Privacy Policy

Account information. When you sign up, we collect your email address, first name, last name, and company name. This is used to identify your account and personalize the app.

Project and production data. Everything you create inside Cineflow — projects, shot lists, storyboards, scripts, calendar events, client contacts, team members, and retainer plans — is stored and associated with your account.

Uploaded files. Project thumbnails, revision videos, and any other files you upload are stored securely in our cloud storage. These files are private to your account unless you explicitly share a review link.

Financial data. Invoice details, client payment information you enter (amounts, line items, payment status), and contract content are stored to support the Finance and Contracts features. We do not process or store credit card numbers — payments are handled externally.

Activity and usage data. We log in-app actions (e.g., project updates, file uploads) to populate your activity feed and help you track your work history. We may also collect basic usage analytics to understand how features are used.

Communications. When we send you a login code, invoice, or contract via email, your email address is passed to our email delivery provider (Resend) for that purpose only.

We use your information only to operate and improve Cineflow:

• Authenticate you and secure your account
• Store and display your production data across devices
• Send transactional emails (login codes, invoices, contracts) on your behalf
• Power AI-assisted features (storyboard and script suggestions) using Anthropic's Claude — your content is sent to Anthropic's API only when you actively use these features
• Improve the product through aggregated, anonymized usage patterns
• Respond to support requests

We do not use your data for advertising, behavioral profiling, or any purpose unrelated to providing Cineflow to you.

We do not sell, rent, or share your personal information with third parties for their own purposes. We work with the following service providers who process data on our behalf:

• Supabase — database, authentication, and file storage (hosted on AWS infrastructure)
• Vercel — application hosting and server-side functions
• Resend — transactional email delivery (login codes, invoices, contracts)
• Anthropic — AI language model for in-app assistant features (only when you use those features)

Each of these providers is bound by their own privacy policies and data processing agreements. We may also disclose information when required by law or to protect the security of our platform.

Your data is stored in Supabase's managed database infrastructure, which runs on Amazon Web Services (AWS) in the United States. All data in transit is encrypted with TLS. Database access is secured with Row Level Security (RLS) policies, meaning your data is only accessible to your account.

Uploaded files are stored in private Supabase Storage buckets. Review links you share with clients use time-limited, token-based access — your underlying files are never publicly exposed.

No security system is perfect, but we take reasonable precautions to protect your information from unauthorized access, disclosure, or loss.

We retain your data for as long as your account is active. If you delete your account, your data is permanently removed from our systems within 30 days, except where we are required by law to retain it longer (e.g., financial records).

Demo accounts created without signing up are automatically deleted after 7 days.

Depending on where you are located, you may have rights including:

• Access. Request a copy of the personal data we hold about you.
• Correction. Update your name or account information at any time in Settings.
• Deletion. Request deletion of your account and all associated data.
• Portability. Request an export of your data in a readable format.
• Objection. Object to certain processing of your data.

To exercise any of these rights, email us at admin@usecineflow.com. We will respond within 30 days.

Cineflow uses minimal cookies and browser storage. We use session storage and local storage to maintain your login session and remember UI preferences (such as sidebar state). We do not use third-party tracking cookies or advertising pixels.

Cineflow is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we'll update the effective date at the top of this page. For significant changes, we'll notify active users by email. Continued use of Cineflow after a policy update constitutes your acceptance of the revised policy.

If you have questions about this policy or how your data is handled, contact us at admin@usecineflow.com.

Maltav Media · Los Angeles, CA