Privacy Policy

Curtain Up is operated by the project owner (the "controller"). For privacy questions or to exercise any of the rights below, contact: info@curtainup.app.

We collect only what's needed to run the service.

• AccountYour name, email address, and profile picture, as provided by Google or Apple sign-in. We never receive your password.
• Scripts and rehearsal contentThe raw text you upload, the analyzed structure (characters, acts, scenes, lines), the generated TTS audio, and a short log of recent rehearsal events (transcripts of your spoken lines, last 100 entries per session).
• Microphone audioDuring a rehearsal, your voice is streamed live to OpenAI's Realtime API for transcription. We do not record or store the raw audio.
• Technical dataIP address, browser type, locale, and basic interaction events (page views) via Google Analytics 4. We use this only to understand aggregate usage and fix bugs.

Under GDPR and similar laws, we rely on: (a) performance of contract — to provide you the service you signed up for; (b) legitimate interest — to keep the service secure, prevent abuse, and improve features; (c) consent — for non-essential analytics where required by your jurisdiction (you can decline via your browser's Do Not Track or by not using the service).

We share the minimum necessary with a small set of processors:

• Google (Gemini API)Receives your script text for parsing and TTS generation. Subject to Google's API data policies.
• OpenAI (Realtime API)Receives streamed microphone audio and the system prompt containing your script context during rehearsal. OpenAI states that API data is not used to train their models by default.
• Amazon Web ServicesHosts our database, audio storage, and application servers (eu-north-1 region). Subject to AWS's data processing agreement.
• Google Analytics 4Aggregate usage statistics. IP addresses are anonymized.

We never sell your personal data, and we never share it with advertisers.

Application data is hosted in AWS eu-north-1 (Stockholm, Sweden). AI processing happens at the API endpoints of Google and OpenAI, which may transfer data outside the EEA under standard contractual clauses. By using the service you accept these transfers.

Scripts and generated audio: as long as you keep the audition. Delete the audition and they are removed from our database; the audio files are removed from S3 best-effort within minutes.

Account data: as long as your account exists. Delete your account and all your data (scripts, audio, account profile) is removed within 30 days.

Rehearsal logs (transcripts): held only during the session and discarded when the browser tab closes.

Analytics: aggregated, retained per Google Analytics defaults (currently 14 months).

Depending on your country you have the right to: access your data, correct it, delete it ("right to be forgotten"), export it, restrict processing, object to certain processing, and lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at the address in section 1. Most can be done immediately from the dashboard.

We use a small number of essential cookies (authentication session, language preference) and one analytics cookie (Google Analytics). We do not use advertising or cross-site tracking cookies.

• EssentialAuthentication session, language preference, and security. Always active.
• AnalyticsGoogle Analytics 4 with anonymized IP. Helps us understand which features actors use most.
• MarketingMeasures ad performance and lets us reach you with relevant offers. Only active with explicit consent.

Curtain Up is not directed at children under 13. If you believe we have inadvertently collected data from a child, contact us and we will delete it.

We use TLS for all traffic, encryption at rest for the database and S3, and least-privilege IAM roles for backend services. We rotate secrets regularly. No service is 100% secure; we cannot guarantee absolute security, but we follow industry standard practices.

We may update this policy. Material changes will be announced in-app or by email at least 14 days before they take effect.

Privacy questions, data export, or deletion requests: info@curtainup.app.