This policy explains what Backlot collects, why, and how it is handled. We collect the minimum needed to run a video production service for you and your team.
What we collect
Account details: your name, email address and password hash, plus the name of your studio. Workspace content: the briefs, reference images, voice recordings, characters, shot lists, renders and comments you and your team create. Usage data: which features are used, render durations and costs, and technical logs needed to keep the Service reliable. Contact requests: what you send through the contact form.
How we use it
To provide the Service — storing your workspace, rendering your productions, sending account emails such as confirmations and invitations. To keep the Service secure and to investigate abuse. To understand how Backlot is used so we can improve it. To respond when you contact us.
We do not sell personal data and we do not use your content to train AI models.
Processors we rely on
Your data is processed by infrastructure and model providers acting on our instructions: a managed database and storage provider (Supabase), cloud hosting (Amazon Web Services), image and video model hosting (fal.ai), voice synthesis (ElevenLabs) and language models for planning and for describing a character from its photos (Anthropic). Content sent to a model provider is limited to what that step needs: for example a reference image and a prompt for a shot, or a line of dialogue for a voice.
Voices and likenesses
Cloning a voice or building a character from a photo of a real person requires that person’s permission, and whoever uploads the photos confirms they have it. Uploaded samples and photos are used only to create the voice or character you asked for and are stored in your workspace until you delete them.
Photos used for a character go to the image model that draws the character, and are read once to describe how the person looks (hair, clothes, apparent age) so every later scene matches. Nothing else is inferred from them: not who someone is, and not their ethnicity, health or any other personal trait.
Retention and deletion
Workspace content is kept while your account is active. Deleting a production, character or voice removes its files from storage. Closing your account deletes your workspace within thirty days, except for records we must keep for legal or billing reasons.
Security
Every workspace is isolated with row-level access control; data is encrypted in transit and at rest by our providers; access by our team is limited to what support and operations require.
Your rights
You can access, correct, export or delete your personal data from your account settings or by contacting us. Depending on where you live you may have additional rights under laws such as the GDPR or CCPA; we honour those requests.
Counting visits to this website
We count visits to Backlot's public pages without cookies. Each page view records the page's address, the domain of the site that linked to it, whether the device is a phone, tablet or computer, and a code worked out from your connection and browser that changes every day, so a browser is counted once a day and cannot be followed from one day to the next. Your IP address is not stored for this, the signed-in studio is not counted, and the counts are kept for 13 months.
Changes and contact
We will announce material changes to this policy in the product or by email. Questions can be sent through the contact page.