1. Introduction
CinematicTale ("we", "us", or "our") operates the website https://cinematictale.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using CinematicTale, you agree to the practices described in this policy.
This policy is compliant with the Indian Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. For users in the European Economic Area, we also follow the principles set out in the GDPR where applicable.
2. Information We Collect
2.1 Information You Provide
- Account details: Name, email address, and password when you register.
- Profile information: Display name and profile photo (optional).
- Story content: Story prompts, generated text, and AI-generated images you create on the platform.
- Payment information: When you purchase a subscription or credits, billing details are processed by our payment provider. We do not store card numbers.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, session duration, and interaction patterns.
- Device information: Browser type, operating system, IP address, and device identifiers.
- Cookies and local storage: Used for authentication sessions and user preferences (theme, settings).
- Analytics data: Aggregated and anonymised usage statistics via Google Analytics 4 and Vercel Analytics.
3. How We Use Your Information
- To create and manage your account and authenticate you securely.
- To generate AI-powered stories and comic pages on your behalf.
- To process payments and manage your subscription or credit balance.
- To send account-related emails (verification, password reset, billing receipts).
- To improve the Service through aggregated usage analytics.
- To detect, prevent, and address technical issues or abuse.
- To comply with legal obligations under Indian law or other applicable law.
4. Third-Party Services
We use the following third-party services which may process your personal data:
Authentication, database (Firestore), and file storage. Data may be stored on Google Cloud servers.
Generating story text content based on your prompts. Your prompts are sent to Google's AI infrastructure.
Generating comic panel images from story descriptions.
Payment processing for subscriptions and credit top-ups. Razorpay processes card and UPI details — we do not store payment credentials.
Application hosting and deployment. Vercel may collect request logs and performance data.
Aggregated, anonymised usage analytics to help us improve the product.
Rate limiting to protect the API from abuse. Request identifiers are stored temporarily.
5. Data Storage and Security
Your data is stored on Google Cloud infrastructure via Firebase (servers located in the US and Europe). We implement industry-standard security measures including:
- Encrypted connections (HTTPS/TLS) for all data in transit.
- Firebase Security Rules that restrict database access to authenticated users only.
- Server-side API validation and rate limiting to prevent abuse.
- Passwords are never stored — we use Firebase Authentication which hashes credentials securely.
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, your personal information and stories are permanently deleted within 30 days, except where we are required by law to retain it longer (e.g., payment transaction records, which we retain for 7 years as required under Indian tax law).
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct your personal data via your Profile settings.
- Deletion: Delete your account and all associated data at any time from Settings → Delete Account.
- Withdrawal of consent: You may withdraw consent for marketing emails at any time.
- Data portability: Request an export of your story data by contacting us.
To exercise any of these rights, email us at support@cinematictale.com.
8. Cookies
We use cookies and similar technologies solely for:
- Authentication: A session cookie to keep you logged in.
- Preferences: Your theme (dark/light mode) and UI settings.
- Analytics: Google Analytics may set cookies to track anonymised usage patterns.
You can disable cookies in your browser settings. Disabling authentication cookies will prevent you from staying logged in.
9. Children's Privacy
CinematicTale is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page and, where appropriate, by sending an email to the address associated with your account. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: