Privacy Policy
Effective date: July 26, 2026 DRAFT — pending attorney review
This policy explains what we collect and how we use it. Short version: your scripts and stills are yours, we process them only to run the features you click, and we do not sell your data.
What We Collect
Account data: name, email, password (hashed), plan and billing status. Payment data: handled by Stripe; we never store full card numbers. Your Content: scripts, stills, images, project data, billing/credit ledger entries, and the outputs the Service generates for you. Usage data: feature usage, device/browser info, and logs needed to operate and secure the Service. Cookies: essential session cookies; no advertising trackers.
Site Analytics
We run our own simple, first-party analytics to understand which pages get visited — no third-party analytics scripts, no advertising trackers, and no fingerprinting. We record the page you viewed, when, the site that referred you, your general region (derived from your IP address, which is then discarded — we never store your IP), and whether you're on a phone, tablet, or desktop.
Cookies are opt-in. The random anonymous visit-counting cookie (sb_aid) is set only if you click "Accept" on the cookie banner; it is never linked to your name or email. If you decline — or haven't chosen yet — we count page views anonymously with no cookie and no identifier of any kind. You can change your choice any time via the "Cookie preferences" link in the footer. If your browser sends a "Do Not Track" or Global Privacy Control signal, we honor it and record nothing at all.
| Cookie | Purpose | Duration |
|---|---|---|
sb_consent | Remembers your analytics cookie choice | 1 year |
sb_aid | Anonymous visit counting — set only with your consent | 1 year |
| Stripe checkout cookies | Set by Stripe during payment — essential for checkout, see Stripe's privacy policy | Per Stripe |
How We Use It
To provide the Service and its AI features (processing Your Content through our providers — Anthropic for text analysis, fal.ai for image generation — only when you invoke a feature); to bill you (Stripe); to secure, debug, and improve the Service; to send service communications. We do not sell personal information and we do not use Your Content to train our own or third parties' foundation models.
Sharing
Only with: the processors above under their contractual protections; professional advisers where required; authorities when legally compelled; and a successor entity if the business is transferred, under this policy's protections.
Retention & Deletion
Your Content persists while your account is active. You can delete projects in-app; deleted projects are removed from active systems and purge from backups on our backup cycle. Close your account and we delete or de-identify personal data within 30 days, except records we must keep (billing/tax) and ledger integrity records.
Your Rights
Email us to access, correct, export, or delete your data. If you are in a jurisdiction with specific privacy rights (e.g., California, EEA/UK), you may exercise those rights via the same contact; we honor verified requests and do not discriminate for exercising them.
Security
Encryption in transit, access controls, and least-privilege processing. No system is perfectly secure; notify us immediately of any suspected compromise of your account.
Children
The Service is not directed to children under 13 and we do not knowingly collect their data.
Changes & Contact
We will post updates here and flag material changes in the Service.
Contact: support@theshotbible.com · The Elephant Room LTD Co, South Carolina, USA