Privacy Policy

Effective Date: 22 August 2026

1. Who we are

MOVIEWRITER is operated by Viziappz ("we", "us"). We are the controller of the personal data described in this policy. You can reach us at moviewriter@vizimail.com.

2. What we collect

• Account data — your email address, the name you give us, and when you registered and last logged in. Login is by password or by a one-time link emailed to you.
• Your content — everything you create or upload in the applications: screenplays, plans, notes, character descriptions, storyboard prompts and images, cover images, and the AI results generated from them.
• AI call records — for every AI request: which application made it, the model used, token counts and cost, whether it ran on our keys or yours, the time, and the text of the prompt. Our own database keeps the first 2,000 characters of each prompt; our AI gateway (section 4) keeps the full prompt. The model's response is stored only in the application it belongs to, not in the call log.
• API keys you add — stored encrypted (AES-256) on this server and, while active, copied to our AI gateway, where they are stored encrypted separately. We never display a stored key back to you.
• Usage and event logs — which applications you open and the actions you take in them, used for support and for trial metering.
• Payments — if you pay for access, PayPal handles the transaction; we record the order reference, amount, currency and status. We never see or store card or bank details.
• Messages — support messages, feedback ratings and suggestions you send us.
• Technical data — one session cookie (MOVIEWRITER_SESSION) that keeps you logged in, and standard web-server logs (IP address, browser, pages requested). We use no analytics or advertising cookies and no third-party trackers.

3. Why we process it (legal bases)

• To provide the Services you signed up for, including running AI features on the content you submit to them — performance of a contract.
• To meter the free AI trial, enforce spend caps, prevent abuse and keep the Services secure — our legitimate interests.
• To answer support requests and tell you about changes that affect your account — performance of a contract and legitimate interests.
• To send the emails needed to run your account (login links, confirmations, support replies). We do not send marketing email.

4. AI features and third parties

When you use an AI feature, the application sends the relevant content to our AI gateway at ai.vizihost.com, which we operate, and the gateway sends it on to the AI provider for that feature. What is sent is the material the feature needs: typically the full text of the screenplay or plan you are working on, your settings for that feature, and — for image generation — your prompt and any reference images you have attached.

• To keep repeated passes over the same script cheaper, the script text may be sent as a provider "prompt cache" prefix. The provider holds that prefix for the short cache window its terms describe.
• During the free trial your requests run on our provider accounts; afterwards they run on the keys you add. In both cases the provider receives the content of the request.
• We do not use your content or AI output to train any model, and we have no arrangement for any provider to do so. Each provider's own handling of API inputs is set out in its terms above.
• AI-generated images from OpenAI carry embedded content credentials (C2PA) added by OpenAI, which we store untouched. Images from xAI arrive with no marking, so we embed one ourselves: an XMP packet with the IPTC "trained algorithmic media" digital-source type, the model name, and a link to the AI Transparency Statement. Images placed into PDFs lose embedded metadata, which is why the PDFs label them instead.

Other processors we rely on: PayPal (payments), an email delivery provider (transactional email sent from moviewriter@vizimail.com), and our hosting provider (servers and backups). We do not sell personal data and we do not share it with anyone else except where the law requires.

5. Publishing and sharing

Nothing you create is visible to other users unless you publish it. The Publisher application issues share links; anyone holding a share link can read what you published, and download its PDF if you enabled that, without logging in, until you unpublish it. Storyboard images and exported PDFs are stored under unguessable file names on our server.

6. How long we keep it

• Your account and content — until you delete them or delete your account.
• AI call records — deleted after 12 months, on this server and at our AI gateway. (The purge runs continuously as part of logging, so there is no batch window in which older records linger.)
• Exported PDFs — some applications keep a copy of each PDF they export on the server, under your account, so it can be re-downloaded; they are removed with your account.
• Web-server logs — rotated on a short cycle by our hosting provider.
• Provider-side copies — governed by each provider's own retention terms.

7. Deleting your account

Account → Delete account removes, in one step, your account record, your API keys, your content in every application, your AI call records, usage logs, messages and payment records from this server, and asks our AI gateway to erase its copy of your call records and any mirrored API keys. If the gateway cannot be reached at that moment the confirmation page tells you so; email us at moviewriter@vizimail.com and we will complete it within 30 days. Copies held by the AI providers are governed by their own terms (section 4); we cannot delete those for you.

8. Your rights

Depending on where you live you may have the right to access the personal data we hold about you, correct it, have it erased, receive a copy in a portable form, restrict or object to our processing of it, and complain to a data-protection authority. Most of your content can be exported from within the applications (PDF and Fountain). For anything else, email us; we will respond within 30 days and may ask you to confirm your identity from your registered address.

9. Security

Connections to the Services, to our gateway and to the providers use TLS. Stored API keys are encrypted at rest. Access to the database and logs is limited to the people who operate the Services and is used only for support, security and abuse investigation. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant authority as the law requires.

10. Children

The Services are not directed at children under 16 and we do not knowingly collect their data. If you believe a child has registered, email us and we will remove the account.

11. Changes to this policy

We will post any change here and update the effective date. If a change materially affects how your content is processed by AI providers, we will also tell you by email or with a notice inside the applications.

12. Contact

Email: moviewriter@vizimail.com