PRIVACY POLICY

CineForge Privacy Policy

Effective Date: 17 August 2026

This Privacy Policy explains how CineForge Pty Ltd (ACN 701 472 737, ABN 88 701 472 737) ("CineForge," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the CineForge AI filmmaking application and related services (the "Service"). It also describes your privacy rights and how to exercise them. This Policy is incorporated into and subject to our Terms of Service.

If you do not agree with this Policy, do not use the Service.

---

1. Who We Are and How to Contact Us

CineForge Pty Ltd (ACN 701 472 737, ABN 88 701 472 737) is the controller (and, under U.S. state laws, the "business") responsible for your personal information in connection with the Service.

• Privacy contact / data requests: support@cineforge.pro

The Service is built on the Base44 platform (React/Vite client, serverless functions, and an entity database with row-level security). Authentication and identity are managed by Base44.

2. Notice at Collection (Summary)

At or before the point of collection, we want you to know: we collect account identifiers, payment-transaction metadata, the creative content you submit and generate, and usage/technical data. We use it to provide, secure, meter, and improve the Service, to process payments, to operate the community feed, to moderate content, and to comply with law. We disclose it to the service providers listed in Section 4A. We do not sell your personal information and do not "share" it for cross-context behavioral advertising, and we do not use your prompts or generated content to train our own models. We retain it as described in Section 6. You have the rights described in Section 7. Sensitive personal information handling is described in Section 4B.

3. Information We Collect

3.1 Account and identity information. When you create or use an account, we and Base44 collect and process your account identifier and email address, and your assigned role. Authentication is handled by Base44; we do not operate a self-hosted password store and do not store your password.

3.2 Payment information. When you purchase Credits, payments are processed by Stripe. Stripe collects and processes your payment details (such as card information and billing data) directly. We do not receive or store your full payment card number. We receive limited transaction-related information from Stripe, such as a transaction identifier, purchase amount, Credit package, status, and the email or customer reference associated with the purchase, which we use to record your Credit balance and transactions.

3.3 Prompts, inputs, and generated content. We collect and store the content you create and submit, including your prompts and other inputs (text prompts, reference images, characters, project and scene plans, production bibles, locations, episodes, and related creative data) and the generated outputs (AI-generated videos, images, voices, and LLM planning text). This content is associated with your account. If you choose to publish a completed scene to the public community feed, that scene and its associated display information become viewable by other users and potentially the public. Do not submit inputs containing another person's image, voice, or personal information unless you have a lawful basis and any required consent.

3.4 Usage, metering, and analytics information. We collect information about how you use the Service, including generation activity and metering (for example, Credit transactions, usage meters, generation submissions, polling and ledger records, and failure reports), engagement and progression data (such as experience/XP transactions, level and reward claims, daily-mission progress, activity records, and agent runs/tasks), and technical information such as device and browser type, approximate location derived from IP address, timestamps, and interactions with features. We use limited analytics to operate, secure, meter, debug, and improve the Service.

3.5 Public feed and community interactions. Community features record interactions associated with published content, such as votes (one vote per user per scene), shared playlists, reports, blocks, and views.

3.6 Content-safety signals. When we moderate content, we may generate and store signals about whether content was flagged, removed, or reported, and related metadata, to enforce our policies and comply with legal obligations.

3.7 Communications. If you contact us (for example, at support@cineforge.pro), we collect the information you provide, such as your email address and the contents of your message.

We do not intentionally collect special categories of sensitive personal data. Please do not submit prompts or content containing others' sensitive personal information without a lawful basis and appropriate consent.

4. How We Use Your Information

We use your information to:

• Provide the Service — create and manage your account, authenticate you, and deliver generation, planning, and community features;
• Process generations — transmit your inputs to the relevant third-party AI providers to produce your requested outputs;
• Process payments and manage Credits — record purchases, maintain your Credit balance, apply consumption and expiry, and prevent payment fraud;
• Operate the community feed — display content you choose to publish and enable community features;
• Maintain, secure, and improve the Service — monitor performance, debug errors, prevent abuse and fraud, enforce usage limits and Credit metering, and develop new features;
• Moderate content — detect, review, and act on prohibited content, including through automated and human review, and to comply with our zero-tolerance CSAM policy;
• Communicate with you — send service-related messages, respond to inquiries, and provide support;
• Comply with law — meet legal obligations, respond to lawful requests, and enforce our Terms and protect our rights, users, and the public.

Legal bases (EEA/UK). Where the GDPR or UK GDPR applies, we process personal data on the bases of: performance of a contract (to provide the Service and process Credits); our legitimate interests (to secure, improve, and protect the Service, prevent abuse, and operate the community feed); consent (where required, for example for certain non-essential cookies or optional communications, which you may withdraw at any time); and compliance with legal obligations (including content-safety reporting).

No sale/share; no model training. We do not sell your personal information, we do not "share" it for cross-context behavioral advertising, and we do not use your prompts or generated content to train our own models. Third-party AI providers process your inputs under their own terms and policies; some providers may process inputs to provide, secure, and improve their own services, and where a provider offers a no-training or developer-API option we endeavor to use it, but their terms govern that processing (see Section 5).

4A. CCPA/CPRA Categories of Personal Information

In the preceding 12 months, we have collected the following statutory categories of personal information, from the sources and for the purposes shown. We disclose these categories to the service providers listed in Section 5 for the business purposes stated. We have not sold, and have not "shared" for cross-context behavioral advertising, any category of personal information.

We do not knowingly collect the CCPA categories of "biometric information," "professional/employment information," "education information," or "protected-classification characteristics," except to the extent a user voluntarily includes such information within a prompt or upload, which we discourage.

4B. Sensitive Personal Information

We do not intentionally collect "sensitive personal information" as defined under the CPRA and comparable laws (such as precise geolocation, government identifiers, account log-in credentials, racial or ethnic origin, or contents of communications not directed to us). We collect only coarse (non-precise) location. We do not use or disclose any sensitive personal information for purposes beyond those permitted by law (providing the Service, security, and legal compliance), and we do not use it to infer characteristics about you. Because you control your prompts, please do not submit sensitive personal information about yourself or others. Where required, California residents may exercise the Right to Limit the Use of Sensitive Personal Information; because we do not use such information beyond permitted purposes, no additional limitation is necessary, but you may contact us at support@cineforge.pro.

4C. Automated Processing and Content Moderation

We use automated systems (alone or with human review) to screen, filter, and flag content for compliance with our Acceptable Use Policy and legal obligations, and to detect fraud and abuse. These processes may result in content being blocked, removed, or reported and, in serious cases (such as CSAM), account termination and reporting to authorities. We do not use automated processing to make decisions that produce legal or similarly significant effects about you without human involvement, except for safety and legal-compliance actions permitted by law. Where the GDPR applies and any qualifying automated decision-making occurs, you may request human review, express your view, and contest the decision by contacting support@cineforge.pro.

5. Third Parties We Share Information With

We share information with the following categories of third parties, each for the stated purpose. We share only what is necessary for each purpose, and providers act as our processors/service providers or as independent controllers under their own terms as indicated.

Each third-party provider processes your information under its own privacy policy and terms. We encourage you to review them. We are not responsible for the independent practices of these providers.

Other sharing. We may also share information: (a) with service providers who support our operations under confidentiality obligations; (b) to comply with law, legal process, or lawful government requests; (c) to enforce our Terms and protect the rights, safety, and property of CineForge, our users, and the public — including reporting CSAM to NCMEC and/or law enforcement; and (d) in connection with a merger, acquisition, financing, or sale of assets, in which case your information may be transferred as a business asset (subject to this Policy or a successor policy).

Public feed. Content you publish to the community feed is shared with and visible to other users and potentially the public. Do not publish content containing information you wish to keep private.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as necessary for the criteria below. When information is no longer needed, we delete or de-identify it.

Content you published publicly, or that others have viewed, shared, or downloaded, may persist in caches or outside our control after deletion from our active systems. Backups are retained for a limited period and cycled out over time.

7. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access / Know — request a copy of, or information about, the personal information we hold about you;
• Correction — request that we correct inaccurate or incomplete information;
• Deletion — request that we delete your account and personal information (subject to legal retention exceptions; see Sections 6 and 8);
• Portability — request a copy of certain information in a portable format;
• Restriction/Objection — request that we restrict or object to certain processing;
• Opt out of sale/share and targeted advertising — although we do not sell or share personal information or engage in targeted advertising;
• Limit use of sensitive personal information — as described in Section 4B;
• Withdraw consent — withdraw consent where processing is based on consent, without affecting prior processing;
• Non-discrimination — you will not be discriminated against for exercising your rights.

How to exercise your rights. You may exercise these rights using in-Service controls where available (including account-deletion features) or by contacting us at support@cineforge.pro. We will verify your request (typically via the email associated with your account) and respond within the timeframe required by applicable law. You may appeal a denied request by contacting us at the same address. You may use an authorized agent to submit a request on your behalf, subject to verification.

California (CCPA/CPRA). If you are a California resident, you have the rights to know, access, correct, and delete your personal information; to opt out of the "sale" or "sharing" of personal information and of targeted advertising; and to limit the use of sensitive personal information. We do not sell or share personal information, do not use it for cross-context behavioral advertising, and do not use or disclose sensitive personal information beyond the purposes permitted by law. You may exercise your rights as described above and may use an authorized agent. Under California's "Shine the Light" law (Civil Code § 1798.83), we do not disclose personal information to third parties for their own direct-marketing purposes.

Other U.S. states and jurisdictions. Residents of other states or countries with comprehensive privacy laws may have comparable rights, which we honor as required by applicable law.

8. Account Deletion

You may request deletion of your account at any time through in-Service controls (where available) or by emailing support@cineforge.pro. Upon deletion, we will delete or de-identify your personal information associated with your user-owned records, except where retention is required or permitted by law (for example, transaction and Credit records, and records related to safety, fraud, or legal obligations). Deleting your account forfeits any remaining Credits without refund, except where a refund is required by law. Content you previously published to the public feed may be removed from active display, but cached or previously distributed copies may persist outside our control.

9. International Data Transfers

The Service and our providers operate globally, and your information may be processed in countries other than your own, including the United States, which may have different data-protection laws than your country. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum) for international transfers, and you may request information about these safeguards at support@cineforge.pro. By using the Service, you understand that your information may be transferred internationally as described.

10. Cookies and Similar Technologies

The Service uses cookies, local storage, and similar technologies that are strictly necessary to authenticate you, maintain your session, remember preferences, secure the Service, and enable core functionality. We also use Plausible Analytics, a third-party analytics service that does not use cookies, to count page views and understand usage. We do not use cookies for third-party advertising or cross-site tracking, and we do not respond to browser "Do Not Track" signals differently than described here; where a legally recognized opt-out preference signal (such as Global Privacy Control) is received, we treat it as a valid opt-out of sale/sharing (which we do not do). Where required by law, we will request your consent for non-essential cookies, and you can decline them. You can control cookies through your browser settings, though disabling certain cookies may impair the Service.

11. Security

We use reasonable technical and organizational measures to protect personal information, including database row-level security to restrict access to user-owned records, access controls, and encryption in transit. Certain privileged server operations (service-role access) may bypass row-level security to perform system functions; access to these operations is restricted to authorized processes and personnel. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

12. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. In the EEA, UK, and other regions requiring a higher age of digital consent, you must be at least 16 (or the applicable minimum age in your country) to use the Service without parental consent. If you believe a child under the applicable minimum age has provided us personal information, contact us at support@cineforge.pro and we will delete it. Given that the Service can generate mature content where enabled (which is restricted to users 18+, disabled by default, and age-gated), use by minors is limited to the general, non-mature features and is subject to the age and parental-involvement requirements in our Terms.

13. App-Store Privacy Disclosures

Where you obtain the Service through the Apple App Store or Google Play, we also provide privacy disclosures through those stores' required formats (for example, Apple's "privacy nutrition labels" and Google Play's "Data safety" section). Those disclosures summarize the data practices described in this Policy; if there is any conflict, this Policy governs our actual practices. We do not use data collected through the Service to track you across apps and websites owned by other companies.

14. Third-Party Links and Services

The Service may reference or link to third-party websites, providers, or services (including the AI providers and Stripe). This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Review their policies before providing information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective Date" and provide reasonable notice (for example, by posting in the Service or by email). Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact:

• CineForge Pty Ltd (ACN 701 472 737, ABN 88 701 472 737)
• Email: support@cineforge.pro

For residents of the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority.