Privacy policy

In short

Your script and production data belong to you. We don't sell it, use it for advertising or feed it to model training. When you use the app without an account, the data never leaves your browser.

The legal bases for processing, who receives your data and your rights under Turkish data protection law: privacy notice.

What data we keep

• Local draft: When you work without signing in, the project, script and breakdown stay in your browser's own storage; they are never sent to our server.
• Cloud project: Once you sign in, the project data (scenes, breakdown, cast, locations, schedule, call sheets) and your team members' email addresses are kept in our database.
• Account: Your email address. We don't store passwords; sign-in uses a magic link or a one-time code.
• Notifications: If you turn on notifications in the phone app, that device's push token is stored so we can deliver them. It is removed when you sign out or delete your account.

Where it lives

The database and files are hosted on Supabase, in the European Union region (eu-west-1). The app runs on Vercel. Access is restricted at the database level with row level security (RLS): only the members of a project can read that project's data.

AI and your key

AI features only run with a key you connect; we never make AI calls from our own account. The key belongs to your account (not to a project), is stored on the server encrypted with AES-256-GCM, is only decrypted for your own requests and is never shown in the interface again; you can change it, turn AI off or delete the key on the Account page. You choose the provider: Anthropic (Claude), OpenAI or Google Gemini. When you use an AI feature, only the data that task needs — script text, a breakdown or schedule summary, the question you ask — goes to the provider you chose and is billed to your key; that provider's own privacy terms apply. We never use your data to train AI models. If you don't connect a key, the mechanical breakdown and the local scheduling agent run and no data goes to an AI provider. Scanned-PDF reading (OCR) also runs in your browser, on your device.

Email

Invitation and call sheet emails are sent through Resend; the recipient address and the message content are passed to that service. Emails about discounts, offers and new features are sent only if you explicitly opt in: the box on the sign-up form or the Account page (the box is never ticked for you). You can withdraw at any time on the Account page or with the unsubscribe link in every such email. As proof of consent we keep when, where and with which wording you opted in; this record is deleted when you delete your account. Addresses of crew members invited to a project are never used for marketing emails.

Tracking

No advertising trackers and no third-party analytics code. Only the strictly necessary cookies that keep your session open are used.

Deleting your ProductionEngine account

You can delete your account yourself at any time, in the phone apps or on the web:

1. Sign in at app.productionengine.app or open the ProductionEngine app.
2. Tap your initials at the top right and choose Account settings.
3. Under Delete account, review the summary and confirm with your email address.

If you can no longer sign in, write to info@productionengine.app from the address on the account and we will delete it for you.

What is deleted right away: your account and profile, your notification tokens, your project memberships, and every project you manage alone, together with its scenes, schedule, call sheets, budget, documents and uploaded files.

What stays: a project that another manager also runs is handed over to that person instead of being deleted, so the rest of the crew keeps their work. Encrypted backups are kept for up to 30 days and then expire on their own.

Exercising your rights

To request a copy of your data, or to have your account and projects deleted entirely, write to info@productionengine.app. We act on deletion requests within 30 days at the latest; dropping out of backups can take a few weeks longer.