Privacy Policy

1. What Data We Collect

To create an account, we collect only your email address. Your password is stored in securely hashed form by our authentication provider — we never see or store it in plain text. We do not ask for your name, postal address, or any other personal details. As CiGYL is free during the beta, no payment information is collected.

Your actual project data — storyboards, characters, locations, scenes and media — is stored locally on your own device (in your browser and in a project folder you choose). It is never uploaded to our servers.

2. AI Features & Your Own API Keys (BYOK)

AI features are optional and use a "Bring Your Own Key" (BYOK) model. If you choose to use them, you add your own API key for a third-party AI provider (for example Google Gemini, OpenAI, or Anthropic). Your API keys are stored locally and encrypted on your device and are never transmitted to us.

When you use an AI feature, the content required for that request (such as prompts, descriptions or images) is sent directly from your browser to the AI provider you selected, using your own account with that provider. CiGYL does not route, receive, or store this content. That processing is governed by the privacy policy and terms of the respective provider, which you are responsible for reviewing. If you never use AI features, no data is sent to any AI provider.

3. Third-Party Services

We use Netlify to host the website and Supabase to handle account authentication — this stores your email address and your hashed password. Both are GDPR-compliant providers. Your data is not shared with advertising networks, and we never use your content to train AI models.

4. Your Rights

Under the GDPR you have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, contact us at info@cinegraft.com. You may also delete your account, which removes your email address from our authentication provider.

5. Cookies