Privacy Policy
Last updated May 11, 2026
This Privacy Policy explains how Magical Script (“we”, “us”) collects, uses, and protects information when you join the waitlist or use the beta service. We're a small team building carefully — this policy reflects our current practices and will be updated as the service grows.
1. What we collect
We collect only what we need to run the service:
- Email address, when you join the waitlist or sign up for beta access.
- Scripts and source material you upload (screenplays, treatments, loglines, beat sheets, reference images).
- Generated outputs (trailers, scene tests, character renders, posters, decks) created from your inputs.
- Usage telemetry — anonymized event data (page views, render starts, errors) used to operate and improve the service.
- Account metadata (display name, optional handles you provide), once accounts exist beyond the waitlist.
2. What we do not do
- We do not train AI models on your scripts or outputs. Period. Your drafts are not used to fine-tune our models or any third-party model we route to.
- We do not sell, rent, or share your scripts or generated outputs to third parties for marketing, advertising, or training.
- We do not run cross-site tracking pixels or third-party ad tags.
3. How we use what we collect
- To run the rendering pipeline and deliver your outputs.
- To send transactional and account email (waitlist updates, beta invites, render-complete notifications).
- To improve the service via aggregated, anonymized usage data.
- To investigate abuse and enforce the Terms of Service.
4. Subprocessors
We use third-party infrastructure to operate the service. Each subprocessor is bound by the same no-training, no-resale posture we apply to ourselves:
- Cloud hosting + storage for application and asset data.
- Inference providers for video, image, and language model rendering. Per provider, we set the “do not train on customer data” flag where the provider exposes one.
- Email delivery for transactional + waitlist mail.
- Payment processing (when paid tiers ship).
A current subprocessor list is available on request via the contact below.
5. Storage and retention
- Scripts and outputs are stored as long as your account is active, or until you request deletion (whichever comes first).
- Waitlist email addresses are stored until you unsubscribe or request deletion.
- Telemetry is retained for up to 18 months in aggregated form.
6. Your rights
You can:
- Request a copy of the data we hold about you.
- Request deletion of your scripts, outputs, or account.
- Unsubscribe from non-transactional email at any time.
- Where applicable, exercise your rights under the GDPR, the CCPA, or any other regulation that applies to where you live.
To make a request, email us via the contact below. We respond within 30 days.
7. Provenance and attribution
Every render generated by Magical Script carries a C2PA 2.0 provenance manifest — a cryptographically-signed record of which model, prompt, references, and version produced the asset. This metadata travels with the file and can be verified by any C2PA-aware tool. It protects your authorship and helps platforms identify AI-generated content honestly.
8. Cookies
We use essential cookies (session, CSRF) and an aggregate analytics cookie. We do not use third-party advertising cookies.
9. Security
We follow industry-standard security practices including TLS in transit, access controls on infrastructure, and audit logging on sensitive operations. No system is perfectly secure; if we discover a breach affecting your data, we will notify you within 72 hours of confirmation.
10. Children
Magical Script is not intended for users under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
11. International transfers
Our infrastructure may process data outside your country of residence. Where required by law, we use standard contractual clauses or equivalent safeguards.
12. Changes to this policy
We will update this policy as the service evolves. Material changes are emailed to active users at least 14 days before they take effect. The “last updated” date at the top reflects the most recent revision.
13. Contact
Questions or requests: hello@magicalscript.com.