Privacy Policy

We collect the minimum we need to run the studio — your email, a hashed password, and the films you create — and we don’t sell any of it. Generated content gets sent to third-party AI providers (Anthropic for screenplays, video providers for shots) so they can render it; their privacy terms apply to that processing. Logs are structured + redacted, and we don’t run ad-tracking SDKs.

• Account information. Name, email address, and a bcrypt-hashed password. We never store your password in plaintext.
• Project content. Loglines, scenes, dialogue, character descriptions, and the assets the crew produces (images, video, audio). You own this content — we hold a license to process it for the purpose of delivering the studio to you (see Terms).
• Usage signals. Server-side request logs (structured pino), error events (Sentry, redacted), and provider cost telemetry tied to your account. These never leave the platform’s server-side context.

• Deliver the service. Show you the studio, generate films from your prompts, persist what you make.
• Transactional emails. Welcome email on signup, a film-ready email when your cut renders, and a one-time T+24h onboarding nudge if you didn’t type a logline yet. No marketing list; no newsletter; no growth-hack drip.
• Debugging + telemetry. Sentry error events (redacted) and structured server logs help us notice when something breaks. We don’t run client-side analytics (no GA, no Mixpanel, no Segment).

When you generate a film, your prompts and reference content are transmitted to whichever provider renders the shot. Their privacy policies govern that processing:

• Anthropic — screenplay generation, crew chat, character development (Claude API)
• Video providers — Runway, Kling, Luma, PixVerse, Veo, Seedance, LTX, Wan, Pika (one per shot, configurable)
• fal.ai — Stable Audio (music + SFX + ambient)
• ElevenLabs / OpenAI — voiceover generation
• Replicate — image generation (FLUX), face recognition (InsightFace)
• Resend — transactional email delivery
• Cloudflare R2 — object storage for your generated videos, audio, and images
• Sentry — error monitoring (server-side, with sensitive-field redaction)

We don’t run third-party ad networks, behavioral re-targeting pixels, or selling your data to brokers. We don’t need to — we sell the service, not the audience.

We keep your account and project content until you delete them or your account. Deleted projects are removed from our database; R2 objects associated with deleted projects are scheduled for cleanup. Email logs are retained per our email provider’s standard window (typically 30 days). Sentry events expire on Sentry’s standard retention.

You can delete your account and all associated data at any time from the dashboard. For EU/UK residents (GDPR) and California residents (CCPA), you have additional rights including data portability and the right to know what we’ve collected. Email privacy@cinematech.ai to exercise them.

CinemaTech is not directed at children under 13. We don’t knowingly collect personal information from anyone under 13. If you believe a child has signed up, email privacy@cinematech.ai and we’ll delete the account.

Questions, requests, complaints — privacy@cinematech.ai.