Privacy Policy

Last updated: October 21, 2026

1. Controller

The controller for data processing on filmaris is Johannes Jägers, Lohengrinstr. 21, 42477 Radevormwald, Germany (see the Imprint). filmaris GmbH is being founded. Until its registration, the operator is Johannes Jägers. Contact for data protection: Johannes Jägers, at the same address or via the contact page.

2. What data we process

Account data

Email address, password (stored only as a cryptographic hash by our authentication provider), display name, language/locale, and your credit balance and transaction history inside the Service.

Early access list

If you ask for early access before launch, we store your email address, which of the two forms on the page you used, and how you reached our site: the referring website, any campaign parameters in the link you followed (for example utm_source, utm_medium, utm_campaign, gclid, fbclid), the page you landed on, your browser's language setting, the time of that first page view, and the country your request came from as reported by our CDN. We do not store your IP address with this record. The arrival details are read once per browser session from your browser's session storage and are used only to understand which channels people find us through.

We also record two technical signals that help us tell automated submissions apart from real ones: whether the page's own script ran, and how long the form was open before it was sent.

The list uses double opt-in: we send one email asking you to confirm, and we store when that email was sent and when you confirmed. Without your confirmation we do not write to you again. Addresses added before we introduced this confirmation step are marked accordingly. You can ask us to remove your address at any time using the contact details in Section 1.

Your content

The projects you create: scripts, prompts, settings, uploaded media, generated images, video and audio, and exported films. Media files are stored in our object storage and delivered via CDN; database records are stored with our database provider. When you first upload a file, we store your confirmation that you hold the rights to it (date and text version) as evidence.

Books and screenplays you import. We store the file in your account so you can convert it again, and the screenplay made from it in your project. For every imported file we store your confirmation that you hold the rights to adapt it into a film (date, text version and a fingerprint of the file). An imported text is used only to write your screenplay and build your project — never for anything else, and not for the anonymized uses described under "Generation data". You can delete an imported file at any time in your account or on the import page; it moves to the trash and is deleted permanently after 14 days, or at once if you choose "Delete now".

Songs you import. We store the file in your account so you can convert it again, and its analysis (beats, sections, the lyrics with their timing) for the same reason. For every imported song we store your confirmation that you hold the rights to use it in a film (date, text version and a fingerprint of the file). To analyse the song, it goes through fal.ai to the speech-to-text model of ElevenLabs and to a Gemini model of Google. An imported song is used only to write your screenplay, to build your project and as the music of your film, never for anything else and not for the anonymized uses described under "Generation data". A film you make from it keeps its own copy of the song as its music. You can delete an imported file like an imported book.

Showcase

Films exported on a plan with public media (currently Free and Starter), and films you release for the showcase on other plans, may be shown by filmaris on its website, social media and advertising under the showcase license in section 5 of the Terms of Service. Films whose project contains your own uploads are never shown. filmaris selects the films itself; a film shown carries no name unless you are asked first.

Generation data

For every AI generation we record the exact prompt and settings sent, the model used, the result, automatic quality-review results, error information, cost accounting, and your accept/reject/regenerate choices. We use this data to operate the Service (e.g. showing your generation history, refunding failed generations) and — in anonymized and aggregated form, with personal identifiers and account references removed — to improve generation quality, evaluate and train quality-assessment systems, and compile statistical model benchmarks. Anonymized data is never used to reproduce or distribute your work. Prompts may contain the names of fictional characters; the Terms do not allow entering personal data of real persons in prompts or other text fields. Projects that belong to an organisation on a Team or Enterprise plan are excluded: we use their data only to provide the Service.

Payment data

Purchases are processed by a merchant of record — Paddle or Stripe (Stripe Managed Payments). The merchant of record is an independent controller for the checkout and processes your payment details under its own privacy policy; we receive only transaction metadata (product, amount, status) — never your full card details.

Technical data

Server logs and error logs (including IP address, browser information, requested URLs, timestamps) and your IP address for rate limiting and abuse prevention. We also record first-party usage events (pages visited, features used) to understand and improve the product. We use no advertising trackers. For visitors outside the EU, Cloudflare, our CDN provider, counts page views and load times with Cloudflare Web Analytics; it sets no cookies and does not recognise individual visitors. Before you sign in, register or start the free script writer, Cloudflare Turnstile checks that you are not a bot; it processes your IP address and browser signals for this purpose. When you create a video of a scene or a film in your browser (browser export, download on the review pages), the video software used for it, Remotion, reports this to Remotion AG, Zurich, Switzerland, for its licence count: our website’s address, whether the video was created, and your IP address — no video content and no project data. Remotion processes this data as an independent controller; Switzerland has an EU adequacy decision. When you use the free script writer, we record your steps through it: the sentence you enter on the start page, the logline you choose (and whether it was your own or a suggestion), your film settings (language, length, style, format), the page and campaign that brought you to us, your country and your device type.

Language-model logs. For every request to a language model (script writing, book conversion, screenplay import) we keep the exact text sent and the answer received, to find and fix errors. These logs are deleted after 24 hours and are not included in backups.

Your own API keys (optional)

If you connect your own AI-provider API keys, they are stored encrypted and used exclusively to perform the generations you request. They are never readable by other users or displayed back in full.

3. Purposes and legal bases (GDPR)

• Providing the Service (account, projects, uploads, imported books, screenplays and songs, generations, payments) — Art. 6(1)(b) GDPR, performance of contract. Processing your uploads and imports is part of the service you order; the rights confirmations at the first upload and for each imported file are contractual assurances, not consents.
• Finding and fixing errors (language-model logs, error logs) — Art. 6(1)(f) GDPR, legitimate interest in a working service.
• Showcase (showing licensed films, keeping them after account deletion) — Art. 6(1)(f) GDPR, our legitimate interest in presenting our product under the license in the Terms of Service; films are shown without your name and never contain your own uploads.
• Security and abuse prevention (logs, rate limiting) — Art. 6(1)(f) GDPR, legitimate interest in a secure service.
• Product improvement (first-party usage events; anonymized generation data) — Art. 6(1)(f) GDPR; anonymized data is no longer personal data.
• Transactional email (account and service notifications, sent from our own mail server) — Art. 6(1)(b) GDPR. We do not send marketing email without your consent (Art. 6(1)(a)). For each email we record the recipient, subject, time and whether it was sent — not its content — to find delivery errors (Art. 6(1)(f) GDPR).
• Early access list (your address and the launch invitation) — Art. 6(1)(a) GDPR, your consent, given by submitting the form and confirming it by email; you may withdraw it at any time with effect for the future.
• Attribution of early-access signups (referrer, campaign parameters, landing page, language, country) — Art. 6(1)(f) GDPR, our legitimate interest in knowing which channels our audience reaches us through. No profile is built. For the free script writer, this arrival data is stored together with the steps described in Section 2.
• Measuring the free script writer (the data listed in Section 2) — Art. 6(1)(f) GDPR, our legitimate interest in learning which films visitors want to make and where they stop.
• Reports of illegal content (report form, Imprint contact point) — Art. 6(1)(c) GDPR in conjunction with the EU Digital Services Act.
• Confirmation e-mail with the accepted Terms — Art. 6(1)(b) and (c) GDPR.
• Legal obligations (e.g. accounting records) — Art. 6(1)(c) GDPR.

Providing your e-mail address and a password is required to conclude the contract; without them we cannot create an account. All other data is optional or arises from your use of the Service. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

4. Recipients and processors

We use the following service providers (processors, unless noted). The complete list — with each provider's purpose, data, location and what its terms say about using the data — is on the Service Providers page.

• IP-Projects — Hosting of the application and the database — the servers that run filmaris (Germany (Frankfurt)).
• Cloudflare — Content delivery, DNS, bot check (Turnstile), media storage (R2) and backups (Storage in Western Europe; delivery network worldwide).
• Amazon Web Services — Video rendering (Remotion Lambda) (EU (Frankfurt, Germany)).
• Sentry — Error tracking — reports of program errors (EU (Frankfurt, Germany)).
• webtropia — Hosting of our own mail and status server (Germany).
• AI providers — fal.ai, OpenRouter, Anthropic, OpenAI, Google, xAI, DeepSeek models, Black Forest Labs, Ideogram, Recraft, ByteDance, MiniMax, Kling, Lightricks, Pika, Topaz Labs, Vidu, Alibaba Cloud, ElevenLabs: when you start a generation, the prompt and any text or reference media needed for it are sent through fal.ai (language models also through OpenRouter) to the model you chose. fal.ai's terms, summarised below this list, apply.
• Paddle — Checkout, payment, invoices, taxes (merchant of record) (independent controller).
• Stripe — Checkout, payment, invoices, taxes (merchant of record, Stripe Managed Payments) (independent controller).
• Your own fal.ai API key — requests made with it run under your own agreement with fal.ai.

All AI models are provided through fal.ai (Features & Labels, Inc.). When filmaris runs a generation on its own fal.ai account, fal.ai processes the data as our processor under its Data Processing Addendum; when you connect your own fal.ai API key, your own agreement with fal.ai applies. In both cases fal.ai’s terms provide, as of 2 October 2026, in summary: fal.ai does not use inputs or outputs to train or develop its products or services (it may use anonymized, aggregated usage data), and every model we offer is marked “Commercial use” by fal.ai, so its outputs may be used commercially. This is a summary for information; for fal.ai’s own commitments, fal.ai’s current documents are authoritative.

fal.ai Terms of Service · fal.ai Data Processing Addendum · fal.ai API Services Terms

7. Retention and deletion

• Account and project data are kept while your account exists.
• Deleted items go to a trash area you can restore from for 14 days; after that, or when you empty the trash or delete your account, they are removed permanently from the live systems.
• Backups expire on a rolling schedule: daily copies after 7 days, weekly after 4 weeks, monthly after 6 months.
• Account deletion: you can delete your account in your account settings. It is carried out after 14 days (logging in before then restores it) or immediately if you choose so. We then delete your profile, projects, scripts, uploads, generated media, exports, API keys, confirmations, your name and e-mail address in our error logs, the record of e-mails sent to you, and early-access or contact requests made with your address. We keep, without any reference to your account: films covered by the showcase license, anonymized generation data (prompts, settings, quality reviews, error information), your steps through the free script writer with the sentence, logline and settings you entered (see Section 2), and billing and cost records — the latter also to answer payment disputes and for statutory accounting periods.
• Guest sessions (the free script writer before you give an e-mail address) are deleted after 30 days without activity.
• Language-model logs are deleted after 24 hours; error logs after 5 days; server logs at our hosting provider after 7 days; page-view and usage events and the record of sent e-mails after 90 days.
• Imported books and screenplays stay in your account until you delete them or your account (trash: 14 days).
• According to fal.ai, the AI providers reached through fal.ai delete request data within 24 hours; fal.ai itself does not store our request data and deletes generated files from its delivery network after 24 hours.
• Accounting records are kept for 10 years (books and annual accounts) or 8 years (vouchers) under § 147 AO and § 257 HGB.
• Anonymized, aggregated data (no personal reference) may be retained indefinitely.

8. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on consent, you may withdraw it at any time with future effect. To exercise your rights, use the contact page.

Right to object (Art. 21 GDPR). Where we process your data on the basis of our legitimate interest (Art. 6(1)(f)), you can object at any time on grounds relating to your particular situation; we then stop unless we have compelling legitimate grounds or need the data to establish, exercise or defend legal claims.

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; you may also complain to the authority of your country of residence.

11. Notices for other countries

• California: our Service does not respond to "Do Not Track" browser signals; we do not track you across third-party websites.
• Brazil (LGPD): you can exercise your rights as a data subject via the contact page; the transfer of data abroad is necessary to perform the contract (Art. 33 IX LGPD).
• Canada: your data may be processed outside Canada and be accessible to courts and authorities of those countries.