Version 7.3. 30 October 2026
In plain English first.
CineMe Ltd, registered in England and Wales, company number 17109388, registered office 167-169 Great Portland Street, 5th Floor, London W1W 5PF, VAT number GB525722495. We are the controller of the personal information described in this notice, and we are registered with the Information Commissioner's Office (ZC114630). This notice covers our website, cineme.ai, and our platform, client.cineme.ai. It replaces our earlier Website Privacy Policy, Platform Privacy Notice and Cookies Policy.
Email ops@cineme.ai or phone the CineMe Office on 020 8068 6820, open from 8am to 10pm UK time every day, including weekends. Post: CineMe Ltd at the address above. You can also complain to the Information Commissioner's Office at ico.org.uk.
| What | Examples |
|---|---|
| Account details | Name, email address, username, your confirmation that you are 18 or over, your marketing choice, and a record of each set of terms you accept (the version, the time and the internet address). |
| Your content | Scripts, treatments, documents, images, reference photographs and notes you upload. These may include information about other people. |
| What the platform makes | Images, frames, video and documents made for you. |
| What you write in the platform | Notes, approvals, chat messages and images in the shared areas, support requests and bug reports (with any attachments). If you use voice dictation, the text it produces. |
| AI instructions | The prompts our platform sends to AI providers on your behalf, and their replies. |
| Payments | Your plan, purchases and invoices. Stripe holds your card details. We never see them. |
| Technical information | Device, browser, internet address, security and rate-limit records, and error reports. |
| Staff access records | A record of each time a member of staff opens a customer's project. |
| Website | What you type into our Request access form (name, email, role, company, which product you are interested in, a note about your project, who sent you, and your marketing choice). If you use our wallpaper and contact-card (vCard) generator at /cannes: your name, job title, company, phone number, email address, links, the event you tell us you are at, and your marketing choice. Our servers also receive your browser type, the page you came from and any campaign codes in the link. If you accept analytics, how you use the pages. |
| Phone | Your number and what you tell us on the call. We do not record calls. |
In this notice, Your Content means the scripts, documents, images, prompts and other material you upload or write in the platform. CineMe, and some of the third-party AI providers we use, learn from the prompts you write, how those prompts are revised, and the files and results that pass through the service, so that results improve. We do not use Your Content to build or train an AI model of our own. Which providers do this is set out in AI and Your Work, which we will email you on request. To ask for it, email ops@cineme.ai. We send parts of Your Content to AI providers to make what you ask for. Our staff and our AI agents also review and improve the instructions the platform writes for the AI, as AI and Your Work explains. We keep the prompts we send, and the replies, for as long as your account exists.
5.1 We do not intend to collect information about your race, ethnic origin, health, beliefs or other sensitive categories. You decide what goes into your own scripts and uploads. Please do not upload sensitive information about yourself or others unless your project needs it.
5.2 Library characters. Our casting library holds digital characters that CineMe owns. We describe each with attributes such as age range, gender, physical traits and apparent ethnicity so that we can match a character to your script. These descriptions are about characters, not about you.
5.3 Photographs of real people. On Creator and Producer, you may upload a photograph of a real person as a reference if you have their permission (Platform Terms, clause 7.4). We do not ask for, and do not intend to infer or record, race or ethnic origin for real people shown in your uploads.
5.4 Face-consistency checks. An optional project setting compares faces in generated images with a character's headshot so the character looks the same from shot to shot. It is not used to identify anyone.
5.5 Information about other people. If your content includes personal information about other people, you are responsible for having the right to use it. A person pictured or named in content can ask us to remove it at ops@cineme.ai.
| Why | Our legal basis |
|---|---|
| To provide the platform, make what you ask for, and take payment | Our contract with you |
| To keep the service secure, prevent misuse, fix faults and enforce our terms | Our legitimate interests |
| To improve the platform, including by reviewing AI instructions as described above | Our legitimate interests |
| To keep the records the law requires, such as invoices | Legal obligation |
| To send you news and offers, only if you opted in | Your consent. You can withdraw it at any time. |
| To answer website enquiries and follow up with people who contact us or leave their details | Our legitimate interests, or your consent where we ask for it |
No decision with legal or similarly significant effect is made about you by automated means alone.
You, and the people you invite to a project. Invited people can view and comment. Only you, or people you make approvers, can spend credits. CineMe staff can open a project to produce work you asked us to produce, to help you, and to investigate a problem you report or our systems detect. We record each time staff open a project.
These companies handle your information for us, under their own published terms or a written agreement with us. Where an address is shown, that is where the company says it processes information, or where we run it.
| Who | What for | Where |
|---|---|---|
| AI model providers | Reading and analysing scripts, writing prompts, making images and video. AI and Your Work, which we email you on request, names them, says what each does with your content and notes how long they keep it. | United States and other countries |
| Supabase | Database, sign-in records and file storage for the platform. Also the website form database. | Frankfurt (platform and CRM). Dublin (website forms). |
| Vercel | Hosting. The programs that run the platform run in Washington DC. | United States (programs). Pages are served from nearby edge locations, such as Frankfurt and Paris. |
| Upstash (through Vercel) | Short-lived counters that limit repeated sign-ups and requests | United States and other countries; see Upstash's own notice |
| Inngest | Background processing of jobs | United States and other countries; see Inngest's own notice |
| Resend | Sending our emails, including your sign-in code and the confirmation of a website request | Sent from Ireland; Resend is a US company |
| Stripe | Payments. You are sent to Stripe's own page. See Stripe's notice. | United States and Ireland |
| Sentry | Error reports, with personal details scrubbed out first | Germany |
| GitHub | Bug reports you send us, with attachments, in a private repository | United States |
| Google Workspace | Our staff email and documents, which receive support, deletion and credit-pack requests | United States and other countries; see Google's own notice |
| Slack | Internal alerts, including from website forms | United States |
| Dialpad | Our phone line. Calls are not recorded. | United States and other countries; see Dialpad's own notice |
| Cloudflare (Turnstile) | Spam checks on website forms. It receives a short-lived challenge token. We do not send it your form entries. | United States and other countries; see Cloudflare's own notice |
| Google (Analytics) | On the website, analytics only if you accept it. Our fonts load from our own address, so your browser does not contact Google for them. | United States |
| YouTube and Vimeo | Players embedded on pitch pages, if a pitch includes a video link. | United States |
| Your browser's speech service | Voice dictation, if you use it: your browser turns your speech into text using a service its maker runs, and we receive only the text. | Depends on your browser |
We also share information with our professional advisers, with a buyer of our business, and with authorities where the law requires.
Your content and account records are stored in Frankfurt. Some of the companies in section 8 are in the United States or process information there, including briefly while they make your outputs, and the programs that run the platform run in Washington DC. Where we send personal information outside the UK, we rely on the UK-US data bridge where the recipient is certified under it, and otherwise on standard contractual clauses with the UK addendum or another safeguard the law allows. You can ask us for a copy of the safeguards at ops@cineme.ai.
| What | How long |
|---|---|
| Your content, your outputs, and the prompts and replies made for your projects | While your account exists. If you ask us to delete them, we give you 14 days to export your work or change your mind and then delete them within 28 days of your request. If you delete a project in the platform, it is hidden from you and is erased only when you ask us to delete it. If you close your account, you have 30 days to export your work. After that we have no duty to keep it, and we may delete it at our discretion. |
| Account details and records of the terms you accepted | Account details while the account exists. Acceptance records for as long as those terms could be relied on. |
| Invoices and payment records | Six years. |
| Marketing choice | Until you withdraw it, then a short record so we do not contact you again. |
| Staff access records | For as long as we need them to show who opened a project and why, and to deal with any question about it. |
| Support requests and bug reports | For as long as we need them to deal with the request and anything that follows from it. |
| Error reports, server logs and rate-limit counters | Error reports and server logs for a short period, no longer than we need them to find and fix faults and keep the service secure. Counters, a short time only. |
| Website form entries and leads | For as long as we are in contact with you, or reasonably expect to be. If we have had no contact with you for a long time and you have not consented to marketing, we review the record and delete it. |
| What AI providers keep | Each provider has its own period, which AI and Your Work states where we know it. |
We keep the records the law requires, even after a deletion request: invoices and payment records, the record of your acceptance of our terms, a record that you opted out of marketing, and anything still used by projects outside the deletion.
You can ask for a copy of your information, and for it to be corrected, deleted, restricted or moved to someone else, and you can object to uses based on our legitimate interests. Email ops@cineme.ai. We do not charge a fee unless a request is clearly unfounded or excessive, we may need to confirm who you are, and we reply within 28 days. You may complain to the Information Commissioner's Office at ico.org.uk.
The platform is for people aged 18 or over. Our website is not aimed at children. We do not knowingly collect information from anyone under 18, and we delete it if we find it.
We use access controls, encryption in transit and private file storage, and we limit who can open a project and record when they do. We will tell you about a breach where the law requires.
14.1 What this section covers. A cookie is a small file that a website saves in your browser. Browsers also have "local storage" and "session storage", which do a similar job. The law treats them the same way, so we call all three "cookies and similar technologies". This section covers our website, cineme.ai, and our platform, client.cineme.ai. It replaces our earlier Cookies Policy.
14.2 Our website, cineme.ai
| Name | Type | What it does | How long | Needs your consent? |
|---|---|---|---|---|
cineme_cookie_choice | Local storage | Remembers whether you accepted or rejected analytics, so we do not ask on every visit. | Until you clear it or change your choice | No. It is needed to remember your choice. |
_ga | Cookie (Google Analytics) | Tells one visitor from another so we can count visits and see which pages are used. | 13 months | Yes. Set only if you accept analytics. |
_ga_<our measurement ID> | Cookie (Google Analytics) | Keeps track of your current visit. | 13 months | Yes. Set only if you accept analytics. |
If you reject analytics, or change your mind after accepting, we delete the Google Analytics cookies. We have switched off Google signals and Google's advertising features. We use no advertising cookies. As far as we have checked, the website sets no other cookies or storage of its own.
Other companies the website connects to:
www.googletagmanager.com and send usage data (pages viewed, approximate location, device and browser type) to Google in the United States. According to Google, Google Analytics 4 does not log or store individual internet addresses.challenges.cloudflare.com. It may set a short-lived challenge cookie belonging to Cloudflare.14.3 Our platform, client.cineme.ai
The platform has no cookie banner, because it stores only the items listed here, which it needs to work. It has no advertising or analytics cookies. "Local storage" stays in your browser until you clear it. "This visit" means session storage, which is cleared when you close the tab.
Signing in and keeping your data private
| Item | What it does | How long |
|---|---|---|
cineme-client-auth | Keeps you signed in to the platform. | Until you sign out or clear it |
cineme-client-auth-code-verifier | Completes a sign-in from an email link securely. | Removed as soon as the sign-in completes |
cineme_portal_owner | Records which account owns the screen data held in this tab, so a second person using the same tab cannot see the first person's data. | This visit |
cineme_portal_role_<project> | Remembers your role in a project. | This visit |
cineme_portal_member_<project> | Remembers that you are a member of a project. | This visit |
cineme_portal_terms_<project> | Remembers whether you have accepted the terms for a project. | This visit |
cineme_portal_username | Remembers your username. | This visit |
cineme_portal_help_desk | Records whether the signed-in person is a member of CineMe's help desk. | This visit |
Your place and unfinished work
These items can hold text you have typed but not yet saved. They are kept in your browser, on your device.
| Item | What it does | How long |
|---|---|---|
cineboard-prompt-draft:<scene> | Holds a frame prompt you have edited in CineBoard but not yet sent, so a reload does not lose it. | Until it is sent or you clear it |
cineme-pitch-preview:<project>, cineme-pitch-handoff:<project>, cineme-pitch-chrome:<project> | Pass pitch page content, a queued library item and the editor layout between screens while you work on a pitch. | This visit |
One-off screens and temporary data
| Item | What it does | How long |
|---|---|---|
cineme_splash_seen | Remembers that you have seen the welcome screen, so it does not repeat. | This visit |
cineme:analysis-countdown:<project> | Tracks the countdown shown while a script is analysed. | This visit |
Items used only by CineMe staff
Our staff use an internal tool that stores its own layout settings in staff browsers and sets two cookies: cineme-internal-sb (sometimes split into numbered parts), which keeps staff signed in, and cineme-last-project, which remembers the last project a member of staff opened and lasts one year. Customers do not use that tool, and our tests check that no customer page sets those cookies.
Other companies on platform pages
14.4 What we do not use. We use no advertising cookies anywhere. We do not use the platform to track you across other websites.
14.5 Your choices. On the website, use the "Cookie settings" link at the bottom of any page to change your choice about analytics at any time. You can clear cookies and local storage in your browser's settings whenever you like: Chrome, Firefox, Safari on Mac, Safari on iPhone and iPad, Edge. If you clear the platform items in 14.3 you will be signed out and lose any unsaved work. If you clear cineme_cookie_choice we will ask about analytics again on your next visit.
14.6 Do Not Track and Global Privacy Control. We do not use behavioural advertising. Analytics runs only if you accept it in our cookie banner, so your choice there is what controls it.
We send news and offers only if you opted in, by ticking the marketing box. It is off by default. You can withdraw that at any time by emailing ops@cineme.ai. Every marketing email we send from the platform has a one-click way to unsubscribe, and we check your choice before each send.
We keep the master copy of this notice and publish it at cineme.ai/privacy. We update section 14 before we add anything that falls under it, and we ask for your consent first where the law requires it. We tell account holders about material changes before they take effect.