When you submit a script, Cold Eye collects:
We do not require account creation. We do not collect demographic data, location data, or social media handles.
The screenplay PDF is used only to generate your Cold Eye report. We never use your screenplay to train AI models — neither ours nor any third party's. We do not share it with third parties except as required to deliver your report (e.g. the language-model API call to Anthropic, which processes the script under their commercial data-handling terms; Anthropic does not train on API data submitted through these terms).
Your email is used to deliver the report and to respond if you reply.
Your payment information is processed by Stripe under their terms. We see only the last four digits of your card and the order metadata.
Uploaded scripts are deleted automatically the moment your report is generated. We keep your coverage — we do not keep your source screenplay. In the rare event automated deletion does not complete, the file is removed within 30 days at the latest, and you can request immediate deletion at any time (email us; we'll confirm within 24 hours).
Generated reports are retained for 12 months so you can re-download them, then deleted. You may request earlier deletion at any time.
Operational metadata (order timestamps, status records, billing records) is retained for at least seven years to comply with tax and accounting law.
We do not give your script to anyone else.
You can:
Email us at hello@coldeye.app. We respond within 7 business days.
If you are in the European Union or the United Kingdom, you have additional rights under the GDPR / UK GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority.
If you are in California, you have rights under the CCPA / CPRA; we do not sell or "share" personal data as those statutes define those terms.
The Cold Eye site uses minimal cookies — a session cookie to track your order between upload and payment-return, and (optionally) basic privacy-respecting analytics. We do not use third-party advertising or tracking cookies.
We encrypt all communication in transit using TLS (HTTPS is forced on every connection). Files at rest in our storage are encrypted with AES-256 by the storage provider. Your source screenplay is deleted automatically as soon as your report is generated, so it is not retained at rest beyond processing. We do not store passwords (Cold Eye has no accounts).
We are not perfect. If we discover a breach affecting your data, we will notify you by email within 72 hours and tell you what was exposed and what we're doing about it.
Cold Eye is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has used the service, contact us and we will delete the data.
We may update this policy; the "last updated" date at the top will reflect any change. Material changes affecting how we handle your data will be communicated by email.