Draft for legal review. This describes how the service works today; the final wording, the operator's details and the governing law come from the owner's lawyer.
Privacy notice
Who runs the service
Al Hajjar is operated by [operator name, to be completed]. Contact: [email, to be completed].
What we keep
Your account: your name, your email and your sign-in (your password is held by our sign-in provider, never readable by us).
What you upload: your script files and their text.
What the service writes for you: analyses, scene sequences and conversations.
Usage records: which actions you started and when, how long they took and what they cost, and error codes. They never contain your script or the answers.
How your script is processed
To answer you, the relevant parts of your script and your question are sent to Google Cloud (Vertex AI) under a zero-data-retention setup: the text is processed to write the answer and is not stored or used to train any model.
Your data is stored with our database provider (Supabase), encrypted in transit and at rest.
What we never do
We don't sell your data, show you advertising, or use your scripts to train AI models.
How long we keep it
Until you delete it. Deleting a project removes its file, analyses and conversations. Deleting your account removes everything; usage records stay for up to 12 months with nothing that identifies you, so the service's costs still add up.
Your rights
You can delete any project, or your whole account, from the app at any time (Your account → Delete your account). For any other request, write to the contact above.