Privacy policy

1. Information we collect

Information you provide

• Account: name, email, password (hashed by our auth provider), profile handle, avatar, bio, location, roles, social handles, and payout details.
• Invite requests: name, email, phone (optional) submitted through our pre-launch invite form.
• Demo and beta requests: your phone number, along with the other details you enter, when you submit our demo request form (/demo) or beta form (/beta). We use phone numbers collected through these forms only to contact you about Crelace.
• Content: scripts, storyboards, characters, schedules, budgets, files, moodboards, messages, and any other material you create or upload.
• Communications: messages you send us or to other users through the Service.

Information collected automatically

• Usage: pages viewed, actions taken, features used, referrer, and timestamps.
• Device and network: browser type, operating system, device identifiers, and IP address.
• Cookies and similar technologies: to keep you signed in, remember preferences, and measure product performance.

Information from third parties

If you sign in with a provider such as Google, we receive your name, email address, and a stable identifier from that provider. We do not receive your provider password.

2. How we use information

• Provide, maintain, and improve the Service.
• Authenticate you, secure your account, and prevent abuse.
• Process transactions and manage credits, payments, and payouts.
• Contact you about Crelace using the phone number you gave us in the demo request or beta form, and for no other purpose.
• Send transactional emails (invites, notifications, receipts, alerts) and, with your permission, product updates.
• Personalize recommendations and connect you with relevant jobs, crew, and productions.
• Comply with legal obligations and enforce our Terms of Service.

3. How we share information

We do not sell your personal information. We share it only as follows:

• With other users when you post publicly or collaborate on a workspace (for example, your profile is visible to signed-in users; workspace members see each other's activity).
• With service providers that operate on our behalf under confidentiality obligations, including Clerk (authentication), Neon (database), UploadThing (file uploads), Ably (real-time messaging), Resend (email), Stripe (payments), Anthropic, OpenAI, and Google (AI features), Higgsfield (image and video generation), Replicate (AI models), and Vercel (hosting).
• For legal reasons if we believe disclosure is required by law, subpoena, or to protect the rights, property, or safety of Crelace, our users, or others.
• In a business transfer such as a merger, acquisition, or sale of assets, with notice to you where required by law.

4. Retention

We retain personal information for as long as your account is active, as needed to provide the Service, and as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your data within a reasonable period, subject to backups and legal retention requirements.

5. Your rights and choices

• Access, correction, deletion: you can view and edit most of your information in your dashboard, or request access, correction, or deletion by emailing us.
• Export: you can request a machine-readable copy of your content.
• Marketing emails: you can opt out via the unsubscribe link in any marketing email; transactional emails are required for account operation.
• Cookies: most browsers let you refuse cookies. Doing so may limit some features.

Depending on where you live, you may have additional rights under applicable law (for example, GDPR, DPDP Act, or CCPA). Contact us to exercise those rights.

6. Security

We use industry-standard measures to protect your information, including encryption in transit, access controls, and provider-managed infrastructure. No system is perfectly secure. Please choose a strong password and keep your credentials confidential.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete it.

8. International transfers

We are headquartered in India and use service providers in other countries. By using the Service, you consent to your information being transferred to and processed in those jurisdictions.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service. The "Last updated" date above tells you when this policy was last revised.

10. Contact us

Questions or requests: admin@plainworks.io.
Hyderabad Feed · Hyderabad, India.