Privacy Policy
ShotPath is operated by Venerance LLC, a Kentucky limited liability company ("we," "us," or "our"). This Privacy Policy describes how we collect, use, and protect your information when you use ShotPath.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address — for authentication and transactional communications
- Name — for display and billing purposes
- Password — stored as a secure hash, never in plain text
Session Information
To maintain security, we collect:
- IP address — to detect suspicious activity
- User agent — to identify your browser/device for session management
This information is associated with your login session and used solely for security purposes.
Payment Information
Payments are processed by Stripe. We do not store your full card number. We retain only:
- Card brand (e.g., Visa, Mastercard)
- Last four digits
- Expiration date
For complete payment data handling, see Stripe's Privacy Policy.
Content You Create
We store the content you create using ShotPath, including:
- Screenplays and story documents
- Uploaded images
- AI-generated images and videos
- Project metadata and settings
2. How We Use Your Information
We use your information to:
- Provide and operate ShotPath
- Process payments and maintain billing records
- Send transactional emails (verification, receipts, account notifications)
- Maintain security and prevent fraud
- Respond to support requests
What We Do NOT Do
- We do not sell your data to third parties
- We do not serve advertisements or use ad networks
- We do not track your behavior for marketing purposes
- We do not use analytics services like Google Analytics
- We do not use tracking cookies — only essential session cookies for authentication
3. Artificial Intelligence Disclosure
ShotPath uses artificial intelligence services to generate content. When you use AI features, your prompts and uploaded content are sent to third-party AI providers for processing.
AI Service Providers
| Provider | Purpose | Privacy Policy |
|---|---|---|
| OpenAI | Text generation (screenplay, story) | openai.com/privacy |
| fal.ai | Image and video generation | fal.ai/privacy |
What is sent to AI providers:
- Text prompts you enter
- Reference images you upload
- Character and setting descriptions
What is NOT sent to AI providers:
- Your email address
- Your name
- Your payment information
- Your IP address
We do not control how these providers handle data once transmitted. Please review their privacy policies for details on their data practices.
4. Third-Party Services
In addition to AI providers, we use:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Resend | Transactional email delivery | resend.com/legal/privacy-policy |
5. Data Storage and Retention
Where Your Data is Stored
- Account and project data: Secure PostgreSQL database
- Generated images and videos: fal.ai content delivery network (CDN)
How Long We Keep Your Data
- Account data: Until you delete your account
- Content: Until you delete it or close your account
- Session data: Automatically expires
- Billing records: Retained for 7 years for legal and tax compliance
Content Privacy
Your content is stored privately and only accessible through your authenticated ShotPath account. Generated images and videos are hosted on third-party CDN URLs that are not publicly listed or indexed. However, these URLs do not have additional access controls—if a URL is shared or exposed, the content can be accessed directly. We recommend treating generated content URLs as confidential.
6. Cookies
ShotPath uses only essential cookies:
- Session cookie: Maintains your login state (HTTP-only, secure)
We do not use:
- Tracking cookies
- Third-party cookies
- Advertising cookies
Because we only use essential cookies required for the service to function, no cookie consent banner is necessary.
7. Your Rights
You have the right to:
- Access your data — View your account information and content at any time
- Export billing data — Download your transaction history as CSV
- Delete your account — Request complete deletion of your account and associated data
- Contact us — Ask questions about your data
To exercise these rights, contact us at support@shotpath.io.
8. Data Security
We implement security measures including:
- HTTPS encryption for all data transmission
- Secure password hashing (bcrypt)
- HTTP-only, secure session cookies
- Security headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy)
- Account access controls and ownership verification
9. Children's Privacy
ShotPath is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe a child has provided us with personal information, please contact us at support@shotpath.io.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy with a new "Last Updated" date
- Sending an email notification for significant changes
Your continued use of ShotPath after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices:
Venerance LLC
Email: support@shotpath.io
This Privacy Policy is provided for informational purposes and does not constitute legal advice.