Privacy Policy

This Privacy Policy (“Policy”) describes how Cinelaya (“Cinelaya,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you access or use the Cinelaya web application, desktop application (including the offline “portable” build), APIs, and related services (collectively, the “Service”). By accessing or using the Service you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your information as described herein. If you do not agree, you must not access or use the Service.

1. Scope and Applicability

This Policy applies to information processed by Cinelaya in connection with the cloud-hosted Service. The offline desktop (“portable”) build of Cinelaya is designed to operate on your local device without transmitting project content to our servers. When you use the portable build entirely offline, we do not receive, store, or process your project data. Any features that require connectivity (such as licensing verification, updates, cloud sync, or collaboration) are optional and, when used, are governed by this Policy.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, hashed password, profile picture, and other details you submit during registration or in your account settings.
• Project content: scripts, storydeck cards, breakdowns, schedules, assets, comments, and any other content you create or upload to the cloud-hosted Service.
• Payment information: billing details processed by our third-party payment processors. We do not store full payment card numbers on our servers.
• Communications: messages you send to support, feedback, and related correspondence.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, device identifiers, referral URLs, timestamps, session activity, error logs, and feature usage.
• Cookies and similar technologies: session cookies for authentication and preferences. You may control cookies through your browser, but disabling them may impair the Service.

2.3 Information from Third Parties

We may receive limited information from payment processors, identity verification providers, and analytics providers strictly for the purposes described below.

3. How We Use Your Information

We use collected information to:

• provide, operate, maintain, and improve the Service;
• authenticate users and secure accounts;
• process transactions and manage subscriptions;
• enable collaboration features requested by you;
• respond to support requests and communicate with you;
• monitor performance, diagnose technical issues, and prevent abuse;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use your project content to train machine-learning models without your explicit, opt-in consent.

4. Legal Bases for Processing

Where applicable law (including the EU GDPR and UK GDPR) requires a legal basis for processing, we rely on: (a) performance of a contract with you; (b) your consent, which you may withdraw at any time; (c) our legitimate interests in operating and securing the Service; and (d) compliance with legal obligations.

5. How We Share Information

We share information only as described below:

• Service providers: hosting, storage, payment processing, email delivery, analytics, and security vendors acting on our behalf under confidentiality obligations.
• Collaborators: content you share within a project is visible to users you invite to that project.
• Legal and safety: when required by law, subpoena, court order, or to protect the rights, property, or safety of Cinelaya, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality safeguards.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account at any time, subject to residual retention required by law or for legitimate business purposes (such as fraud prevention, backups, and audit logs).

7. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.

8. International Transfers

We may process and store information in countries other than your country of residence. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal data.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal information; to object to processing; and to withdraw consent. To exercise these rights, contact us using the details in Section 13. We will respond within the time period required by applicable law. We may need to verify your identity before fulfilling your request.

10. Children’s Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing any information.

12. Offline / Portable Build

The portable build of Cinelaya stores your project data locally on your device. You are solely responsible for backing up, encrypting, and safeguarding data stored locally. Cinelaya has no access to, and no responsibility for, data that remains on your device and is not transmitted to the Service. Loss, corruption, or unauthorized access to locally stored data is not the responsibility of Cinelaya.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by updating the effective date above and, where required by law, by additional notice. Your continued use of the Service after such changes constitutes acceptance of the revised Policy.

14. Contact Us

For questions, requests, or complaints regarding this Policy or our privacy practices, contact us at support@cinelaya.com.