Artist's Log©

Privacy Policy for ARTIST'S LOG

Last updated: July 15, 2026

This Privacy Policy describes how Cineva Films Inc. ("Company," "we," "us," or "our") collects, uses, discloses, stores, protects, retains, and otherwise processes personal information in connection with ARTIST'S LOG, including the Artist's Log website, user accounts, subscription features, support services, and related features and services that link to this Privacy Policy (collectively, the "App"). This Privacy Policy is intended to accompany the current Terms and Conditions for ARTIST'S LOG and is designed for use in Canada, excluding Quebec, and the United States, including California.

By creating an account, accessing, or using the App, you acknowledge that your personal information will be handled as described in this Privacy Policy, subject to any additional notices provided at the point of collection or as otherwise required by law.

Contact details

Cineva Films Inc. is the organization responsible for personal information processed in connection with the App. Questions, access requests, correction requests, deletion requests, complaints, and privacy requests may be directed to:

Company: Cineva Films Inc. Address: 2727 STEELES AVE WEST UNIT 103-1005 TORONTO, ONTARIO, M3J3G9 Email: privacy_security@artistslog.com Attention: Privacy Officer

Scope

This Privacy Policy applies to personal information collected through the App, the Artist's Log website, account registration and authentication, subscription purchase and renewal flows, verified-screenshot features, customer support interactions, and communications relating to the App. This Privacy Policy does not apply to third-party services, websites, products, or platforms that have their own terms or privacy policies, including Google account services, Google Drive, payment processors or merchants of record, app stores if later used, or third-party AI platforms you choose to use with or alongside the App.

Users and age restrictions

The App is intended only for adults age 18 or older. The App is not directed to, intended for, or knowingly offered to children or minors under 18. If Company learns that personal information has been collected from a person under 18, Company may suspend or terminate the account and delete or de-identify the information as appropriate, subject to legal, security, fraud-prevention, accounting, and dispute-related retention requirements.

Personal information collected

Depending on how you use the App, Company may collect the following categories of personal information:

  • Account identifiers and contact details, including your Google account identifier or OAuth "sub" value, Google account email address, and any contact information you provide through support requests, account settings, or communications with Company.
  • Subscription and plan information, including your selected plan tier, free-trial start date and status, subscription status, renewal status, cancellation status, and student-plan eligibility status where applicable.
  • Blockchain stamp usage information, including per-user verified-screenshot usage counts, remaining balance or credits, usage timestamps, and technical references required to associate verified-screenshot activity with your account for service administration, billing, audit, and support purposes.
  • Transaction and order information, including order IDs, subscription records, plan purchased, currency, tax region, refunds, and related transaction metadata received from Lemon Squeezy or another merchant of record or payment provider used for the App.
  • Technical, device, and security information, including IP address, browser type, device characteristics, operating system, timestamps, usage logs, authentication events, diagnostics, and security events needed to operate, secure, and troubleshoot the App.
  • Support and communications information, including the content of inquiries, attachments, screenshots, support tickets, feedback, and other communications you send to Company.
  • User Content that may contain personal information, to the extent you choose to include personal information in prompts, notes, images, metadata, logs, comments, uploads, or other materials you create, upload, or store through the App.

Company does not intentionally collect precise geolocation data, biometric information, health information, or payment card numbers through the App unless later expressly disclosed at the point of collection.

Google account and verified-screenshot features

You must have a Google Account to create and use an Artist's Log account. If you authenticate using Google, Company receives the Google account identifier and email address made available through the authentication flow. Company uses that information to create and administer your account and to provide sign-in functionality.

For the verified-screenshot feature, the App creates a one-way SHA-256 fingerprint of the relevant screenshot and submits only that fingerprint to a third-party timestamping provider that currently anchors records to the public Bitcoin or Ethereum blockchains. The underlying screenshot remains in the user's own Google Drive and is not copied to the public blockchain by Company.

Because blockchain records are public and technically permanent, any blockchain-anchored fingerprint cannot be deleted, recalled, or altered by Company, the user, or the blockchain timestamping provider once anchored. This limitation applies even if you later close your account or submit a deletion request.

How personal information is collected

Company collects personal information:

  • directly from you when you register, contact support, subscribe, request assistance, or otherwise use the App;
  • automatically when you access or use the App, through logs, diagnostics, security monitoring, and similar technical means;
  • from Google or another approved authentication provider when you sign in through that provider;
  • from Lemon Squeezy, Stripe or another payment provider or merchant of record in connection with subscriptions, renewals, taxes, refunds, and billing administration;
  • from service providers that help operate the App, subject to contractual and legal restrictions.

Company does not rely on data brokers, public databases, or social media marketing datasets for the App unless this Privacy Policy is updated to disclose such activity.

Purposes of processing

Company collects, uses, and discloses personal information for identified purposes, including to:

  • create, authenticate, administer, and maintain user accounts;
  • provide the App and requested features, including verified-screenshot tracking, account administration, exports, and support;
  • administer subscriptions, student-plan eligibility, free trials, renewals, billing, taxes, cancellations, refunds, and related account matters;
  • communicate with users regarding accounts, subscriptions, updates, security issues, legal notices, and support matters;
  • monitor, secure, maintain, troubleshoot, improve, and protect the App and related systems;
  • investigate suspected fraud, abuse, unauthorized access, misuse, policy violations, and security incidents;
  • comply with legal obligations, respond to lawful requests, establish or defend legal claims, and enforce Company policies and agreements;
  • create aggregated or de-identified analytics, technical reporting, usage trends, and service-improvement insights that do not reasonably identify an individual and do not disclose confidential creative materials.

Some processing is necessary to provide the App and related services. Other processing may be optional, such as optional marketing communications or non-essential analytics, and where required by applicable law Company will offer an appropriate choice mechanism.

Consent and legal basis

In Canada, Company generally relies on consent to collect, use, and disclose personal information, except where applicable law permits or requires processing without consent. Depending on the context and sensitivity of the information, consent may be express or implied.By registering for or using the App and by providing personal information in connection with the App, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy, subject to any additional choices or consents required by law.

In the United States, Company processes personal information as reasonably necessary to provide the App, administer accounts and subscriptions, secure the App, comply with law, and pursue other purposes described in this Privacy Policy, subject to applicable state privacy laws. You may withdraw consent where legally permitted by contacting Company but doing so may limit or end access to some or all App features if the information is necessary to provide the service.

When personal information is disclosed

Company may disclose personal information to the following categories of recipients where reasonably necessary for the purposes described in this Privacy Policy:

  • cloud hosting and infrastructure providers;
  • authentication and identity providers, including Google;
  • payment processors and merchants of record, including Lemon Squeezy;
  • blockchain timestamping providers used for verified-screenshot features;
  • customer support, logging, monitoring, analytics, email, and security service providers;
  • legal, accounting, insurance, audit, or professional advisers where required or appropriate;
  • regulators, courts, law enforcement, government authorities, or other third parties where required or permitted by law;
  • a purchaser, successor, investor, or transaction counterparty in connection with an actual or proposed financing, merger, acquisition, sale of assets, reorganization, or similar corporate transaction, subject to appropriate protections where required.

Company does not sell personal information for money. Company also does not share personal information for cross-context behavioral advertising as those terms may be defined under applicable California law, unless Company later updates this Privacy Policy and provides any notices and opt-out rights required by law.

Third-party services

The App may relate to or interact with third-party services, including Google, Google Drive, third-party AI services, payment providers, and blockchain timestamping providers. Those third parties process information under their own terms, policies, and privacy practices, which Company does not control. You are responsible for reviewing the privacy policies and terms of third-party services you use in connection with the App.

Retention

Company retains personal information only for as long as reasonably necessary to fulfill the identified purposes described in this Privacy Policy, or as required or permitted by applicable law.

Without limiting the generality of the foregoing, Company may retain:

  • active account information for as long as an account remains open;
  • support communications, technical logs, and security records for a reasonable period after creation or closure of the relevant issue;
  • subscription, billing, tax, refund, and transaction records for the period required by applicable tax, accounting, audit, and legal obligations;
  • Closed account records for a limited period needed to complete account wind-down, detect fraud, investigate misuse, resolve disputes, enforce agreements, and comply with law.

When personal information is no longer required, Company will delete, anonymize, or de-identify it where reasonably feasible, subject to backup practices, legal holds, dispute requirements, and technical limitations. However, blockchain-anchored fingerprints written to a public blockchain cannot be deleted or altered.

Security safeguards

Company uses reasonable physical, technical, organizational, and contractual safeguards appropriate to the sensitivity of the information, which may include access restrictions, authentication controls, encryption in transit, encryption at rest where appropriate, monitoring, logging, vendor controls, and confidentiality obligations.

No method of electronic transmission, storage, or processing is completely secure. Users are responsible for maintaining the security of their Google Account or other approved identity-provider account, including password hygiene, multi-factor authentication where available, device security, and recovery settings.

International and cross-border processing

Company is based in Ontario, Canada, and may use service providers located in Canada, the United States, or other jurisdictions worldwide where reasonably necessary to provide the App. Personal information may therefore be processed, stored, or accessed outside your province, territory, or state and may be subject to lawful access by courts, law enforcement, national security authorities, or regulators in those jurisdictions. Company uses contractual and other reasonable measures intended to require service providers to protect personal information and use it only for authorized purposes.

California and U.S. state privacy disclosures

If you are a California resident, or a resident of another U.S. state with applicable privacy rights, you may have rights under applicable law, subject to legal limitations and verification requirements. Depending on applicable law, these may include the right to:

  • know whether Company processes your personal information;
  • request access to personal information Company holds about you;
  • request correction of inaccurate personal information;
  • request deletion of personal information, subject to legal and technical exceptions contained herein;
  • obtain a copy of certain personal information in a portable format where required by law;
  • opt out of the sale or sharing of personal information, if Company ever engages in such activity;
  • limit certain uses of sensitive personal information where required by law, although Company does not intentionally process sensitive personal information through the App as currently described;
  • not receive discriminatory treatment for exercising applicable privacy rights.

California residents may also designate an authorized agent to make a request on their behalf where permitted by law. Company may require proof of identity, proof of residency, and proof of authority before responding to a request.

Company will not fulfill a deletion request to the extent retention is permitted or required by law, necessary to complete a transaction, detect security incidents, protect against illegal activity, comply with legal obligations, exercise legal claims, or maintain blockchain-anchored records that cannot technically be deleted.

Company does not currently respond to browser do-not-track signals because no uniform standard has been adopted for recognizing and implementing such signals. If Company later recognizes a legally required browser-based preference signal, Company may update this Privacy Policy accordingly.

Access, correction, complaints, and requests

Subject to applicable law and identity verification, you may request access to personal information Company holds about you and request correction of inaccurate or incomplete personal information.

You may also request deletion, complain about privacy practices, withdraw consent where available, or make a California or U.S. state privacy request by emailing privacy_security@artistslog.com or by using any request mechanism Company makes available through the App or website.

Company may need to verify your identity and authority before responding. Company may request additional information reasonably necessary to verify the request and protect personal information against unauthorized disclosure, deletion, or alteration. If Company declines a request, Company will respond in accordance with applicable law. Where required by applicable U.S. state law, Company will provide information about any available appeal process.

Marketing communications

If Company sends promotional or marketing communications, users may opt out by using the unsubscribe mechanism in the communication or by contacting Company. Even if you opt out of marketing communications, Company may still send non-marketing communications relating to your account, subscriptions, security, legal notices, or support.

Company does not presently state in the Terms and Conditions that the App is marketed through events, targeted advertising, or social media campaigns, and this Privacy Policy does not assume such activities beyond ordinary service-related communications unless separately disclosed.

Changes to this Privacy Policy

Company may update this Privacy Policy from time to time to reflect changes in the App, legal requirements, operational practices, or service providers. The updated version will be indicated by the "Last updated" date at the top of this Privacy Policy. If Company makes material changes, Company may provide notice by reasonable means, such as posting an updated Privacy Policy in the App or on the website, sending an email, or providing another notice consistent with applicable law.

California Notice at Collection

For California residents, this Privacy Policy is intended to function together with any Notice at Collection normally provided at or before the point where personal information is collected. Company may, at its discretion, provide a separate short-form notice during registration, onboarding, settings, payment, or feature activation flows where required by law.