud-prevention signals.
We use this information to operate, secure and improve the platform.
Marketing and preference information
We may collect your communication preferences, newsletter subscriptions, cookie choices and interactions with marketing messages.
Where required, promotional communications and non-essential tracking technologies are used only after obtaining appropriate consent.
Fraud and risk information
We may generate or receive information about suspicious transactions, account connections, unusual activity, payment disputes, chargebacks, policy violations, malicious files and other security or financial risks.
These assessments may be based on information from ScriptExpert, payment providers, identity-verification providers, security services and publicly available sources.
5. Information contained in uploaded products
Authors must not upload products containing real customer databases, personal records, live credentials or personal data that is unnecessary for demonstrating or operating the product.
Sample databases and demonstrations should use fictional or properly anonymised information.
Authors are responsible for ensuring that they have a lawful basis to include any personal data in a product, screenshot, demonstration, documentation file or support material.
ScriptExpert may inspect, scan or analyse uploaded files for malware, security risks, intellectual-property violations and compliance with marketplace rules. These checks may be automated or performed manually.
A ScriptExpert product review does not remove the Author’s responsibility for personal data included in their product.
6. How we obtain personal data
Most personal data is provided directly by you when you create an account, place an order, publish a product, request support, submit a review or subscribe to a service.
We may also receive information from:
payment and payout providers;
identity and business-verification services;
Authors and customers involved in a transaction;
authentication providers, where social or third-party login is available;
fraud-prevention and cybersecurity services;
analytics and advertising providers, subject to your choices;
tax authorities and other public bodies;
publicly available company and professional registers; and
referral or affiliate partners.
If you provide personal data about another individual, you must have the right to provide that information and must give them any notice required by law.
7. Why we process personal data
We process personal data only where we have a valid legal basis.
To provide our services and perform a contract
We process information where necessary to create and manage an account, complete an order, provide access to purchased products, administer licences, process an Author subscription, manage payouts and provide customer support.
Without certain information, we may not be able to create an account, complete a transaction or provide a requested service.
To comply with legal obligations
We may process personal data to comply with accounting, tax, payment, consumer-protection, trader-verification, fraud-prevention and regulatory obligations.
Where applicable, this may include collecting and reporting information about Authors and marketplace transactions under national laws implementing European tax-reporting rules or similar legal regimes.
We may also retain information where necessary to respond to lawful requests from courts, tax authorities, regulators or law-enforcement bodies.
For our legitimate interests
We may process personal data where necessary for legitimate business interests, provided those interests are not overridden by your rights and freedoms.
These interests may include:
operating and improving the marketplace;
maintaining the security and integrity of the platform;
preventing fraud, malware and payment abuse;
understanding how services are used;
resolving complaints and contractual disputes;
protecting users and third parties;
enforcing our Terms and Conditions;
establishing, exercising or defending legal claims; and
communicating with existing users about relevant platform matters.
We assess the necessity and impact of this processing before relying on legitimate interests.
Based on consent
We rely on consent where required for optional analytics, advertising cookies, certain marketing communications or another processing activity that is not necessary for the service.
You may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
To protect vital interests
In rare circumstances, personal data may be processed where necessary to protect someone’s life or physical safety.
8. How we use customer information
Customer information is used to register and secure accounts, process purchases, issue invoices, provide product access, maintain licence records and manage refund or support requests.
We may use transaction history and technical information to identify unauthorised access, licence abuse, fraudulent refunds or payment disputes.
We may also use aggregated or anonymised information to understand marketplace demand, improve categories, analyse product performance and develop platform features.
Aggregated or anonymised information that can no longer reasonably identify an individual is not treated as personal data.
9. How we use Author information
Author information is used to verify identity and professional status, review product submissions, publish Author profiles, calculate commissions, administer payouts and communicate about marketplace activity.
We may also process Author information to investigate complaints, intellectual-property reports, security incidents, payment disputes and violations of marketplace rules.
Where required by law, Author identity, contact, transaction and tax information may be reported to competent authorities.
Certain Author information may be displayed publicly, including the Author name, business name, country, profile image, product portfolio, ratings, support information and professional trader status.
Authors should not publish residential addresses, identification documents, personal telephone numbers or other information that they do not intend to make public.
10. Public information
Product listings, Author profiles, reviews, ratings and public comments may be visible without an account.
Public information may be indexed by search engines, copied by third parties or remain visible in cached or archived versions after it has been removed from ScriptExpert.
You should not publish sensitive, confidential or unnecessary personal information in public areas of the marketplace.
Where legally and technically possible, we will remove or correct public personal data following a valid request. We cannot guarantee that copies independently stored by search engines or other third parties will be immediately removed.
11. When information is shared with Authors
When you purchase a third-party product, we may share limited information with its Author.
Depending on the transaction, this may include your name, account username, email address, order identifier, purchase date, selected licence, product version and relevant support communications.
Authors receive only the information reasonably necessary to confirm the purchase, provide the product, validate the licence, deliver promised support or resolve a complaint.
Payment card information is not provided to Authors.
The Author’s own privacy notice may apply to personal data processed independently by that Author. You may contact the Author directly regarding their processing or ask ScriptExpert to help route a privacy request.
12. Other parties with whom we share personal data
We may share personal data with trusted service providers that help us operate ScriptExpert.
These may include providers of:
website and cloud hosting;
content delivery and file storage;
payment processing and Author payouts;
identity and business verification;
email delivery and customer support;
cybersecurity and fraud prevention;
website analytics and performance monitoring;
consent and cookie management;
accounting, tax and invoicing services; and
professional legal, auditing or insurance services.
Service providers may use personal data only according to our instructions and contractual requirements, except where they act as independent controllers under applicable law.
A current list of important service providers may be published at contact[@]scriptexpert.net.
We may also disclose information:
where required by law, a court or a competent authority;
to investigate fraud, cybersecurity incidents or unlawful conduct;
to establish, exercise or defend legal claims;
to protect the rights and safety of users or third parties;
in connection with a merger, acquisition, restructuring, financing or sale of business assets; or
where you have specifically authorised the disclosure.
We do not allow service providers to use personal data for unrelated purposes.
13. Payment providers
Payment and payout providers generally act as independent data controllers for information they require to process transactions, prevent fraud and comply with financial regulations.
Their privacy policies explain how they process payment details, identity information and financial records.
ScriptExpert may exchange information with these providers to verify transactions, issue refunds, manage chargebacks, investigate fraud and reconcile financial records.
You should review the privacy notice of the provider displayed during checkout or Author payout configuration.
14. Cookies and similar technologies
ScriptExpert uses cookies and similar technologies to operate the website, maintain sessions, remember preferences, protect accounts and understand platform performance.
Essential technologies may be used without consent where they are necessary to provide a service requested by the user or to secure the platform.
Optional analytics, personalisation or advertising technologies are used only in accordance with applicable consent requirements.
Where a cookie preference tool is available, you may use it to accept, reject or change your choices.
You can also control cookies through your browser settings. Blocking essential cookies may prevent certain marketplace features from functioning correctly.
More information about the technologies used, their purposes and duration is available in the ScriptExpert Cookie Policy.
15. Marketing communications
We may send administrative messages concerning your account, purchases, security, legal notices, product delivery, subscriptions or important platform changes. These messages are necessary for providing the service and cannot always be disabled while the relevant account or service remains active.
Promotional emails are sent only where permitted by applicable law.
You may unsubscribe from promotional communications by using the unsubscribe link in the message or changing your account preferences.
Unsubscribing from marketing does not prevent us from sending essential transactional or security communications.
We may retain limited information about an opt-out request to ensure that the preference continues to be respected.
16. Analytics and advertising
ScriptExpert may use analytics services to understand traffic, diagnose technical issues and improve website performance.
Where analytics are not strictly necessary, they are activated only in accordance with your cookie preferences and applicable law.
If ScriptExpert uses advertising, retargeting or cross-site measurement services, the relevant technologies and providers will be identified in the Cookie Policy and consent interface.
We do not use optional advertising or analytics cookies where you have rejected them.
17. Fraud prevention and automated analysis
ScriptExpert may use automated systems to identify unusual logins, suspicious payments, malware, duplicated accounts, licence abuse and other activity that may create a security, legal or financial risk.
Automated signals may cause a transaction, download, payout, listing or account to be temporarily restricted while it is reviewed.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless this is permitted by law and appropriate safeguards are provided.
Where applicable, you may request information about a significant automated decision, express your point of view and request human review.
18. International data transfers
ScriptExpert and some of its service providers may process personal data outside the European Economic Area.
Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use safeguards required by applicable law.
These safeguards may include European Commission Standard Contractual Clauses, additional technical and organisational measures or another lawful transfer mechanism.
You may contact us for more information about the safeguards applicable to a particular transfer. Certain commercial or security-sensitive information may be redacted from documents provided in response.
19. How long we retain personal data
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The retention period depends on the nature of the information, the relationship with the user and applicable legal obligations.
Account information is generally retained while the account remains active and for a reasonable period after closure to resolve disputes, prevent fraud and enforce contractual rights.
Order, invoice, commission, payout and tax records are retained for the periods required by applicable accounting and tax law.
Author verification information may be retained while an Author uses the marketplace and for any additional period required by financial, tax, regulatory or fraud-prevention obligations.
Support communications and complaint records are retained for the period necessary to resolve the issue and manage potential legal claims.
Security logs are retained for a limited period determined by their purpose, risk and technical necessity.
Marketing information is retained until consent is withdrawn, an objection is made or the information is no longer required. A minimal suppression record may be kept after an opt-out.
Information may be retained for longer where this is required by law, necessary for ongoing litigation or reasonably required to investigate fraud or security incidents.
When information is no longer needed, it is deleted, anonymised or securely isolated until deletion is technically completed.
20. Account closure and deletion
You may request account closure through your account settings or by contacting ScriptExpert.
Closing an account does not always result in immediate deletion of all associated information.
We may retain transaction, invoice, licence, refund, payout, tax, security and complaint records where this is required by law or necessary to protect legitimate rights.
Public reviews or comments may be anonymised rather than deleted where retaining the content is necessary to preserve the integrity of marketplace discussions.
Products previously purchased by customers may continue to identify the Author where this is necessary to document the licence and transaction.
Before requesting closure, you should download any files, invoices or information you wish to retain.
21. Data security
ScriptExpert uses technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration and disclosure.
These measures may include encrypted communications, access controls, account authentication, restricted administrative access, backups, monitoring, malware scanning and security testing.
No online service can guarantee absolute security. Users are responsible for choosing strong passwords, protecting account credentials and keeping their devices and software secure.
If we become aware of a personal data breach, we will investigate it and notify the competent authority and affected individuals where required by applicable law.
22. Your data protection rights
Depending on the circumstances and applicable law, you may have the right to:
receive information about how your personal data is processed;
request access to personal data held about you;
request correction of inaccurate or incomplete information;
request deletion of personal data;
request restriction of processing;
receive certain information in a portable format;
object to processing based on legitimate interests;
object at any time to direct marketing;
withdraw consent without affecting earlier lawful processing;
request safeguards relating to significant automated decisions; and
submit a complaint to a data protection authority.
These rights are not absolute. A request may be refused or limited where an applicable exception exists, such as a legal record-keeping obligation, the rights of another person or the need to establish or defend a legal claim.
23. How to exercise your rights
Privacy requests may be sent to contact[@]scriptexpert.net.
Please explain the right you wish to exercise and identify the account or information concerned.
We may request reasonable information to verify your identity before disclosing, correcting or deleting personal data. This is intended to protect accounts and prevent unauthorised requests.
We will normally respond within one month. Where a request is complex or several requests have been submitted, the response period may be extended as permitted by law. We will inform you if an extension is necessary.
Requests are normally handled without charge. A reasonable fee may be requested, or a request may be refused, where it is manifestly unfounded or excessive, particularly where it is repetitive.
If your request concerns information controlled independently by an Author, we may direct the request to that Author or provide available contact information.
24. Right to object
You may object to processing based on ScriptExpert’s legitimate interests.
When an objection is received, we will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.
You may object to direct marketing at any time. When you do so, your personal data will no longer be used for that purpose.
25. Children’s privacy
ScriptExpert is not intended for children.
Users must be at least 18 years old or have reached the legal age required to enter into contracts in their country.
We do not knowingly request children to create accounts, purchase products or sell products through the marketplace.
If you believe that a child has provided personal data without appropriate authorisation, contact us so that we can investigate and take appropriate action.
26. External services and Author products
Products available through ScriptExpert may connect to external websites, APIs, hosting services, payment providers, analytics services or other third-party systems.
An Author may also operate a demonstration website or provide support outside ScriptExpert.
Those services are controlled by their respective operators and may collect personal data under separate privacy policies.
ScriptExpert is not responsible for the privacy practices of an external service merely because a product links to or integrates with it.
Before providing personal data to an Author or external service, you should review the relevant privacy information.
27. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal requirements, new platform features, changes to our service providers or changes in the way personal data is processed.
The updated policy will be published on ScriptExpert with a revised “Last updated” date.
Where a change materially affects how personal data is used or your rights, we will provide additional notice where required, such as an account notification or email.
Changes do not retroactively make previously unlawful processing lawful.
28. Complaints
We encourage you to contact ScriptExpert first if you have a concern about the use of your personal data.
You also have the right to submit a complaint to the data protection authority in the country where you live, work or believe that an infringement occurred.
Contacting ScriptExpert does not affect your right to complain directly to a supervisory authority or seek another legal remedy.