Privacy Policy

This Privacy Policy explains how Story Bay Film Production FZ - Dubai ("Story Bay", "we", "us") collects, uses, and protects information when you visit curatorpro.app or use the Curator desktop application ("Curator").

1. Data controller

Story Bay Film Production FZ, a Free Zone company registered in Dubai, United Arab Emirates, is the data controller. Contact: curatorpro@storybay.ae.

2. Privacy-first by design

Curator is a local-first application. Your video files, images, metadata, GPS coordinates, and generated outputs are processed on your own device and never transmitted to Story Bay's servers.

3. Information we collect

• Waitlist data: full name, email address, mobile number, and optional Instagram / LinkedIn handle you submit through the waitlist form. We collect this to reserve your founding-member spot and to notify you about launch.
• Account data (optional): if you create a user account, your email address and a password hash, managed by our backend provider (Supabase, via Lovable Cloud).
• Support correspondence: messages you send through the in-app support chat or to curatorpro@storybay.ae.
• Technical data: IP address (transiently, for abuse prevention) and User-Agent string on form submission. No third-party advertising or cross-site tracking cookies are set during the waitlist phase.

4. Sub-processors

We rely on the following data processors to operate Curator:

• Lovable Cloud / Supabase — managed database, authentication, and serverless backend for the curatorpro.app website (EU region).
• Cloudflare — edge hosting, CDN, and DDoS protection.
• Anthropic, PBC — only when you opt in to AI-assisted metadata features in the desktop app, and only via your own Anthropic API key (see clause 5).

5. AI processing & BYOK (Bring Your Own Key)

When you opt in to AI-generated metadata, frames extracted from your clips are transmitted to a third-party large-language-model provider (currently Anthropic, PBC) strictly for the duration of inference. Story Bay does not store, log or retain copies of your media or of the model's responses.

AI inference is performed exclusively through an Anthropic API key that you register, hold and maintain in your own name ("Bring Your Own Key"). All data sent for inference is transmitted directly from your device to Anthropic under the contractual relationship between you and Anthropic, and is governed by Anthropic's own terms of service and privacy policy. Story Bay is not a party to that processing, has no access to its content, and stores neither your Anthropic API key nor any inference payload on its servers.

6. Lawful basis (GDPR / UAE PDPL)

We process personal data based on (a) your consent (joining the waitlist, creating a user account, opting in to AI features), (b) performance of pre-contractual measures at your request (reserving your founding-member spot), and (c) our legitimate interests in operating the service securely and preventing abuse.

7. Data retention

Waitlist registrations are retained until public launch or until you request deletion, whichever comes first; after launch they are retained for an additional 24 months to support onboarding. Support correspondence is retained for 24 months. You may request deletion at any time via curatorpro@storybay.ae.

8. Your rights (GDPR)

If you are in the EU/EEA or UK, you have the right to access, rectify, port, restrict the processing of, or erase your personal data, and to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. You also have the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact curatorpro@storybay.ae.

9. International transfers

Story Bay is established in the UAE. Our sub-processors (Lovable Cloud / Supabase, Cloudflare, Anthropic) may process data in the EU and the United States under appropriate safeguards (Standard Contractual Clauses or equivalent).

10. Changes

We may update this policy. Material changes will be announced via email to waitlist members and active account holders.