Privacy Policy
Last updated: 25 August 2026
1. Who is responsible
The data controller is [COMPANY NAME], VAT number [VAT NUMBER], registered office at [REGISTERED ADDRESS]. For anything about your data, write to ciao@breakdown27.com.
2. What happens to your screenplay, precisely
This is the part that matters most, so it is written without hand-waving.
- The PDF file is never uploaded. It is opened and parsed by code running in your browser. The file itself never reaches our servers.
- The breakdown is stored in your account. Scenes, headings, cast, page counts and the text of each scene are saved in our database so that your projects follow you across computers and across drafts. This is data you created, held for you.
- AI models see a scene only when you ask. When you start an analysis, the text of the scenes being analysed is sent to our AI provider for that job and nothing else. If you never start one, no model ever sees a line of your screenplay.
- Nothing is used for training. Not by us, and — under our agreement with the provider — not by them.
3. What we collect
| Data | Why | Legal basis |
|---|---|---|
| Email, name, password (hashed) | To have an account and sign in | Performance of the contract |
| Projects, drafts, scene text, breakdowns, notes | To provide the service and keep your work | Performance of the contract |
| Plan, subscription status, billing dates | To give you what you paid for | Performance of the contract |
| Number of scenes and credits used per month | To apply the quota of your plan | Performance of the contract |
| Payment data | Handled entirely by Stripe — we never see your card | Legal obligation, contract |
| Technical logs (IP, errors) | Security and keeping the service working | Legitimate interest |
We do not use advertising trackers, and we do not profile you.
4. Who else touches it
These are our processors. Each one only gets what it needs to do its job:
- Vercel — hosting of the application.
- Resend — sends the only two letters this app writes: the invitation when someone puts you on a film, and the link to set a new password. Nothing else is ever emailed, and there is no mailing list to be on.
- Neon — the database where your projects are stored.
- Anthropic — the AI models, only for the scenes you choose to analyse.
- Stripe — payments and invoices.
Some of these operate outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses. We never sell your data to anyone, for any purpose.
5. How long we keep it
Your projects stay as long as your account exists. Delete a project and it goes immediately; delete your account and everything goes with it. Invoices are kept for as long as tax law requires, which in most of Europe is ten years. Technical logs are kept for a few weeks.
6. Your rights
You can access, correct, delete, export and restrict the use of your data, and object to processing based on legitimate interest. Two of these you can exercise yourself, without asking anyone, from the account page in the app: Download everything and Delete my account. For the rest, write to us and we answer within 30 days. You can also complain to your data protection authority.
7. Security
Traffic is encrypted in transit. Passwords are stored hashed with PBKDF2 and never in clear text. Sessions use signed cookies. Access to the database is restricted to the application. No system is perfect: if a breach ever affected your data, we would tell you and the authority, as the law requires.
8. Children
The service is not intended for people under 18 and we do not knowingly collect their data.
9. Changes
If we change this policy in a way that matters, we will tell you by email before it takes effect. The date at the top always says when it was last touched.