Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Account info: name, email, password (hashed), profile photo.
• Payment info: handled by Stripe — we never store full card numbers. We retain the last four digits and card brand for receipts.
• Usage data: pages visited, features used, credit transactions, AI prompts submitted.
• Content you create: scripts, screenplays, characters, generated images, generated videos.
• Device info: browser type, IP address, operating system.

2. How We Use Your Information

• To provide and improve the service.
• To process payments and manage subscriptions.
• To send transactional emails (password resets, receipts, monthly credit grants).
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

3. Third Parties We Share With

We share limited data with the following service providers, each bound by their own privacy commitments:

• Stripe — payment processing.
• Mux — video streaming and analytics.
• Resend — transactional email delivery.
• Supabase — database and file storage.
• OpenAI, Anthropic, Google, Runway, Luma, Pika, Stability, ElevenLabs — AI model providers. Your prompts may be sent to these providers to generate content.

We do not sell your personal information.

4. Your Rights

Depending on your jurisdiction (CCPA, GDPR, etc.), you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your data.
• Opt out of certain processing.
• Port your data to another service.

To exercise these rights, contact us at privacy@cinelity.com.

5. Data Retention

We retain account data for as long as your account is active. After deletion, we may retain aggregated and anonymised analytics indefinitely. Payment records are retained as required by tax and accounting law (typically 7 years).

6. Security

We use industry-standard encryption (TLS in transit, AES at rest for sensitive fields) and follow the principle of least privilege for internal data access. No system is perfectly secure — please use a strong unique password and enable 2FA when available.

7. Children

Cinelity is not intended for users under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have, please contact privacy@cinelity.com.

8. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified by email and announced on this page. Continued use after a change constitutes acceptance.

9. Contact

Questions? Email privacy@cinelity.com.