Privacy Policy

1. Introduction

Catana Group LLC, a Delaware limited liability company (“we,” “us,” or “our”), operates ScriptShield (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting the privacy of creators and their intellectual property.

By using ScriptShield, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described here, please do not use the Service.

2. Information We Collect

• Account Information: When you create an account, we collect your name, email address, and password. If you subscribe to a paid tier, payment information is collected and processed directly by Stripe — we do not store your credit card details on our servers.
• Profile Information: You may optionally provide additional information such as a display name, bio, headshot photo, and contact details for your public creator portfolio.
• Creative Works: Depending on your subscription tier, you may upload manuscripts, screenplays, and other creative works. On the Free tier, only a cryptographic hash (SHA-256) of your work is generated in your browser and stored — your manuscript file is never transmitted to our servers. On paid tiers, uploaded manuscripts are stored with encryption at rest.
• Certificates and Metadata: We store authorship certificates, content hashes, timestamps, certificate numbers, and associated metadata (title, genre, logline, work type) that you provide.
• Distribution Data: When you share your work through ScriptShield, we collect and store the recipient's name, email address, company, the date of sharing, NDA acknowledgment status, and access logs (including timestamps and IP addresses of views).
• Usage Data: We automatically collect information about how you interact with the Service, including IP address, browser type, operating system, referring URLs, pages viewed, and timestamps of access.
• Poster Images: If you upload poster images for your works, these are stored in our system and may be displayed publicly on your portfolio page if you enable that feature.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate authorship certificates and evidence documentation
• Facilitate distribution tracking and NDA acknowledgment
• Process payments and manage subscriptions
• Send service-related communications (such as certificate generation confirmations, distribution notifications, and account updates)
• Respond to your inquiries and support requests
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

We do not use your creative works to train artificial intelligence models. We do not sell your manuscripts or creative content to third parties. Your works are your property.

4. How We Share Your Information

5. Data Security

We implement industry-standard security measures to protect your information, including encryption at rest for stored manuscripts, secure HTTPS connections for all data in transit, row-level security policies on our database, and secure authentication practices including leaked password protection.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your account information and associated data for as long as your account is active. Authorship certificates and their associated metadata are retained indefinitely to preserve the evidentiary value of the certification. If you delete your account, we will delete your personal information and uploaded manuscripts within 30 days, except for certificate records which are retained as part of the permanent verification system.

You may request deletion of your data at any time by contacting us at privacy@scriptshield.app.

7. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your information (subject to the certificate retention policy described above)
• The right to data portability (receiving your data in a structured, machine-readable format)
• The right to opt out of certain data processing activities

To exercise any of these rights, please contact us at privacy@scriptshield.app. We will respond to your request within 30 days.

8. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. We do not sell personal information. You have the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; and the right to non-discrimination for exercising your privacy rights.

9. International Users

ScriptShield is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, we process your data on the legal bases of contract performance (to provide the Service), legitimate interest (to improve and secure the Service), and consent (where specifically requested).

10. Children's Privacy

ScriptShield is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

11. Cookies and Tracking Technologies

ScriptShield uses essential cookies to maintain your authentication session and provide core functionality. We do not use third-party advertising cookies or tracking pixels. We may use analytics to understand how the Service is used, but this data is aggregated and does not identify individual users.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Service and updating the effective date. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

13. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: