Privacy Policy

Account data. When you sign up (through our sign-in provider, Clerk) we receive your name, email address, and profile details you choose to add.

Creative content. The screenplays you write, prompts you type, images and video you upload (including photos used for actor generation and motion recordings from your phone), and the films, images, and clips you generate.

Payment data. Payments are processed by Stripe. We receive confirmation of what you bought and the last digits of your card for display — never your full card number. Creators who receive payouts complete identity verification directly with Stripe; identity documents go to Stripe, not to us.

Usage data. Standard technical logs (device, browser, pages visited, errors) that keep the service working and help us fix what breaks.

• To provide the service: storing your projects, generating what you ask for, publishing what you choose to publish, and processing purchases, pledges, tickets, and payouts.
• To keep the platform safe: fraud prevention, spend limits, rate limits, and reviewing reported content.
• To communicate with you about your account, purchases, and material changes.
• To send you product news and marketing you can opt out of at any time — every marketing email has an unsubscribe link, and opting out never affects service emails like receipts and security notices.
• To improve the product using aggregate, de-identified usage patterns.

We do not train AI models on your content. When you generate something, the necessary inputs (your prompt, and any reference images or clips you attached) are sent to the third-party AI provider that performs that generation, solely to fulfill your request. Providers process this data under their own terms. Your published films are shown to audiences because you published them — publishing never turns your work into training data for us.

Some features accept photos, video, or audio of real people — for example, reference photos for actor generation or motion recordings from your phone. That material is stored as your content, in your Vault, under your control: delete it and it is removed like any other upload. We do not build or keep biometric identifiers (such as faceprints or voiceprints) from it ourselves; when you request a generation, the media is sent to the AI provider performing that generation solely to fulfill your request, under their terms. Only upload a real person's face or voice with their permission — some places (for example, Illinois) have specific laws about face and voice data, and obtaining that permission is your responsibility as described in the Terms of Service.

• Service providers that run the platform: hosting, database, file storage, sign-in (Clerk), payments (Stripe), error monitoring, and the AI generation providers described above.
• The public — only what you choose to publish: films in the Theater, campaigns on Crowdfund, and your creator display name on them.
• Authorities — if required by law, or to protect users from serious harm.
• A successor business — if Cineriah is ever acquired, merged, or sold, your information transfers with the service to the new operator, who remains bound by this policy until it is changed with notice.

We do not sell your personal information.

Cineriah uses cookies for one job: keeping you signed in. Our sign-in provider sets session cookies that authenticate you as you move around the app; the app also stores working state (like drafts in progress) in your own browser's storage. We do not use third-party advertising cookies or cross-site trackers, and because we don't track you across other sites, browser "Do Not Track" signals don't change anything — there is no tracking to turn off. If we ever add analytics cookies, we will update this policy and give you a choice first. Blocking cookies entirely in your browser will break sign-in. The full list lives in our Cookie Notice.

We keep your content while your account is open so your projects stay yours to return to. If you delete content, it is removed from the product; storage copies and backups clear on their normal cycle. Purchase, payout, and dispute records are retained as long as financial and tax rules require, even after account closure.

Content is stored with access controls; payment flows are handled end-to-end by Stripe; sign-in is handled by Clerk with modern session security. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as the law requires.

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to complain to your local data authority. To exercise any of these, email us — we respond to verified requests within the legally required time. Deleting your account removes your personal data except records we must keep (see Retention).

Our providers operate primarily in the United States. If you use the service from elsewhere, your information is processed in countries that may have different data protection laws than yours; where required, transfers rely on recognized safeguards such as standard contractual clauses.

Cineriah is not for children under 13, and we do not knowingly collect their data. Purchases and payouts require being an adult. If you believe a child is using the service, contact us and we will act.

We will update this policy as the product evolves and give notice of material changes before they take effect. The date at the top always tells you when it last changed.

For any privacy question or to exercise your rights, email support@cineriah.com from the address on your account. We review every message and reply within a few business days.