Privacy Policy
The short version. We collect what we need to vet members, run the marketplace and complete deals, and nothing more.
Scripts are read by AI to write coverage and match them to buyers, but they are never used to train AI.
Coverage (our summary of a script, not the script itself) can be translated by AI into Spanish and Polish and checked by our translators.
Identity checks are handled by Stripe, and we never store your ID or selfie ourselves.
Other members see a code, not your name, until you've done business together.
We don't sell your data and we don't use advertising or tracking cookies.
- Who we are
- What we collect
- How we use it, and why we're allowed to
- AI and your scripts
- Identity checks
- Who we share it with
- International transfers
- How long we keep it
- Security
- Your rights
- US residents
- Cookies
- Age limit
- Changes and contact
1. Who we are
Screen-Plai (screen-plai.com) is run by [COMPANY LEGAL NAME], a company registered in [COUNTRY] under number [KRS / COMPANY NUMBER], NIP/VAT [NUMBER], with its registered office at [REGISTERED ADDRESS] ("Screen-Plai", "we", "us").
We are the controller of your personal data: we decide why and how it is used. For anything in this policy, contact privacy@screen-plai.com.
UK representative: [UK REPRESENTATIVE NAME AND ADDRESS], our representative under Article 27 of the UK GDPR.
This policy covers the website, the members' area and any deal you make through us. It applies under the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the US state laws described in section 11.
2. What we collect
You give us
- Application and account details: name, email, password (stored only as a one-way scrambled hash we can't read), whether you join as a buyer or writer, and what you tell us about your company, credits or experience.
- Identity check result: whether your identity was verified, when, and Stripe's reference number. See section 5.
- Scripts and related material: script files and text, loglines, synopses, the coverage we generate, and any edits you make to it.
- Searches and briefs: what buyers type when looking for scripts (e.g. "Goonies in space", budget, audience).
- Language preference: the interface language you choose (English, Spanish or Polish).
- Communications: messages, call recordings and notes made through Screen-Plai, and emails with our team.
- Deal and payment details: deal terms, budget bands, escrow and payout records. Card and bank details are handled by Stripe; we see only limited details such as the last four digits.
We collect automatically
- Security and access logs: sign-ins, which scripts an account opened and when, IP address, browser type. These protect writers' work and help settle disputes.
- Cookies: one essential cookie that keeps you signed in. See section 12.
From others
- Stripe tells us the outcome of identity checks and payments.
- Another member may mention you in a message or deal document (for example a co-writer or producer).
We don't want special-category data (health, religion, politics and so on). Please don't put it in applications or messages unless it's genuinely needed.
3. How we use it, and why we're allowed to
| What we do | Data used | Legal basis |
|---|---|---|
| Review applications and vet members | Application details, identity check result | Taking steps to enter a contract with you; our legitimate interest in keeping the marketplace trusted |
| Run your account and the members' area | Account details, cookies, logs | Contract |
| Write AI coverage and match scripts to buyers' searches | Scripts, coverage, briefs | Contract |
| Translate coverage into other languages and have translators check it | Coverage (never the full script), translators' account details | Contract |
| Show listed scripts to approved buyers | Scripts and coverage (not your identity) | Contract |
| Arrange, record and enforce deals; pay writers | Deal, payment and communication records | Contract; legal obligations (tax, accounting) |
| Keep access logs and investigate misuse, leaks or idea-theft claims | Logs, communications, upload fingerprints | Legitimate interest in protecting members' work and defending legal claims |
| Send account and deal emails | Email, name | Contract |
| Send news and marketing | Email, name | Your consent (unsubscribe anytime) |
| Comply with law, regulators and courts | As required | Legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for details or object (see section 10).
We don't make decisions that have legal or similarly significant effects on you purely by automated means. AI scores and suggests; people at Screen-Plai approve members and list scripts.
4. AI and your scripts
- We use Claude, an AI model provided by Anthropic, to read scripts, write coverage, answer "What if…?" questions and match scripts to buyers' searches.
- Scripts are sent to Anthropic for processing under its commercial terms, which do not allow your content to be used to train its models. We never use your scripts to train any AI.
- Full script text is stored privately and encrypted. Buyers see the coverage and the pages you allow, and only once the script is listed.
- AI coverage is an opinion and may be wrong. Writers can edit their coverage before it is listed.
- Translations. We use Claude to translate coverage (not full scripts) into other languages, currently Spanish and Polish. Translations may then be checked and edited by translators who work for us under written confidentiality terms. Translators see coverage only, never full scripts or who wrote them. Each translation is labelled "AI translation" or "Checked by a translator". A translation of a full script would need the writer's approval first.
5. Identity checks
We verify members before they can upload or view scripts. For identity checks we use Stripe Identity, which checks a photo of your ID document and matches it to a selfie. Until automatic checks are switched on, our team reviews each application by hand and may ask for more information.
- Stripe processes your ID image and selfie, including a facial comparison (biometric data). We ask for your explicit consent before the check starts, and you can refuse, though we then can't approve your account.
- We never receive or store your ID images or face data. We keep only the result (verified or not), the date, the name and date of birth shown on the document, and Stripe's reference.
- We instruct Stripe to delete the images and biometric data once the check is complete, except where Stripe must keep records by law. Stripe's own privacy policy explains its role.
6. Who we share it with
Other members
Members see each other as codes (for example, a buyer sees "Writer W-3F9A2") until they have done business together. When a deal starts, the parties see each other's names and the contact details needed to complete it. Admins at Screen-Plai can see all accounts and who uploaded each script.
Service providers (processors)
These providers act only on our instructions, under written data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting the website and server functions | EU region where available; USA |
| Upstash Inc. | Database (accounts, library, encrypted script text) | EU region |
| Anthropic PBC | AI reading and coverage | USA |
| Stripe | Identity checks, payments, escrow and payouts | EU (Ireland) and USA |
| Resend | Account and deal emails | USA |
| Fonts on our pages (receives your IP address when a page loads) | USA |
Translators
Freelance translators we engage under written confidentiality and data processing terms check translated coverage. They see coverage only, never full scripts and never who wrote them.
Others
We may also share data with professional advisers (lawyers, accountants, auditors), with authorities where the law requires it, and with a buyer of our business if Screen-Plai is sold, who would have to honour this policy. We never sell personal data or share it for advertising.
7. International transfers
Some providers are in the USA. Where personal data leaves the EU or UK, we rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or on the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for a copy of the safeguards.
8. How long we keep it
| Data | How long |
|---|---|
| Turned-down or withdrawn applications | 6 months, then deleted |
| Accounts and scripts | While your account is open; deleted within 30 days of closing it, unless part of a deal |
| Identity check result | While your account is open, plus 12 months |
| Access logs | 24 months |
| Messages and call recordings | 3 years after the last message, or longer if linked to a deal |
| Deal, payment and tax records (including the script version dealt on and its upload fingerprint) | 6 years after the deal ends, or as long as the law requires, and longer if there is a live dispute |
| Marketing consent | Until you withdraw it |
9. Security
We protect data with:
- encrypted connections (HTTPS) everywhere
- encryption of stored script text
- hashed passwords
- signed, HttpOnly session cookies
- role-based access, so buyers never see who uploaded a script
- logging of who opens which script
- admin access limited to named Screen-Plai staff
No system is perfectly secure. If a breach puts your rights at risk, we will tell the regulator within 72 hours and tell you without undue delay where the law requires it.
10. Your rights
Under the GDPR and UK GDPR you can:
- access your data and get a copy
- correct it
- delete it
- restrict how we use it
- take it with you (portability)
- object to uses based on legitimate interests
- withdraw consent at any time
Email privacy@screen-plai.com. We reply within one month and may need to confirm who you are. Some data, such as deal and tax records, we must keep even if you ask us to delete it, and we'll tell you when that applies.
You can complain to a regulator: in Poland the Prezes Urzędu Ochrony Danych Osobowych (UODO), uodo.gov.pl; in the UK the Information Commissioner's Office, ico.org.uk; or the regulator where you live. We'd appreciate the chance to sort it out first.
11. US residents
- Depending on your state (for example California, Colorado, Virginia), you may have rights to know, access, correct and delete your personal information, and to opt out of its sale, sharing for targeted advertising, or profiling. We do not sell or share personal information for advertising, and we do not profile people in ways that produce legal effects.
- Use the email above to exercise these rights. You may use an authorised agent, and we won't treat you differently for using your rights. If we turn down a request, you can appeal by replying to our answer.
- Biometric notice (Illinois, Texas, Washington and similar laws): the facial comparison in identity checks is carried out by Stripe with your written consent, only to verify your identity. Neither we nor Stripe sell biometric data. It is destroyed when the check is complete, or at the latest within the period required by law, and never later than 3 years after your last interaction with us.
12. Cookies
We use only what the site needs to work. We don't use advertising, analytics or tracking cookies, so we don't need to ask for consent. If that changes, we will ask first.
| Name | Type | What it does | Lasts |
|---|---|---|---|
| sp_session | Essential cookie | Keeps you signed in; signed and unreadable by scripts | 14 days or until you sign out |
| sp_lang | Essential, stored in your browser | Remembers the language you chose (English, Spanish or Polish) | Until you clear it |
| sp_cookie_notice | Essential, stored in your browser | Remembers that you've seen the cookie notice | Until you clear it |
When our pages load fonts from Google Fonts, Google receives your IP address. You can block cookies in your browser settings, but you won't be able to sign in.
13. Age limit
Screen-Plai is for people aged 18 or over acting in a professional capacity. We don't knowingly collect data from anyone younger, and we delete it if we find we have.
14. Changes and contact
We'll update this policy as Screen-Plai grows and change the date at the top. If a change matters, we'll tell members by email or in the app before it takes effect.
Questions: privacy@screen-plai.com · [COMPANY LEGAL NAME], [REGISTERED ADDRESS].