Privacy Policy
Last updated: 2 October 2026
1. Who we are
ScriptedPlannr is a tool operated by Deep Fusion Films Limited ("Deep Fusion Films", "we", "us", "our"), a company registered in England and Wales (company number 14898165), with its registered office at 15 Neptune Court, Vanguard Way, Cardiff, Wales, CF24 5PJ.
Deep Fusion Films is the data controller for the personal data described in this policy. Questions about how we handle your data can be sent to [email protected].
2. What data we collect
When you use ScriptedPlannr we collect:
- Account data — your email address and password (stored as a secure hash), provided when you register for an account or sign in via Google.
- Usage data — login timestamps, script upload events, and similar activity records generated while you use the tool.
- Content data — screenplay files you upload and the breakdown data generated from them (scene headings, cast lists, props, locations, and similar production elements).
We do not collect payment card details or any special-category personal data. Subscription payments are handled by Stripe; we receive only a customer reference and subscription status.
3. How we use your data
- To authenticate you and provide access to the tool.
- To store and retrieve the scripts and breakdown data you create.
- To maintain the security and integrity of our systems.
- To comply with legal obligations.
4. Legal basis for processing
Under UK GDPR, we rely on contract performance (Art. 6(1)(b)) as our primary legal basis — we cannot provide ScriptedPlannr without processing your email address and content. We rely on legitimate interests (Art. 6(1)(f)) for security monitoring and system logs, balanced against your privacy rights.
5. Third-party processors
When you trigger an AI analysis of a scene, the screenplay text for that scene is sent to Google Gemini (Google LLC) for processing. Google acts as a data processor on our behalf under a data processing agreement. Screenplay content is used only to generate breakdown data and is not used to train Google's models.
We use a customer support and activity logging service operated by Deep Fusion Films to record login events and similar operational activity. Log entries sent to this service contain a pseudonymous identifier derived from your email address (a one-way hash), not your email address itself. This service acts as a data processor on our behalf.
We also use infrastructure and hosting providers (including cloud database services) to store and run the application. Any third party processing data on our behalf is required to protect it under a written data processing agreement.
6. International data transfers
Some of our service providers, including Google (for Gemini AI processing), may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Addendum or equivalent standard contractual clauses.
7. How long we keep data
| Data type | Retention period |
|---|---|
| Account data (email, login records) | For the duration of your account, plus 12 months after closure |
| Scripts and breakdown data | Until you delete the script or close your account |
| Background job records | 90 days |
| Security and system logs | 12 months |
| Revoked authentication tokens | Until the token's original expiry time |
8. How we protect your data
We use appropriate technical and organisational measures to protect your data, including:
- Refresh tokens are encrypted at rest using symmetric encryption (Fernet/AES-128).
- All data in transit is encrypted via TLS.
- Role-based access control limits which systems and personnel can access data.
- Database environments are isolated from public internet access.
No system is completely secure. In the event of a serious data breach we will notify affected individuals and, where required, the UK ICO.
9. Cookies
ScriptedPlannr uses the following cookies, all of which are essential to the tool's operation. No tracking or advertising cookies are used.
| Cookie | Purpose | Type |
|---|---|---|
access_token |
Authenticates your session with the API | HttpOnly, session-scoped |
csrf_token |
Protects against cross-site request forgery | JS-readable, session-scoped |
| Session cookie | Maintains your login state | HttpOnly, session-scoped |
You can control cookies through your browser settings. Disabling these cookies will prevent you from logging in and using the tool.
10. Your rights
Under UK GDPR you have the right to:
- Request access to the personal data we hold about you (Art. 15)
- Request correction of inaccurate data (Art. 16)
- Request deletion of your data in certain circumstances (Art. 17)
- Object to or restrict certain processing (Art. 18, 21)
- Request a portable copy of your data (Art. 20)
- Complain to the UK Information Commissioner's Office at ico.org.uk
To exercise any of these rights, contact us at the address below.
11. Children's privacy
ScriptedPlannr is intended for professional use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.
12. Changes to this policy
We may update this policy to reflect changes to the tool or legal requirements. The "last updated" date at the top of this page will always reflect the current version. Continued use of Scripted Planner after a material change constitutes acceptance of the updated policy.
13. Contact
Deep Fusion Films Limited
15 Neptune Court, Vanguard Way, Cardiff, Wales, CF24 5PJ
Email: [email protected]