CineBase — Privacy Policy

Last updated: August 2026 · CineBase is operated from British Columbia, Canada. This policy expands section 10 of the Terms of Use.

1. What we collect

Account information — name, email, optional phone/organisation, role, and the CineBase tenants you belong to.
Tenant content — everything you and your team put into your CineBase: gear records, jobs, invoices, expenses and receipts, contacts, scripts, images, diagrams, call sheets, emails you connect or send through the platform.
Technical data — server logs (IP, request, time), session cookies, and — when you send in-app feedback — the page context attached to it (app version, current view, browser, recent script errors).

2. How it's used

To operate the service you signed up for, and for nothing beyond it: authentication, storing and displaying your tenant's data to the people its roles allow, sending the email you ask the platform to send, investigating faults, abuse reports and automated moderation flags, and meeting legal obligations. Your data is not sold, and is not used for advertising.

3. Cookies

CineBase uses a session cookie to keep you signed in, and local storage for your own preferences (theme, layout). There are no advertising or cross-site tracking cookies.

4. Processors the service relies on

Data leaves CineBase only as needed for the feature involved:

AI model provider (Anthropic) — content you run through AI features (receipts, scripts, images, email drafting), processed under your own API key.
Image moderation (AWS Rekognition) — uploaded images may be scanned for prohibited content.
Email delivery — messages the platform sends on your behalf.
CDN / security layer (Cloudflare) — traffic passes through it.
Public reference sources — e.g. Bank of Canada exchange rates (no personal data sent).
Web font hosting — your browser fetches fonts from the provider.

5. Who can see tenant content

The members and renters of your CineBase, according to the roles its admins assign, and anyone you give a public share link to. The operator accesses tenant content only to run the service, investigate reports or faults, or as required by law. Tenants are isolated from each other.

6. Retention & deletion

Deleted items pass through a trash bin with a retention window before permanent purge; moderation takedowns and account deletion are immediate.
On tenant or account deletion, content is removed from the live service; residual copies in disaster-recovery backups age out on the backup cycle.
Where the law requires it, unlawful material is preserved as evidence and reported to the appropriate authorities.

7. Security

Passwords are stored hashed, traffic is encrypted in transit, backups are encrypted, and tenant isolation is enforced server-side. No system is perfect — report suspected vulnerabilities via the contact page and they will be treated as a priority.

8. Your rights & contact

You can access, correct, export or delete your information — most of it directly in the app, and the rest by asking. Canadian privacy law (PIPEDA) applies. For any privacy request, use the contact page.

9. Children

CineBase is a professional production tool and is not directed at children.

10. Changes

Material changes to this policy will be flagged; continued use after an update is acceptance.