Privacy Policy

AI Experiments ("we," "us," or "our") operates MovieMaker, an AI-powered film production platform. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services (collectively, "the Service").

1. Information We Collect

Information You Provide

• Account data: name, email address, and password when you register
• Waitlist data: name, email, and role/occupation when you join the waitlist
• Payment data: billing address and payment method details, processed by our payment provider (we do not store full card numbers)
• Creative content: screenplays, character descriptions, prompts, and any reference images you upload
• Communications: messages you send to us via email or support channels

Information Collected Automatically

• Usage data: pages visited, features used, session duration, and interaction patterns
• Device data: browser type, operating system, device type, screen resolution, and language preferences
• Network data: IP address, approximate location (country/region), and referring URL
• Cookies: see our Cookie Policy for details

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your creative inputs through AI models to generate content
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password resets, billing receipts)
• Send product updates and early access notifications (you can opt out at any time)
• Analyze usage patterns to improve performance and user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. AI Processing and Your Content

When you use MovieMaker to create films, your prompts and creative inputs are sent to third-party AI providers for processing. These providers process your data solely to generate the requested outputs and do not retain your inputs or outputs beyond the processing session, except as required for abuse prevention and safety monitoring.

We do not use your creative content to train AI models unless you explicitly opt in to a training program. Your screenplays, characters, and generated films remain yours.

AI-generated content may be temporarily cached on our servers to improve performance. This cache is automatically purged and is not used for any purpose other than delivering the Service.

4. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

• AI providers: creative inputs are sent to AI model providers to generate outputs (images, video, audio, music)
• Payment processors: billing information is shared with our payment provider to process transactions
• Infrastructure providers: data is stored and processed using cloud hosting services
• Analytics services: anonymized usage data may be shared with analytics providers
• Legal compliance: we may disclose information when required by law, regulation, or legal process
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

5. Data Storage and Security

Your data is stored on servers provided by Supabase and Vercel, with infrastructure located in regions that may include the United States, European Union, and Asia-Pacific. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security policies on database tables
• Secure authentication with hashed passwords and token-based sessions
• Regular access reviews and least-privilege principles

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. Creative content (screenplays, generated images and videos) is retained until you delete it or close your account.

Waitlist data is retained until you are onboarded or request removal. After account deletion, we may retain certain data for up to 90 days for backup purposes, and indefinitely where required for legal compliance, fraud prevention, or dispute resolution.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data (subject to legal retention requirements)
• Export your data in a portable format
• Restrict or object to certain processing activities
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us. We will respond within 30 days.

8. International Data Transfers

If you are located outside India, your data may be transferred to and processed in India or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notification. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact

For questions or concerns about this Privacy Policy, contact us.