Privacy Policy
Last updated: [FILL DATE BEFORE LAUNCH]
This policy explains what CineForge collects and why. The short version: we collect what the product needs to work, biometric data only with explicit consent for your own avatar, we never sell your data, and you can delete it.
1. What we collect
Account data: your email address, display name and password (stored as a salted scrypt hash — never in plain text).
Content you provide: screenplays, prompts, product descriptions, uploaded images, and the media generated for you.
Avatar biometric data — only with your explicit consent: face photos, a transient liveness-verification video (analyzed and immediately deleted), and voice recordings used to build your personal voice model.
Billing data: your credit ledger and Stripe transaction references. Card details are handled entirely by Stripe and never touch our servers.
We use a single session cookie for sign-in. We do not run advertising trackers.
2. How we use it
To operate the Service: generating your media, maintaining your library, charging credits, and preventing abuse (rate limiting, moderation logs).
We do not sell your data. We do not use your biometric data for anything except generating YOUR avatar and voice.
3. Processors we share data with
Generation requests are sent to the AI providers required for the job: Anthropic (script analysis, planning, moderation), fal.ai and Replicate (image/video/music generation — including avatar photos for portrait generation), and ElevenLabs (speech synthesis and voice cloning — including your voice samples when you request a clone). Stripe processes payments. Each provider processes data under its own terms; we send only what the requested generation needs.
If S3-compatible archival is configured, rendered media is also stored in that bucket ([NAME YOUR STORAGE PROVIDER HERE IF USED]).
4. Retention and deletion
Your projects and generated media are retained while your account is active. Liveness captures are deleted immediately after analysis.
"Delete My Avatar" permanently removes the avatar's photos, voice samples, generated portraits and videos from our storage and deletes the associated voice model at the provider where applicable.
To delete your whole account and its data, contact [SUPPORT EMAIL]; we complete verified deletion requests within 30 days, except records we must keep for accounting (e.g. payment ledger entries).
5. Your rights
Depending on where you live (e.g. GDPR, CCPA, PDPA), you may have rights to access, correct, export or delete your personal data, and to withdraw consent for biometric processing at any time (withdrawal disables the avatar feature and triggers deletion of the biometric data). Exercise any of these by writing to [SUPPORT EMAIL].
6. Security
Sessions use HttpOnly Secure cookies; passwords are scrypt-hashed; access to avatar media is restricted to the owning account; admin actions are logged. No system is perfectly secure — if we learn of a breach affecting your data we will notify you as required by law.
7. Changes and contact
We will announce material changes to this policy on the site. Data controller: [YOUR LEGAL NAME / ENTITY], [CITY, COUNTRY]. Contact: [SUPPORT EMAIL].