Personal Data Processing Policy

1. General Provisions & Data Controller

1.1. This Personal Data Processing Policy is prepared in accordance with Federal Law No. 152-FZ "On Personal Data" and sets out the procedure for collecting, processing, and safeguarding the personal information of users of the CineChat Studio web service (the "Service").

1.2. The Data Controller is the Administrator of CineChat Studio (individual administrator of domain cinechat.ru).

1.3. The designated official channel for legal requests, subject access queries, and consent revocation is:info@cinechat.ru.

2. Legal Grounds & Processing Principles

Personal data processing is carried out lawfully, fairly, and transparently on the following bases:

• User consent provided during account registration or sign-in through affirmative action;
• Performance of the Terms of Service (Public Offer) between User and Controller;
• Legitimate interests in maintaining operational security, service resilience, and abuse prevention.

The Controller does not collect or process sensitive biometric or special category personal data.

3. Categories of Processed Data & Specific Purposes

Only the minimum necessary data is collected for specific, explicitly stated operational needs:

• User Authentication: Email address or public Telegram ID and username (when authenticating via Telegram Widget).
• Cloud Synchronization: Saved project titles, message cues, timing offsets, and skin parameters to enable cross-device editing.
• Draft Recovery: Automatic local storage caching to protect against accidental tab closure or network dropouts.
• Technical Diagnostics: Anonymized session IDs, device type, and browser agent. Client IP addresses are never stored in cleartext and are irreversibly salted with SHA-256 hashes.

4. Screenplay Confidentiality

We acknowledge the high creative and commercial sensitivity of film scripts. Screenplay texts, actor lines, and dialogue contents remain strictly confidential. They are stored in isolated databases and are never shared with third parties, ad networks, or used to train public machine learning models.

5. Data Localization

In accordance with Part 5 of Article 18 of Federal Law No. 152-FZ, recording, systematization, accumulation, storage, and retrieval of personal data are conducted using servers located within the Russian Federation.

6. Retention & Account Deletion Protocol

6.1. Personal data is retained until processing purposes are achieved or until the user revokes consent.

6.2. Upon receiving an account deletion request, the Controller permanently purges associated personal records and projects within 30 calendar days.

7. Cookies & Consent Choices

7.1. Essential Technical Cookies: Necessary session markers and localStorage data required for editor functionality, cloud saving, and security.

7.2. Anonymous Telemetry: Aggregated, non-identifying performance metrics. Dialogue texts and scripts are never included in telemetry packets.

7.3. Preferences: Users may select "Accept All" or "Essential Only" via the cookie banner upon first visit.

8. User Rights & Contact

Users may access, rectify, or request deletion of their personal information by emailing:info@cinechat.ru.