Privacy

Cinella is production software for small video crews, run from the United Kingdom by one person. This page says what personal data it holds, why, and what you can ask for. The short version: it keeps what the product needs to work, it does not sell data, and your production data is yours.

Who is responsible

Cinella is the data controller for your account. Write to hello@cinella.app and I answer.

What is kept, and why

• Account data. Your email address and password (stored as a hash nobody can read), and your studio profile: name, contact details, logo, and the bank details you choose to put on invoices. Needed to run the service.
• Production data. The shoots, schedules, clients, contacts, documents, films, stills and invoices you create. This is your business data. It is processed only to run the product for you.
• Client page activity. When your client opens their link, confirms details, leaves a note, approves a cut or uploads a file, that is stored against your shoot so you can see it.
• Billing. Handled by a payment provider. Cinella never sees or stores your card number; it holds your subscription status and a customer reference.
• Email. Transactional email (sign-in links, client page notifications, trial reminders, billing notices) is sent through an email provider. Marketing email is not sent without asking first.
• Usage events. Lightweight product events (for example “client confirmed”) used for the features themselves and simple counts.
• Sign-up source. When you create an account, Cinella records where it came from: the page you arrived on, the referring site, any campaign tags or ad click identifiers in the link, and, where the page asked, the two answers you tapped about your last job. This is used to understand which ads and pages work, and nothing else.
• Advertising measurement. Only if you accept the cookie notice, the Meta Pixel loads to measure whether ads work, and for accounts that accepted, the same measurement events are also sent to Meta from Cinella’s own server (with your email in hashed form) so the counts stay accurate when a browser blocks the pixel. If you decline, the pixel never loads and those events are not sent.
• Sign-up and account events. Separately from the cookie notice, Meta is told from Cinella’s own server when four things happen: you submit the sign-up form, you create an account, you confirm your email address, and you build your first real shoot or start a paid plan. Each is one event carrying your email address in hashed form, a hashed account id, your IP address and browser type, and the ad click identifier if you arrived from an ad. This is how Cinella learns which ads bring people who actually use it. It happens server-side whatever your cookie choice, sets no cookies, and involves no Meta tracking of your browsing.

Where it lives

Data is stored with established cloud providers, which may process it in the UK, EU and US under standard contractual clauses. Card payments are handled by a payment provider and never touch Cinella.

How long it is kept

For as long as you have an account. If your subscription lapses, the account goes read-only and nothing is deleted: your data stays viewable and exportable. Review copies of films are removed a set number of days after a delivery closes; you choose the number. You can export everything as JSON from your Account page at any time, and you can ask for your account and all its data to be deleted for good.

What you can ask for

Under UK GDPR you can access, correct, export, restrict or delete your personal data, and complain to the ICO (ico.org.uk) if you think something is wrong. For any of these, email hello@cinella.app.

Cookies

Strictly necessary cookies keep you signed in and remember which build of a page you were shown. The only optional cookie is the Meta Pixel described above, and it never loads unless you say yes.

Changes

If this page changes in a way that matters, you will hear by email or in the app before the change takes effect.