Privacy

SCHEMA is a workspace for film production: lore, screenplays, outlines, shot lists, schedules and budgets, with AI department heads that read that material and answer from it. This page says what happens to what you put in.

What is collected

• Your account. Email address, and a display name if you give one. A password, if you set one, is stored as a scrypt hash — never in the clear.
• What you write and upload. Lore, screenplays, outlines, shot lists, schedules, budgets, knowledge entries, uploaded documents, and your conversations with the AI consoles.
• Operational records. Sign-in events, AI usage and its estimated cost, and server logs. Logs carry a request id and internal record ids; email addresses are redacted before a log line is written.

Who else sees it

SCHEMA does not sell anything to anyone, and there is no advertising. These are the services it runs on, and what reaches each one:

• Anthropic — the text of a question and the material assembled to answer it: the film's lore, retrieved passages from your documents, the studio's taste profile, and department plans. This happens when someone uses Director Prep, Lore Discuss, the film plan, readiness, or a drafter. Anthropic's API terms state that API inputs and outputs are not used to train their models.
• Voyage AI — not in use on this deployment. Embeddings are computed in process, so no document text leaves the server for retrieval.
• Render — hosting, the database, and server logs.
• Resend — your email address and the body of sign-in and invitation email, in order to deliver it.
• Cloudflare — DNS for schemacreative.co.
• Google Fonts — the workspace loads two typefaces from Google's CDN, which means your browser's IP address reaches Google when a page loads.

How long it is kept

• Your work — until you delete it. A deleted film sits in Recently deleted for 30 days and is then purged.
• Sign-in codes and links — 20 minutes; the rows are swept within a day.
• Sessions — until they expire, then swept after 7 days.
• Invitations — revoked or expired invitations are purged after 90 days.
• AI usage — per-call rows for 13 months, then rolled into monthly totals.
• Feedback — 12 months after it is marked resolved.
• Dormant accounts — an account with no studio and no sign-in for 12 months is removed.

Deleting your data

Open Your account in the workspace. You can delete your account there, which removes your user record, your private console threads, your memberships, and any studio you founded and are the only director of — together with that studio's films and everything in them. A director can delete a studio from the same screen.

Deletion removes the live rows. Database backups and host logs age out on their own schedules, so a copy can persist in a backup for a short window after the live data is gone.

Your rights

If you are in the UK or EEA, the GDPR gives you rights of access, rectification, erasure, restriction, portability and objection. If you are in California, the CCPA gives you comparable rights. Exercise any of them by using the controls above, or by writing to christianramirezpm@gmail.com.

Anyone with the link can create an account, so SCHEMA does not know who you are beyond what you type in.