Privacy Policy

1. Overview & Scope

AI Films Media, a service of Innovation Forge LLC ("we," "us," "our"), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit aifilms.media or use our services.

This policy applies to all users of our website, marketing pages, waitlist, and any related services or applications.

2. Information We Collect

2.1 Information You Provide

• Contact information: Name, email address, company name when you join our waitlist or contact us
• Account data: Credentials, profile information, and preferences
• Communications: Messages, feedback, and support requests you send us
• Content: Prompts, scripts, media files, and creative briefs you upload
• Payment information: Billing details processed by our third-party payment processor (we do not store full card numbers)

2.2 Information Collected Automatically

• Device data: Browser type, operating system, device identifiers
• Usage data: Pages visited, features used, time on site, referral source
• Network data: IP address (hashed for storage), approximate geolocation (city-level)
• Cookies and similar technologies: See Section 5 below

2.3 Information from Third Parties

We may receive information from business partners, analytics providers, and public databases to supplement the data we collect directly.

3. How We Use Your Information

• To provide, maintain, and improve our services
• To process your waitlist registration and communicate about your application
• To personalize your experience and deliver relevant content
• To send transactional emails (confirmations, updates, support responses)
• To send marketing communications (with your consent; you may opt out at any time)
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with legal obligations and enforce our terms
• To conduct analytics and research to improve our platform

4. When We Share Your Information

We do not sell your personal information. We may share data in the following limited circumstances:

• Service providers: Hosting, email delivery, analytics, and payment processing partners who are bound by data processing agreements
• Legal compliance: When required by law, regulation, legal process, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
• With your consent: When you explicitly authorize us to share your information

5. Cookies & Tracking Technologies

We use the following categories of cookies:

• Essential cookies: Required for site functionality (session management, security). Cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our site (e.g., page views, scroll depth). Data is aggregated and anonymized.
• Functional cookies: Remember your preferences and settings for a better experience.

We do not use third-party advertising cookies or cross-site tracking pixels. You can manage cookie preferences through your browser settings.

6. Data Retention & Deletion

• Waitlist data: Retained while your application is active, plus 12 months after last contact
• Account data: Retained while your account is active, deleted within 30 days of account closure
• Generated content: Retained for 90 days after generation, then permanently deleted
• Analytics data: Aggregated and anonymized; raw logs deleted after 90 days
• Legal records: Retained as required by applicable law (e.g., tax records for 7 years)

You may request deletion of your data at any time by contacting privacy@aifilms.media.

7. Security Measures

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Hashing of PII at the storage layer (SHA-256 with salt)
• Access controls with role-based permissions and multi-factor authentication
• Regular security audits and vulnerability assessments
• Incident response procedures with breach notification within 72 hours

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights (United States)

8.1 California Residents (CCPA/CPRA)

• Right to Know: Request disclosure of what personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate data
• Right to Opt-Out: We do not sell personal information, so this right does not apply in the traditional sense
• Right to Non-Discrimination: We will not deny services for exercising your privacy rights

8.2 Other US State Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with privacy laws have analogous rights. Contact us to exercise them.

9. Your Rights (EU/EEA — GDPR)

If you are located in the European Economic Area, your rights include:

• Access: Obtain a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion ("right to be forgotten")
• Restriction: Limit processing of your data
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time
• Lodge Complaint: File a complaint with your local data protection authority

Legal bases for processing: Contract performance (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), consent (Art. 6(1)(a)), and legal obligations (Art. 6(1)(c)).

10. International Data Transfers

Your data may be transferred to and processed in the United States. We protect such transfers using:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all sub-processors
• Encryption and access controls that meet or exceed EU standards

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, contact us immediately.

12. AI-Specific Privacy Disclosures

• AI-generated outputs may be temporarily cached for delivery but are not retained beyond the stated retention period
• We may use anonymized, aggregated usage patterns (not your content) to improve system performance
• Our AI systems process data in secure, isolated environments with no cross-tenant data leakage
• See our AI Disclosure page for full details on our AI practices

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "Last Updated" date, and, where required, sending you an email notification. We encourage you to review this page periodically.

14. Contact Us

For privacy-related questions, requests, or complaints:

• Email: privacy@aifilms.media
• GDPR / Data Protection Officer: dpo@aifilms.media
• Mailing Address: Innovation Forge LLC, Attn: Privacy, [Address on file with state registration]

We will respond to verified requests within 30 days (or 45 days for complex requests, with notice).