Privacy Policy

Mila Studio ("us", "we", or "our") includes the milastudio.app website, the Mila Studio web application, and any other sites, applications, or software offered by Mila Studio (together considered the "Service").

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Definitions

Personal data means data about a living individual who can be identified from those data, or from those data combined with other information either in our possession or likely to come into our possession.

Usage data is data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Cookies are small pieces of data stored on your device.

Data controller is the person who determines the purposes for which and the manner in which any personal data is processed. For the purpose of this privacy policy, we are the Data Controller of your data.

Data processor (or service provider) is any person (other than an employee of the Data Controller) who processes data on behalf of the Data Controller. We may use the services of various service providers in order to process your data more effectively.

Data subject is any living individual who is the subject of personal data.

User is the individual using our Service. The User corresponds to the Data Subject.

Content refers to screenplays, scripts, character profiles, scene notes, project documents, and any other materials you create, upload, or store within the Service.

Information collection and use

We collect several different types of information for various purposes to provide and improve our Service to you.

Personal data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

• Email address

• First name and last name

• Profile image

• Records and copies of your correspondence, if you contact us

• Details of transactions you carry out through our Service, including subscription and billing information

We will not use your personal data to contact you with newsletters, marketing, or promotional materials unless you explicitly opt in. You may opt out of receiving any or all such communications at any time through your account settings or by following the unsubscribe link in any email we send.

Content data

We store the content you create within the Service, including screenplays, character profiles, scene notes, project metadata, and document history. This content belongs to you. We do not access, review, or use your content for any purpose other than providing the Service, unless required by law.

We do not use your content to train AI models.

Usage data

We may collect information that your browser sends whenever you visit our Service or when you access the Service via a mobile device ("Usage Data").

This usage data may include information such as your computer's Internet Protocol address (IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service via a mobile device, this usage data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers, and other diagnostic data.

Tracking and cookies data

We use cookies and similar technologies to track activity on our Service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of cookies we use:

• Session cookies. We use session cookies to operate our Service and maintain your authentication state.

• Preference cookies. We use preference cookies to remember your preferences and various settings, such as theme (dark/light mode), language, and editor preferences.

• Security cookies. We use security cookies for security purposes, including CSRF protection and session validation.

We do not use advertising cookies or third-party tracking cookies.

Use of data

Mila Studio uses the collected data for the following purposes:

• To provide and maintain our Service

• To authenticate your identity and manage your account

• To store and synchronize your content across devices

• To notify you about changes to our Service

• To allow you to participate in interactive features of our Service, such as collaboration and sharing

• To provide customer support

• To contact you about billing, account management, or other administrative matters

• To gather analysis or valuable information so that we can improve our Service

• To monitor the usage of our Service

• To detect, prevent, and address technical issues

• To fulfill any other purpose for which you provide it

We will never sell your personal data to any third party.

Retention of data

Mila Studio will retain your personal data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

When you delete your account, we will permanently delete all your personal data and content within 30 days. Backup copies may persist for up to 90 days before being automatically purged. When it is no longer necessary to retain your personal data, we will delete or anonymize it.

Transfer of data

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Your primary data is stored on servers operated by Supabase in the EU (Frankfurt, Germany). Our application is hosted on Vercel, which uses a global CDN, meaning some data may be cached or processed in locations outside the EEA.

If you are located outside of Israel and choose to provide information to us, please note that we process data in the EU (Frankfurt) and may transfer certain data internationally as needed to provide the Service.

Your consent to this privacy policy followed by your submission of such information represents your agreement to that transfer.

Mila Studio will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. No transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

Transferring your personal data out of the EEA

To deliver services to you, it is sometimes necessary to process your personal data outside the European Economic Area (EEA). These transfers are subject to special rules under European data protection law.

Non-EEA countries do not have the same data protection laws as the EEA. We will, however, ensure the transfer complies with data protection law and all personal data will be secure. Our standard practice is to use standard data protection contract clauses that have been approved by the European Commission.

If you would like further information, please contact us at the address listed below.

Your rights under the General Data Protection Regulation (GDPR)

The GDPR gives people under its protection, including people in the EEA and the United Kingdom, certain rights with respect to their personal data collected by us. Accordingly, Mila Studio recognizes and will comply with GDPR and those rights, except as limited by applicable law.

Right of access. You have the right to access the personal data we gather about you, and to obtain information about the sharing, storage, security, and processing of that data.

Right to correction. You have the right to request correction of your personal data if it is inaccurate or incomplete.

Right to erasure. You have the right to request that your personal data be erased from our systems (also known as the "Right to be forgotten"). Fulfillment of this request may prevent you from using the Service and may result in closing your account.

Right to complain. You have the right to make a complaint regarding our handling of your personal data with the appropriate supervisory authority.

Right to restrict processing. You have the right to request restriction of how and why your personal data is used or processed.

Right to object. You have the right, in certain situations, to object to how or why your personal data is processed.

Right to portability. You have the right to receive the personal data we have about you in a commonly used electronic format, and the right to transmit it to another party.

Right to not be subject to automated decision-making. You have the right to object to and prevent any decision that could have a legal or similarly significant effect on you from being made solely based on automated processes. This right is limited if the decision is necessary for performance of a contract between you and us, is allowed by applicable law, or is based on your explicit consent.

You can update the following personal data directly within your account settings: display name, profile image, and notification preferences.

For any other requests, please contact us at privacy@milastudio.app. We may ask you to verify your identity before responding to such requests. We will seek to deal with your request without undue delay, and in any event within 30 days in accordance with the requirements of the GDPR.

How to file a GDPR complaint

We hope that we can resolve any query or concern you raise about our use of your data. Please contact us at hello@milastudio.app to inform us of any concerns.

The GDPR also gives you the right to lodge a complaint with a supervisory authority in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.

Israeli privacy law

If you are located in Israel, you also have rights under the Israeli Privacy Protection Law, 5741-1981 (חוק הגנת הפרטיות), including the right to access, correct, and delete your personal data. To exercise these rights, contact us at privacy@milastudio.app.

Disclosure of data

General

Mila Studio may disclose aggregated, anonymized information about our users that does not identify any individual, without restriction.

Mila Studio may disclose your personal data and other information that we collect or you provide as described in this privacy policy:

• To contractors, service providers, and other third parties we use to support our business, who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them

• To fulfill the purpose for which you provide it

• For any other purpose disclosed by us when you provide the information

• With your consent

Collaboration and sharing

When you share a project or collaborate with other users through the Service, certain information may be visible to those users, including your display name, profile image, and email address. Content that you share with collaborators will be accessible to those users according to the permissions you set.

Business transaction

If Mila Studio is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

Legal requirements

Mila Studio may disclose your personal data in the good faith belief that such action is necessary to:

• Comply with a legal obligation

• Protect and defend the rights or property of Mila Studio

• Prevent or investigate possible wrongdoing in connection with the Service

• Protect the personal safety of users of the Service or the public

• Protect against legal liability

Security of data

We take appropriate precautions to protect your personally identifying information. Your account data and content are encrypted in transit (TLS) and at rest on cloud servers. We implement access controls and follow security best practices to safeguard your data.

Because all security measures are subject to circumvention, we cannot guarantee the absolute effectiveness of our security measures or our ability to prevent unauthorized third parties from unlawfully obtaining information that you provide to us. In particular, because email is an inherently insecure medium, you should not send sensitive data such as passwords or payment information to us by email.

If you have questions about our security practices, please contact us at security@milastudio.app.

Service providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analyzing how our Service is used.

These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Authentication

We use third-party service providers for authentication. We request access to your name, email address, and profile image. Their use is strictly limited to the practices described in the personal data section above.

• Google OAuth — Privacy policy

Database and infrastructure

We use third-party service providers for database hosting, authentication infrastructure, and real-time data services.

• Supabase — Privacy policy

Hosting and CDN

We use third-party service providers for application hosting and content delivery.

• Vercel — Privacy policy

Email and notifications

We use third-party service providers to send transactional emails such as authentication emails, account notifications, and service updates.

• Resend — Privacy policy

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party services for payment processing. We do not store or collect your payment card details. That information is provided directly to our third-party payment processors, whose use of your personal information is governed by their respective privacy policies. These payment processors adhere to the standards set by PCI-DSS.

Payment providers will be listed here when payment processing is implemented.

Analytics

We may use third-party service providers to monitor and analyze the use of our Service. If and when analytics services are implemented, they will be listed here with links to their respective privacy policies.

Error tracking

We may use third-party service providers to monitor and track errors in our Service. If and when error tracking services are implemented, they will be listed here with links to their respective privacy policies.

AI and machine learning

As of the effective date of this policy, Mila Studio does not use AI or machine learning features that process your content. If AI-powered features are introduced in the future, this policy will be updated to reflect how your data is used in connection with those features.

We will never use your content to train AI models without your explicit consent.

Links to other sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's privacy

Our Service is not intended for anyone under the age of 16 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.

Changes to this privacy policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

We will let you know via email and/or a prominent notice on our Service prior to the change becoming effective, and will update the "effective date" at the top of this privacy policy.

You are advised to review this privacy policy periodically for any changes. Changes to this privacy policy are effective when they are posted on this page.

Contact us

If you have any questions about this privacy policy, please contact us: hello@milastudio.app