Privacy Policy

This Privacy Policy explains how AI Films Studios LLC ("CineFold," "we," "us," or "our") collects, uses and shares information when you use www.cinefold.ai and related services, including the CineFold Desktop application (together, the "Service"). AI Films Studios LLC is the controller of the personal information described here. Contact: support@cinefold.ai.

• Account information: email address, name and profile photo, and the sign-in method you use — Google, Apple, Microsoft or an email link. If you use Apple's “Hide My Email”, we receive and use the relay address Apple gives us.
• Payment information: payments are processed by Stripe (some earlier purchases were processed by PayPal, which we no longer use). We receive confirmation of payment, the amount, and limited billing details (such as country); we do not receive or store your full card number.
• Content you create on the website: prompts, uploaded reference images and generated images, video and music, stored so you can access them in your library.
• Usage data: features used, credits consumed, and similar diagnostic information.
• Device and log data: IP address, approximate country, browser and device type, collected automatically when you use the Service.
• Attribution data: if you arrive through a referral link or campaign link, we store the referral code or the campaign source, medium and landing page for up to 30 days and, when you sign up, with your account.
• Mobile app waitlist: if you ask to be notified about the iOS/Android app, we store your email address, the platform you chose and your language — only to tell you when the app launches. Email us to be removed.
• Desktop downloads: when you download CineFold Desktop we count the download with the platform, version and approximate country only; no IP address or account is stored with it.
• Sponsored cards in the desktop app: CineFold Desktop may show small cards labelled “Sponsored”. We count how often each card is shown and clicked only as daily totals per sponsor and placement; no personal data, device ID, license key or IP address is stored with these counts. When you click a card you go through our site to the sponsor's site, the link gets `utm_source=cinefold`, and the sponsor's own privacy policy applies there.

• To provide and operate the Service, including processing your generation requests;
• To process payments, manage subscriptions, credits and licenses, and prevent fraud and license abuse;
• To send transactional messages (receipts, license keys, account notices, password resets);
• To send product updates or promotions only where you have opted in; you can opt out at any time;
• To secure and improve the Service and to detect and prevent abuse;
• To comply with legal obligations and enforce our terms.

We use the following service providers. Each receives only the information needed for its purpose:

• AI generation providers — fal.ai and the model makers it hosts, Anthropic, and Google (Gemini). Your prompts and reference images are sent to them to generate content on the website.
• Stripe — payment processing (earlier purchases: PayPal, no longer used).
• Supabase — authentication (sign-in with Google, Apple, Microsoft or an email link) and database hosting.
• Apple, Google and Microsoft — only when you choose to sign in with them; they tell us your email address and, if you allow it, your name.
• Cloudflare (R2) — storage and delivery of generated media and of the publicly downloadable Desktop installers and updates.
• Vercel — hosting and delivery of the website and its API.
• Resend — sending transactional email such as license keys, and email-list messages to confirmed subscribers.

We do not sell your personal information and we do not use third-party advertising trackers. We may disclose information if required by law or to protect the rights, property or safety of CineFold, our users or others.

To activate and verify your license, the Desktop application sends our servers:

• your license key;
• a SHA-256 hash of a random device identifier generated by the app on first launch (not a hardware fingerprint);
• your computer's name, operating system platform and the app version;
• your IP address and the time of activation and verification requests (recorded in server logs).

The purpose is license activation and verification, enforcing the device limit, and preventing abuse.

Signing in to the app. When you sign in to CineFold Desktop, the sign-in happens in your browser on our website and the app receives a one-time code. For each computer you sign in on we store: a hash of a random device ID created by the app, the device name you see in the app, the platform, processor type and app version, the sign-in method, when you first signed in on that computer and when the app was last used while signed in. We use this to keep you signed in, show your signed-in computers on your account page, connect your license to your account, protect your account and understand how many people use the app. This is separate from the anonymous usage statistics below: the installation ID used for statistics is not linked to your account unless you turn on “Link my usage to my account”. You can sign a computer out in the app or on your account page; its data is deleted 90 days later, or when you delete your account.

Emails after signing in. After your first sign-in we send one welcome email with tips (a service message). News and tips emails are sent only if you tick the separate, unticked box when signing in; because your email address was just verified by the sign-in, we record your consent (time, source and the exact wording) instead of sending a confirmation email. Every such email has a one-click unsubscribe link.

Buying from the app. When you click “Get a license” in the app, a one-time link opens our checkout with your account's email filled in, so the license is added to your account and the app can pick it up automatically.

Update and settings checks. To check for updates and load remote settings (for example a notice that an AI model is temporarily unavailable, a minimum supported version, or an announcement), the app contacts our server with its version number, operating system, processor type, interface language and whether it is licensed — without your license key or any identifier. These settings are digitally signed, so they cannot be forged.

Anonymous usage statistics and error reports — only with your consent. They are off unless you agree in the app. If you turn them on, the app sends:

• a random installation ID created by the app — not linked to your license, account, email address or computer name (unless you turn on “Link my usage to my account”, below);
• the app version, operating system, processor type, interface language and whether the app is licensed;
• which features are used (for example opening the editor or a builder, an export finishing or failing), with short technical details only: the AI provider and model name, resolution, a duration range and an error code;
• for error reports: the error message and technical stack trace. Before storing, our server also removes user-folder paths (such as /Users/name or C:\Users\name), email addresses and anything that looks like a key.

“Link my usage to my account” — off unless you turn it on. If you switch it on in the app's settings, the usage statistics sent from then on are stored with your account, so CineFold support can see which features you use (never your prompts, media, file or project names, API keys or balance). You can switch it off at any time; the link between your account and your past usage is then removed and the statistics stay anonymous.

The legal basis for usage statistics, error reports and linking usage to your account is your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)). For license activation, signing in, update checks and abuse prevention it is the performance of our contract with you and our legitimate interest.

What we never collect: your prompts, the images, video and audio you generate or import, file and project names, subtitles or transcripts, and your API keys. API keys you add are stored on your device, encrypted with your operating system's secure storage, and are never sent to us. Generation requests go directly from the app to the AI provider you choose, using your own key, under that provider's terms and privacy policy (for example fal.ai).

IP addresses of these requests are not stored. To limit abuse we use a one-way hash of the IP address with a random key that is deleted every day.

Retention: raw usage events and error reports are deleted after 90 days, and an installation's record 90 days after it was last seen. Only aggregated daily totals (such as the number of active installations per day) are kept; they contain no personal data.

Turning it off and deleting your data: you can switch usage statistics and error reports off at any time in the app's settings — nothing more is sent. "Delete my data" in the app's settings deletes all usage events, error reports and the record of your installation from our servers.

Email list (optional): if you enter your email address in the app to get CineFold news and release notes, we first send a confirmation email and add you only after you click the link (double opt-in). We store your email address, language, where you subscribed and when you confirmed — not your IP address. Every email has a one-click unsubscribe link, and we can delete your address on request. Unconfirmed sign-ups are deleted after 30 days. Emails are sent through Resend.

Questions or requests about CineFold Desktop data: contact@aifilmss.com.

We use only the following on the website:

• Essential: a sign-in session cookie (set by Supabase, names beginning "sb-"), a language preference ("cf-locale") and, only while you sign in to CineFold Desktop, a short-lived cookie ("cf-dsi", 15 minutes) that ties the sign-in to your browser.
• Attribution (first-party): "cinefold_ref" (referral code) and "cinefold_utm" (campaign source, medium, landing page), each kept up to 30 days, only if you arrive through such a link.
• Local storage: your cookie-banner choice and interface preferences, kept in your browser.

Visit statistics (no cookies): to understand how the website is used, we count page views and a few actions (such as downloads, "Buy now" clicks, checkout and purchase) in our own database — no third-party analytics service and no cookies. We record the page, the referring website's domain only, campaign (UTM) parameters, country (derived from your IP address by our host), device type, operating system, browser and language. Your IP address is never stored: to count unique visitors within a single day we use a one-way hash of your IP address and browser user agent with a random daily key that is deleted at the end of the day, so the hash cannot be linked back to you afterwards. If your browser sends Do Not Track or Global Privacy Control, we only add one to a daily total and record no details. Raw visit records are deleted after 90 days; only aggregated daily totals are kept. This data is not shared with third parties.

We do not currently use third-party analytics, advertising or social-media tracking cookies. If that changes we will update this policy and ask for consent where required. You can control cookies in your browser settings; disabling essential cookies may stop parts of the Service from working.

Raw visit statistics (see section 5) are deleted after 90 days; aggregated daily totals contain no personal data and are kept.

We keep account and content data while your account is active and as needed to provide the Service. License and payment records are kept for as long as the license exists and afterwards as long as needed for legal, tax, accounting and dispute-resolution purposes. You can ask us to delete your account and associated data as described below.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to or restrict certain processing. To make a request, email support@cinefold.ai. We will respond within a reasonable time and in line with applicable law. We may need to verify your identity first.

AI Films Studios LLC is based in the United States and our providers operate in several countries. If you use the Service from outside the United States, your information may be processed in the United States and other countries whose data-protection laws may differ from those where you live.

The Service is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy. If changes are material we will give notice by email or in the product before they take effect. The date at the top shows when it was last updated.

AI Films Studios LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States (registered & mailing address). Email: support@cinefold.ai.