Privacy Policy

Last updated: October 11, 2026

ShotMind ("ShotMind", "we", "us") is an AI pre-production service operated by T.A.F.İ. Studios, based in Istanbul, Türkiye. This policy explains what personal data we collect when you use shotmind.studio, why we collect it, and the rights you have over it. We act as the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. What we collect

• Account data: your email address and a securely hashed password.
• Your content: screenplays and other files you upload, project names, and the analyses, reports and prompts ShotMind generates from them.
• Usage data: credit balance, analysis history, and basic technical logs (IP address, browser type, timestamps, error reports) needed to run and secure the service.
• Payment data: when paid plans are available, payments are handled by our payment provider, Paddle, acting as merchant of record. We never see or store your full card details; we receive only what is needed to confirm your plan (such as transaction ID, plan and country).

2. Why we use it

• To create and secure your account and keep you logged in (performance of a contract).
• To analyse your screenplay and produce department reports and prompts — this is the service itself (performance of a contract).
• To manage credits, billing and invoices (performance of a contract and legal obligation).
• To prevent abuse, fix bugs and keep the service running (legitimate interest).
• To send essential service emails such as confirmations and password resets. We will only send marketing email if you opt in, and you can opt out at any time.

We do not sell your data, and we do not use your screenplays to train AI models.

3. Who processes your data

We use a small number of trusted service providers to run ShotMind. Each only receives what it needs to do its job:

• Supabase — authentication and database (your account and projects).
• Vercel — website hosting.
• Anthropic — the AI model that reads your screenplay and generates analyses. Content sent through Anthropic's commercial API is not used to train its models by default.
• Paddle — payments, tax and invoicing (when paid plans are live).
• Email delivery provider — to send account emails.

4. International transfers

Some of these providers store or process data outside Türkiye, including in the European Union and the United States. Where data is transferred abroad, we rely on the safeguards available under KVKK Article 9 and the GDPR, such as standard contractual clauses, and on your explicit consent where the law requires it.

5. How long we keep it

We keep your account data and projects for as long as your account is active. If you delete a project, it is removed from our database. If you close your account, we delete your personal data and content within 30 days, except records we are legally required to keep (for example invoices, which Turkish law requires us to retain for up to 10 years).

6. Cookies and local storage

ShotMind uses only what is strictly necessary to keep you logged in (a session token stored in your browser's local storage). We do not use advertising or third-party tracking cookies. If we add analytics in the future, we will update this policy and ask for consent where required.

7. Your rights

Under KVKK Article 11 and, where applicable, the GDPR, you have the right to:

• learn whether we process your personal data and request information about it;
• request a copy of your data, or have it transferred to you;
• request correction of inaccurate data;
• request deletion of your data;
• object to processing and withdraw consent at any time;
• learn the third parties to whom your data is transferred;
• claim compensation for damages arising from unlawful processing;
• lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local data protection authority.

To exercise any of these rights, email us at hello@shotmind.studio. We will respond within 30 days.

8. Security

Data is encrypted in transit (HTTPS) and access to your projects is restricted to your account through database-level access rules. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

9. Children

ShotMind is not intended for anyone under 18, and we do not knowingly collect data from children.

10. Changes

If we make material changes to this policy, we will notify you by email or on the site before they take effect.

11. Contact

T.A.F.İ. Studios — Istanbul, Türkiye
Email: hello@shotmind.studio