Privacy Policy

Effective: October 4, 2026

Interim information practices and privacy commitments

FilmsAI.com is currently operated personally by Krista Gable and Paul Hawkins in North Carolina, United States. "FilmsAI," "we," "us" and "our" refer to those operators in connection with the service.

This policy explains how we process personal information when you visit, view or submit content, operate a creator account, participate in a creator program, or communicate with FilmsAI. It applies to FilmsAI, not automatically to another service merely because that service has related ownership, supplies an authorized import, or appears in a creator's links.

The operators plan to relocate to Charleston, South Carolina and form the intended operating entity on or around October 19, 2026. This policy remains effective until properly replaced; it does not automatically expire on that date.

1. Our core privacy commitments

FilmsAI does not sell your personal information. We do not sell it to advertisers, sponsors, data brokers, AI companies or other third parties. The limited operational and legal disclosures described below are not authorization for recipients to independently sell or repurpose the information.

FilmsAI does not use creator uploads to train or fine-tune generative AI models. We do not sell, license or authorize creator uploads for third-party generative-AI training. Uploading Content, maintaining an account or receiving a creator-program payment does not grant training consent.

Technical review, file conversion, thumbnail preparation, runtime measurement and media delivery are service operations, not a training license. Our commitments govern our conduct and authorizations; we cannot guarantee that an unrelated party will never attempt to copy or misuse publicly available material.

Acknowledging this Privacy Policy does not constitute blanket consent to every use of personal information. Where a particular activity requires consent, we must obtain the required consent for that activity.

2. Information FilmsAI processes and its sources

Account, sign-in and eligibility information

We process the email address, account identifiers, authentication information and profile details needed for creator accounts. Sign-in uses magic links or email one-time passcodes through self-hosted Supabase Auth/GoTrue, not Google, Apple or GitHub social login.

We also process age and legal-eligibility representations you provide and declarations of agreement to relevant policies. An adult-age declaration or a verified-profile badge is not proof of independently verified identity or age. If a different age-assurance process is introduced, its collection, providers and retention practices will be disclosed before the affected processing begins.

Profiles, submissions and authorized imports

We process information you supply, including display names, biographies, profile images, creator statements, public links, support links, uploaded films, audio, artwork, thumbnails, titles, descriptions, credits, ratings, categories and relevant intended-audience information.

Submissions also generate technical and administrative records, such as duration, processing status, review decisions, requests for corrections, rights-verification correspondence and program-eligibility records. Creator-authorized imports can provide selected files, associated metadata, source references and authorization records.

Engagement and technical information

FilmsAI records views and likes in its own database. Visiting the site, using an embedded player, signing in and requesting media also involve processing technical request, network, browser, device, authentication and security information. Technical requests may be logged for operation, troubleshooting, security and abuse investigation. Not all engagement or technical information is necessarily anonymous, and viewing without an account does not mean that no technical information is processed.

Program, payout and communication information

For creator programs, we process information needed to assess eligibility, calculate amounts and arrange payment. This can include the creator's identity, payout email or link, eligible-content information, calculation and review records, payment status, confirmations and information legally required for a particular payment.

We receive messages, attachments, support requests, feedback, moderation appeals, privacy requests, copyright notices, counter-notifications and other rights or safety reports. Reports from others may contain information about you. Payment and email services may provide transaction or delivery records related to requested operations.

Do not send passwords, email sign-in codes or unnecessary sensitive documents. Please do not attach exploitative or intimate imagery when a URL and description can identify the report.

3. How and why we use information

We use relevant information to authenticate accounts; maintain profiles; receive, review and process submissions; stream and display approved work; provide discovery, sharing and engagement features; and communicate about use of the service.

We also use information to administer announced creator programs and payments; evaluate rights, audience classifications and eligibility; respond to support and privacy requests; investigate manipulation or abuse; maintain security; resolve disputes; and comply with legal obligations.

Account and transactional messages include sign-in emails, submission and moderation updates, support responses and program communications. Account creation does not enroll you in a sponsor's mailing list. Optional marketing, if offered, will have an appropriate subscription or permission process and a way to unsubscribe.

Where applicable law requires a particular legal basis, consent or other authorization, we must establish it for the relevant activity. Merely listing a purpose here does not override those requirements or our no-sale and no-training commitments.

4. Public information and media

Approved films, published creator profiles and the metadata and links you intentionally publish are public-facing. They can appear in FilmsAI discovery features, programming, authorized embedded players and promotion permitted by the Terms or a separate agreement.

Public information can be viewed, shared or indexed by others. Removing it from FilmsAI does not necessarily remove independent copies, search results or posts outside our control.

Authentication information and payout details supplied privately are not intended for public display. A PayPal or other support link you intentionally publish in a profile is public. Pending or rejected submissions are not made public merely because they were submitted; authorized personnel and relevant providers may access them for processing, review, support or legal purposes.

Do not put private information in public-facing fields unless you intend to publish it and have the necessary authorization. A publicly available creator profile is not permission for another party to use its information for every possible purpose.

5. Current technical services, storage and external destinations

Self-hosted infrastructure and playback

FilmsAI uses self-hosted virtual-server infrastructure deployed with Docker, a self-hosted Supabase/PostgreSQL stack and GoTrue authentication, and local video storage. FFmpeg prepares playback formats, and nginx serves catalog media. FilmsAI does not use Supabase Cloud for its production database or authentication service and does not use an external catalog-playback CDN in the current deployment described here.

Self-hosting does not mean no external provider is involved. The infrastructure and administrative services supporting the deployment process information as necessary for their functions. Software names do not, by themselves, establish that the software's developer receives user data.

Email through Resend

Resend processes recipient addresses, message content and technical information to deliver authentication and transactional emails. FilmsAI receives email-event records through Resend webhooks for communication and delivery administration.

Email-interaction tracking disclosure: FilmsAI uses Resend to deliver authentication and transactional email. FilmsAI's application webhook processing uses delivery-administration events such as bounce, failed, and suppressed messages. FilmsAI's application does not process open-tracking or click-tracking webhook events. Resend's own dashboard or provider settings may still apply at the email provider and are not controlled by FilmsAI's application code alone.

First-party measurement, cookies and browser storage

FilmsAI uses first-party database records for views and likes. It does not currently use Google Analytics, Google Tag Manager or a comparable third-party website-analytics service. This does not mean that account, engagement, request or operational records are never collected.

Browser storage and session mechanisms support sign-in and site functionality. You can manage or clear site storage in your browser, although doing so may affect sign-in and other features. Blocking browser storage does not necessarily prevent server-side request logging or erase records already lawfully held.

The current newsletter field saves the entered email address only in that browser's local storage. It does not enroll the address in a server-side FilmsAI newsletter list or send it to an external marketing-email service. Clear FilmsAI's site data to remove that local value. We will not treat the stored value as permission to enroll you in a future mailing list.

Browser privacy-signal disclosure: FilmsAI does not currently implement an automated response that changes processing based on Do Not Track or Global Privacy Control browser signals. Our no-sale commitment applies regardless of browser settings. Privacy requests can also be sent directly to krista@filmsai.com. Any legally required preference handling must be implemented; the email route is not a substitute for an automated signal requirement where one applies.

Authorized imports

Imports can retrieve selected files from Google Drive or selected AethrMovies content and metadata, including source media delivered through Bunny infrastructure before local ingestion. These are import sources, not FilmsAI's ordinary public catalog-playback providers.

We use the selected files, metadata, source references and authorization records for the requested import and associated submission review. Permission to import a film is not permission to copy an unrelated private account or enroll someone in another service.

Payments and outbound services

FilmsAI currently has no integrated website checkout or payment-processing API. Payments can be arranged manually through a service such as PayPal, so FilmsAI may still hold payout instructions and transaction records.

Creator support, social and sharing links can lead to services such as PayPal, Ko-fi, Patreon, Buy Me a Coffee, X, Instagram or YouTube. When you visit or interact with a third-party destination, it handles information under its own policies and may use its own tracking technologies. Posting a support link does not give FilmsAI unrestricted access to the creator's external financial account.

Processing locations

FilmsAI's operators are in the United States. Information can be processed by relevant infrastructure and service providers in the countries where their systems operate. The operators' physical location does not establish every server, backup or provider-processing location.

International processing must satisfy any applicable legal transfer requirements. Visiting the website alone is not blanket consent to an international transfer. Contact us for information about the processing relevant to your request; this policy does not claim certification under a transfer framework that has not been established.

6. Sponsors and advertising partners

A commercial sponsorship does not purchase access to private creator contact lists, payout information, account credentials or identifiable viewer histories. It does not buy training rights in creator uploads.

FilmsAI may report public program information and aggregate or appropriately de-identified results that do not identify individual viewers or reveal an identifiable person's viewing history. Sponsorship is not permission to provide sponsors with raw account-linked viewing records or to install undisclosed viewer-tracking tools.

If an optional campaign requires a creator to provide information directly to a sponsor, we will identify that arrangement and its purposes before participation. A sponsor may access information already published publicly, but that access does not override applicable law or grant unrestricted reuse rights.

7. Other disclosures, providers and legal requirements

We provide limited information to authorized personnel and providers as reasonably necessary for hosting, authentication, email, network and administrative services, support, payments, professional advice and the functions described in this policy. We do not authorize those recipients to independently sell users' information or use creator uploads for generative-AI training.

We may preserve or disclose information when required by law or valid legal process, or when otherwise legally permitted and reasonably necessary to investigate abuse, address serious safety or security concerns, or protect lawful rights. Any disclosure remains subject to applicable restrictions, including restrictions on identifiable video-viewing records.

Handling copyright notices and counter-notifications may require providing relevant information to the other party. Valid copyright counter-notifications, including their required contact details, are forwarded as described in the Copyright & DMCA Policy. Legal notices are not necessarily confidential.

Intimate-image and other sensitive safety reports are handled separately. We do not automatically forward a victim's report or private contact information to an uploader. Relevant legal reporting or preservation duties may require limited disclosure to the proper recipient.

8. Retention, deletion and privacy requests

Retention criteria

We retain information only for a reasonably necessary, identified purpose or applicable legal requirement, not indefinitely merely because it might someday be useful.

Account and profile records support an active account and necessary closure administration. Submission files and review records support processing, publication, corrections and relevant appeals. Unpublished, rejected or failed uploads are not kept indefinitely merely because they were submitted.

Program calculations and payment records are retained for completing and reconciling payments, applicable financial-record requirements and genuinely pending disputes. Rights and safety reports are retained as necessary to resolve the report, administer repeat-violation processes and meet specific legal duties.

Technical, raw engagement and security records are retained only while needed for their documented operational or security purpose, then deleted or appropriately de-identified. Identifiable viewing records remain subject to any applicable statutory destruction requirements. A hypothetical future dispute is not a general reason to keep everything forever.

Restricted backup copies may remain only for reasonably necessary backup or legal-preservation purposes. Backup retention does not authorize republication, new uses or extending a mandatory deletion deadline. Preserved evidence must not remain publicly accessible simply because it needs to be retained.

Your requests and choices

Email krista@filmsai.com to request access, correction, deletion, account closure or removal of public information, or to ask how information has been used or disclosed. Identify the relevant account or records without providing unnecessary sensitive information. Use profile-editing features where available for ordinary updates.

We may reasonably verify your identity or authority before disclosing or changing nonpublic information. We will not ask for your password or email sign-in code. Where applicable law allows an authorized agent to act, we will handle requests through that process.

Account closure, public-media removal and deletion of retained records are distinct actions. We will explain lawful reasons for retaining particular records or limiting a request, and respond within applicable legal deadlines. A required copyright or safety removal deadline is not extended by ordinary account-administration processes.

Depending on applicable law, you may also have rights to portability, restriction or objection, withdrawal of consent, opt-out of specified processing, an appeal of a denied request, or a complaint to a privacy regulator. We will not penalize you for exercising legally protected rights. Withdrawal of consent does not by itself make earlier lawful processing unlawful.

Optional marketing messages, if offered, will provide an unsubscribe method or a contact route. Necessary account, security, legal and transactional communications are separate from optional marketing.

9. Age eligibility and children's privacy

FilmsAI's creator-account, submission and creator-payment features are intended for adults. You must be at least 18 and meet the Terms' legal-capacity requirements to use those features. A maturity label does not waive those requirements.

FilmsAI does not offer creator accounts to children under 13. We do not knowingly collect, use or disclose personal information from children under 13 in violation of applicable law. An adult-age declaration or account rule does not replace obligations concerning the audience and data practices of particular viewing experiences.

If we learn that a creator account is used by an ineligible person, we will restrict or close the account as appropriate. If information has been collected from a child under 13 without legally required parental consent or another applicable exception, we will stop the affected processing and promptly delete improperly collected information as required by law. A prior false age declaration does not justify continuing improper processing.

A parent or legal guardian may email krista@filmsai.com to report an underage account or request review, deletion or cessation of collection or use of personal information collected from their child, to the extent applicable law provides those rights. Please identify the account or content without sending unnecessary sensitive information. We may reasonably verify parental authority before disclosing nonpublic information, without making the process unduly burdensome. An adult creator account is not required to make the request.

Where a narrow legal exception permits a one-time response to a child's message or another limited activity, information must be used and retained only as that exception permits. It must not be converted into an ordinary creator account, mailing subscription or unrelated profile.

Content may be suitable for younger viewers without being directed to children. Conversely, a creator's adult status does not establish that their content is intended only for adults. FilmsAI assesses relevant audience and data practices separately. Before introducing a children's-data activity that requires additional notices, parental controls, verifiable consent or other safeguards, FilmsAI must establish those requirements; publication of this paragraph is not a substitute for them.

10. Security

We use reasonable administrative and technical measures intended to protect nonpublic information and limit access to people with a legitimate operational need. No online service or storage system can guarantee absolute security.

Protect your email account and authentication links, and report suspected unauthorized access promptly. We do not request payment-service passwords or sign-in codes in ordinary support correspondence. Applicable security, breach-response, provider and legal-reporting requirements remain in effect regardless of these general statements.

11. Business transition and material policy updates

When a legally formed entity actually assumes operation, we will identify the new operator and update relevant notices. Information may transfer with the service to a lawful successor subject to applicable law and existing privacy commitments. Ownership or location changes do not themselves authorize personal-information sales, generative-AI training or materially broader use of previously collected information.

We will revise the effective date when materially changing this policy and give appropriate additional notice through the service or relevant account contact information. Where law requires consent or another authorization before new processing, we must obtain or establish it first. A silent edit or continued use will not be treated as permission to override the no-sale or no-training commitments.

12. Contact

FilmsAI Privacy Current operators: Krista Gable and Paul Hawkins Current operating location: North Carolina, United States Email: krista@filmsai.com

Use this contact for privacy and underage-account questions. Copyright and intimate-image removal have separate procedures on the Copyright & DMCA page. This interim Privacy Policy remains effective until properly replaced.