Legal
Privacy policy
What we collect
- Account info: email address, name, and timezone you provide at signup or in your profile.
- Invite requests: if you ask for an invitation, the name, email address and role you give us, and whether you chose to receive product and marketing email (with the date you chose).
- Support requests: when you contact support, we collect your message, the email address (and name, if you give one) we should reply to, any screenshot you attach, and details we add automatically to help us answer: the page you were on, your workspace and its plan, the project you had open, and your browser type and window size.
- Workspace and production data: everything you put into MyNiverse: scripts, schedules, breakdowns, budgets, contact lists, uploads.
- Usage analytics: if we enable product analytics (PostHog), we record page views and feature-usage events to understand how the app is used. No third-party ad cookies.
- Billing info: handled by Stripe. We store subscription status and the last 4 digits of your card; we never see or store the full card number or CVC.
How we use it
- To provide the Service and the features you configure.
- To process payments and send billing receipts.
- To send transactional email (sign-in links, invitations, important account notices).
- To improve the product: we may look at anonymized, aggregated usage patterns to decide what to build next.
- To comply with law and to respond to lawful requests.
Subprocessors
We rely on the following third-party services to run MyNiverse. They only receive the data they need to do their job.
| Service | What it does for us | Their privacy policy |
|---|---|---|
| Stripe | Payment processing and billing | Link |
| Supabase | Authentication and Postgres database (hosted on AWS, US region) | Link |
| Cloudflare | File storage (R2) for project posters, scout photos, casting headshots and the Media library | Link |
| Anthropic | AI processing, only when you run one of these features. What each sends to Anthropic: Safety Scan: for each scene scanned, its heading, synopsis, tagged elements (including cast names) and the scene’s script text. AI Breakdown: for each scene analyzed, its number and heading, the scene’s script text and the tags the keyword tagger added to it; and, for the run, your characters’ names with their age and one-line summary, your cast list’s character names, and the names of elements already tagged in the project. VFX Breakdown: the project title and, for each scene, its heading, synopsis, page count and tagged elements. Schedule Chat: the project title, the shooting schedule (days, dates and which scenes are on each), each scene’s heading, page count and the start of its synopsis, and your recent messages in that conversation. Budget Chat: the project title, the budget (sections, accounts, line items, fringes and totals) and your recent messages in that conversation. Schedule Review: the shooting schedule (days, dates, day notes, and each scene’s number, heading, location, page count and up to four cast names). Schedule priorities (in the Schedule Wizard): the priorities you write, the shooting window, the names of your locations and sets, your cast’s character and actor names, your scene numbers, and how many scenes are exteriors or carry each safety flag. The Safety Scan and AI Breakdown send script text, and only for the scenes they analyze. | Link |
| Resend | Transactional email delivery (sign-in links, receipts) | Link |
| Netlify | Web application hosting and CDN | Link |
| OAuth sign-in (if you choose to sign in with Google) | Link | |
| Apple | OAuth sign-in (planned; not yet enabled) | Link |
Where your data lives
Application data is currently stored in the United States via Supabase (hosted on AWS). Region may change as we grow. We’ll update this policy if it does.
How long we keep it
- Active accounts: retained indefinitely while you’re a customer.
- Canceled accounts: workspace data is planned to be retained for 30 days after cancellation, then deleted.
- Audit logs: security-relevant events (sign-in attempts, billing changes) are kept for 12 months.
Your rights
You can access, correct, or delete your account data at any time. Export is available from account settings. To make a request that isn’t self-serve (e.g., account deletion or a data portability request), email privacy@myniverse.com.
Cookies
We use first-party session cookies to keep you signed in (via Supabase) and to remember preferences like theme, sidebar state and your cookie choice. We don’t set third-party advertising or tracking cookies. If product analytics (PostHog) is enabled, it uses first-party cookies to identify returning sessions.
You can decline analytics via the cookie banner or clear your choice at any time.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect information from children.
Security
All traffic to MyNiverse is encrypted in transit. Access controls make sure people only see the workspaces and projects they have been given access to. Card payments are handled by Stripe, so your card details never reach our servers.
Contact
Privacy questions or requests? Email privacy@myniverse.com.
For general product questions or bug reports, email support@myniverse.com.