Last updated: 2026-07-24
Account: email, display name, school affiliation, and (optionally) avatar URL — all provided by you during signup and onboarding.
Production data: scripts, shot lists, schedules, crew rosters, expenses, and channel messages you create inside the app. We treat this as yours — we do not sell it, rent it, or share it with other students.
Usage: product analytics via PostHog (page views, feature-level events like breakdown_completed andcredit_issued), plus per-request latency + cost metadata stored in our AiLog table. Session replay is on by default with all form inputs masked at the recorder layer — we never see your password, email, or anything you type into a field. Email support@shilpimedia.com from your account email and we'll exclude your distinctId server-side within 24 hours.
Nothing identifiable, outside the services we use to run Shilpi. Namely: Supabase (Postgres + auth), Vercel (hosting), Google (OAuth login, and AI processing where enabled), OpenRouter (AI gateway), and PostHog (analytics). Each one is a data sub-processor.
Your script and the AI features. When you run an analysis, the text you uploaded is sent to OpenRouter, which forwards it to the model provider serving that model. We restrict every one of those requests to providers that do not retain your input beyond serving the request, and we do not use your scripts to train any model of our own. We do not sell your material, and we do not share it with anyone outside the sub-processors named above.
We would rather be exact than reassuring: OpenRouter selects the upstream provider, so we constrain that choice by policy rather than naming a single company here. If your production needs a named provider, a signed data-processing agreement, or a guarantee that your material never leaves our infrastructure, write to us — those are things we can arrange deliberately, not things we will imply.
Aggregated comparables: when you publish a production snapshot, we include it in our index (school + genre + budget band + shoot day count + logline embedding). The snapshot is anonymized — your name, crew roster, and exact dates are not part of the shared record.
Email support@shilpimedia.com from the address on your account. We'll either export a JSON bundle of everything we have or purge your account and associated production data within 30 days. If you published a snapshot and want it retracted, say so in the email.