Privacy Policy

Cinella ("we", "us") is production day software for small video crews, operated from the United Kingdom. This policy explains what personal data we handle, why, and what your rights are. The short version: we collect what the product needs to work, we don't sell data, and your production data belongs to you.

Who we are

Cinella is the data controller for your account. Contact us any time at hello@cinella.app.

What we collect and why

• Account data - your email address and password (stored as a secure hash, never readable by us), and your company profile (name, contact details, logo, bank details you choose to put on invoices). Needed to provide the service.
• Production data - the shoots, schedules, clients, contacts, documents, files and invoices you create. This is your business data; we process it only to run the product for you.
• Client portal data - when your client opens a portal link, confirms details or uploads a file, we store that activity against your shoot so you can see it.
• Billing data - handled by Stripe. We never see or store your card number; we hold your subscription status and Stripe customer reference.
• Emails - we send transactional email (sign-in links, portal notifications, trial reminders, billing notices) via Resend. We don't send marketing email without asking first.
• Usage events - lightweight product events (for example "portal confirmed") used for the features themselves and simple aggregate metrics.
• Signup source - when you create an account we record where it came from: the page you arrived on, the referring site and any campaign tags or ad click identifiers in the link. We use this to understand which of our ads and pages work, nothing else.
• Advertising measurement - only if you accept the cookie notice, we load the Meta Pixel to measure whether our ads work. For accounts that accepted, we also send Meta the same measurement events from our own servers (with your email in hashed form) so the counts stay accurate when browsers block the pixel. If you decline, neither happens, and declining changes nothing about how the product works.

Where your data lives

Data is stored with Supabase (database, authentication, file storage) and the app is hosted on Vercel. Payments run on Stripe and email on Resend. These providers may process data in the UK, EU and US under appropriate safeguards including standard contractual clauses.

How long we keep it

For as long as you have an account. If your subscription lapses, your account goes read-only but nothing is deleted - your data stays viewable and exportable. You can export everything as JSON from your Account page at any time, and you can ask us to delete your account and all its data permanently.

Your rights

Under UK GDPR you can access, correct, export, restrict or delete your personal data, and complain to the ICO (ico.org.uk) if you think we've got something wrong. For any of these, email hello@cinella.app - a human reads it.

Cookies

We use strictly necessary cookies to keep you signed in. The only optional cookie is the Meta Pixel described above, and it never loads unless you say yes.

Changes

If we change this policy meaningfully, we'll tell you by email or in the app before the change takes effect.