Privacy Policy

We process account details, sign-in method, project briefs, images, video, audio and documents you choose to upload, project messages, quotes, payment status, delivery records, and basic device or access logs needed to protect the service. Google and Supabase handle Google sign-in. Stripe handles card details directly; we do not store full card numbers.

We use this information to create and protect accounts, understand and review production requests, clarify missing information, prepare plans and quotes, produce and deliver work, handle payments and support, prevent abuse, and meet accounting, tax, dispute and other legal obligations.

Client material is private by default and available only to the people and service providers needed to complete that project. Submitting a project does not give us permission to use it as a portfolio piece or promotion. Any public display requires separate, explicit permission. Production may use third-party image, sound or post-production tools; only the material necessary for the confirmed scope is provided.

The planned service stack uses Supabase for accounts, database and private file storage; Vercel for website hosting; Stripe for payments; Google for optional sign-in; and YouTube privacy-enhanced embeds for external visual references. Once a YouTube video is played, YouTube may process device and viewing information under its own policy. Production tools are selected for each project according to need, rights and security.

Unless a quote states otherwise, source material and intermediate production files normally enter deletion within 30 days after final delivery, while final delivery files are normally retained for 90 days for recovery. Account, quote, payment, agreement and security records are kept only as long as needed to provide the service, resolve disputes and meet applicable law. Backup copies disappear through normal rotation.

Project files use private storage and access controls. Account sessions use secure cookies, material business changes are validated on the server, and payment status is confirmed through Stripe-signed events. No internet transmission or storage is perfectly secure. If an incident materially affects you, we will respond and notify as required by applicable law.

You may correct account or project information, request access to or deletion of data that can legally be deleted, withdraw optional permission that has not already been acted upon, or ask us to stop a public display. Some order and payment records may need to be retained for legal, fraud-prevention or dispute reasons. Requests are handled after account identity is verified.

Technical and production services may process information outside your region under appropriate contractual and security measures. A project involving a minor must be submitted and authorized by a parent or legal guardian. Minors should not create accounts or upload personal material on their own.

We update this page and its effective date when the service, providers or legal requirements materially change. If a change substantially affects an active project, we will notify the client through the project hub or order contact.