Privacy Policy

1. Who We Are

UXI Digital (“we,” “us,” “our”) operates the UXI platform at uxi.digital, an AI‑powered motion graphics and production management service for film and television. This policy explains what data we collect, why, and how we protect it.

2. Data We Collect

Account Information

When you create an account we store your name, email address, and optional avatar image. If you sign in with Google or Microsoft, we receive your name, email, and profile picture from the OAuth provider.

Production & Project Data

Content you create on the platform — productions, scenes, call sheets, scripts, animation projects, and related assets — is stored in our database so you can access and collaborate on it.

Crew & Contact Information

If you use the production management features, you may enter crew member details (name, email, phone, department, role, rates). This data is scoped to your productions and governed by row‑level security.

When you invite a crew member by email, we send that person a transactional invitation on your behalf and store their address as part of your production’s records. For crew details you enter about other people, you are responsible for having the right to share them with us; we process that information only to run your production (rosters, call sheets, day‑out‑of‑days, payroll math) and never use it for advertising or sell it. Crew members who join a production can see and correct their own information through the crew portal.

Operational emails such as call sheets include standard delivery, open, and click measurement, which powers the delivery receipts producers see.

Gmail Integration (Optional)

Gmail integration is not currently offered publicly. Luna does not currently connect to Gmail, sync Gmail inbox data, or send Gmail messages for launch users.

Mobile Phone Numbers & Messaging Data

If you provide a mobile phone number — for your own account, or when inviting crew, talent, vendors, or other recipients — we collect the number, your messaging consent status, message delivery metadata (timestamps, delivery state, opt‑in/opt‑out records), and the content of messages you send or receive through Luna. SMS, MMS, RCS, and WhatsApp messages are delivered through Twilio, which processes this data on our behalf.

We do not sell, rent, or share mobile phone numbers, SMS opt‑in data, or messaging consent information with third parties or affiliates for their own marketing or promotional purposes. We may share mobile information with service providers (such as Twilio) only as needed to operate Luna’s messaging services.

Payment Information

Payments are processed by Stripe. We never see or store your full credit card number, CVV, or bank account details — those are collected directly by Stripe via PCI‑DSS compliant payment forms. We store only your Stripe customer ID, subscription status, plan tier, billing email, last‑four digits of your payment method (for display), and invoice history. Stripe’s handling of cardholder data is governed by Stripe’s Privacy Policy.

Usage & Analytics

We use Vercel Analytics and Vercel Speed Insightsto collect anonymous performance and page‑view data. We also log activity events (e.g., project opens, edits) internally to power your dashboard and collaboration features.

3. Cookies, Local Storage & Tracking

Strictly Necessary Cookies

We use a small number of essential cookies to keep you signed in and to make the platform function. These are set by our authentication provider (Supabase Auth) and contain encrypted session tokens — not personal data. Without them, you would need to log in on every page load and core features (autosave, real‑time collaboration, role checks) would break. These cookies cannot be disabled while using the service.

Local Storage & IndexedDB

We use your browser’s local storage and IndexedDB to cache UI preferences, draft content, and offline data for the Luna progressive web app. This data lives on your device and is not transmitted to us except when synchronizing with your account.

Analytics

We use Vercel Analytics and Vercel Speed Insights, which collect aggregated, anonymized performance and page‑view metrics. Vercel Analytics is cookie‑free by default.

Error Monitoring & Session Replay

We use Sentry for error monitoring so we can detect and fix crashes. By default, error monitoring runs without personal information (PII) attached and without session replay. Session replay — which can record how a page looked and behaved during an error — is enabled only with your consent, when you opt into the “Help us make Luna better” program.

We do not run advertising cookies, cross‑site tracking pixels, or third‑party marketing trackers, and we never sell behavioral data to advertisers.

Help Us Make Luna Better (Optional)

You can optionally opt into our “Help us make Luna better”program. When you do, our custom interaction analytics and product‑usage signals collect structural product‑usage data — counts, shapes, and feature interactions — to help us improve Luna. This never includes your script text, talent or location names, or other personal information. This data is retained for 12 months, and you can delete it at any time via the self‑serve control in Settings. The program is off by default and revocable anytime.

Browser Controls

You can clear cookies and local storage at any time through your browser settings. Doing so will sign you out of Luna and clear cached preferences.

4. How We Use Your Data

• Provide the service — authenticate you, store your projects and productions, enable collaboration.
• AI features— when you use AI‑powered features (script parsing, scheduling assistant, production planning), relevant content is sent to our AI providers (OpenAI, Anthropic) for processing. Your data is never used to train third‑party AI models.
• Analytics — understand how the platform is used so we can improve it.
• Communications — send invitation emails, call sheet distributions, and service notifications you have opted into.

5. Third‑Party Services (Subprocessors)

We share data with the following subprocessors to operate the platform. Each processes data under its own privacy policy and only as needed to provide the service.

We do not sell your data to any third party. Region reflects each provider’s default processing location; providers may use additional regions per their own policies.

6. Data Security

• All traffic is encrypted in transit via HTTPS with HSTS enforced.
• Database access is governed by row‑level security (RLS) — users can only access their own data.
• Security headers (CSP, X‑Frame‑Options, X‑Content‑Type‑Options) are set on all responses.

7. Data Retention & Deletion

Your data is retained for as long as your account is active. You can delete your account yourself at any time from Settings → Danger zone: the deletion is immediate, and all associated profile data, projects, productions, and related records are permanently removed via cascade. Backups may retain data for up to 30 days after deletion. If you would rather we handle it, you can still contact us at the address in Section 10.

8. Your Rights

You may:

• Access your data through your account dashboard.
• Correct your profile information in settings.
• Deleteyour account and all associated data yourself from Settings → Danger zone (see Section 7).
• Manageavailable third‑party connections from settings.
• Opt outof non‑essential emails via notification preferences.

For data export or other privacy requests, contact us at the address below.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via in‑app notification or email. Continued use of the platform after changes constitutes acceptance.

10. Contact

Questions about this policy, data export requests, or other privacy matters? Reach us at support@uxi.digital.