Privacy Policy

At F10P Inc. ("F10P", "we", "us", or "our"), we respect your creative work and are committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use the F10P website, reader, community surfaces, and marketplace (collectively, the "Platform").

By accessing or using F10P, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not access or use the Platform.

1. Our Core Privacy & Creator Commitments

Screenwriters and visual storytellers face unique vulnerabilities regarding intellectual property and digital surveillance. We built F10P around four foundational commitments:

You own your work. You retain complete ownership and copyright over every screenplay, treatment, synopsis, and draft you upload. We never claim ownership of your writing.
Strict Zero-AI-Training Guarantee. We do not use your uploaded screenplays, pitches, characters, or dialogue to train, fine-tune, or develop generative AI models, large language models (LLMs), or foundational algorithms—neither for ourselves nor for third parties. See our AI Manifesto.
No sale of personal data. We do not sell, rent, or trade your personal information to data brokers or advertisers. We do not use cross-context behavioral tracking.
Privacy by default. Fresh accounts are not publicly indexed until you choose to make your profile public. Private scripts are restricted strictly to you and individuals who hold your authorized access password.

2. Data Controller Information

For the purposes of the General Data Protection Regulation (GDPR), the UK Data Protection Act, and applicable international privacy laws, the data controller is:

F10P Inc.
Attn: Privacy & Data Protection
Email: [email protected]
General Inquiries: [email protected]

3. Information We Collect

We collect information in three primary ways: directly from you, automatically through your use of the Platform, and from trusted service providers.

A. Information You Provide Directly

Account Registration: When you register an account, we collect your username, email address, and an encrypted password hash.
Profile & Directory Information: If you choose to complete your profile, we collect your display name, bio, role, location, preferred genres, and links to external profiles (such as IMDb, LinkedIn, X, personal websites, and Substack). By default, your profile is private until you opt in via Settings → Profile.
Manuscripts & Creative Materials: When you upload a script, we collect the PDF manuscript file, title, logline, synopsis, genre, format, page count, tags, and draft version history.
Pro Reviewer Applications: If you apply to become a Pro Reviewer on our marketplace, we collect your professional film-industry experience, background, credentials, links, areas of expertise, and coverage writing samples.
Communications & Community: We collect messages sent through our internal inbox, comments posted on public scripts, articles submitted to The Revisions Blog, and inquiries submitted through our contact forms or support channels.

B. Information Collected Automatically

Reading Progression & Drop-off Telemetry: When scripts are read via our in-browser PDF reader, our system records aggregated reader metrics—specifically whether a reader completes the first ten pages, reading progression percentage, and overall completion. This behavioral signal powers our discovery ranking.
Technical & Device Data: We automatically log your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and standard HTTP server log details.
Session & Security Data: We issue temporary session identifiers and anti-tamper security tokens to maintain your login status and protect against cyberattacks.

C. Information from Third Parties (Payments)

Paid marketplace transactions (such as purchasing professional coverage or AI diagnostic add-ons) are processed directly by our payment processor, Stripe, Inc. We do not store, process, or transmit your credit card numbers, CVVs, or full payment credentials on F10P servers. Stripe provides us with a non-sensitive payment reference ID, transaction amount, timestamp, and billing email for accounting and order fulfillment.

4. How We Use Your Information & Legal Bases

We process your personal data under the following lawful legal bases pursuant to GDPR Article 6:

Performance of a Contract (Art. 6(1)(b)): To operate your account; host and render your screenplays in the reader; facilitate marketplace review orders and deliver coverage reports; process transactions; and deliver customer support.
Legitimate Interests (Art. 6(1)(f)): To safeguard Platform security and integrity; prevent fraud, spam, and abuse; maintain our cold-read ranking algorithms; debug code; and ensure server reliability.
Consent (Art. 6(1)(a)): Where you provide explicit consent—such as accepting optional Google Analytics cookies via our consent banner, or opting into optional promotional email updates. You may withdraw consent at any time.
Legal Compliance (Art. 6(1)(c)): To maintain required financial and tax records, respond to lawful court orders, and enforce our DMCA notice and takedown obligations.

5. The AI Processing Guarantee

F10P offers optional computational tools, including automated Screenplay Diagnostic Analysis (evaluating character pacing, three-act structure, and cold-read momentum) and AI Cover Art Generation.

To deliver these services, text fragments or script metadata are transmitted via encrypted API calls to enterprise artificial intelligence infrastructure providers (such as Google Cloud Vertex AI / Google AI Studio Gemini API). Our contractual terms and privacy configurations ensure:

Transient Processing Only: User scripts and prompts are processed solely in memory to return the requested diagnostic analysis or cover art concept.
Zero Training Retention: Your screenplays, characters, dialogue, and ideas are never retained by model providers for training, fine-tuning, or algorithmic distillation.
Confidentiality: Private scripts remain confidential and are not exposed to public model datasets or search indexes.

6. How We Share and Disclose Information

We only share your information under the specific circumstances outlined below:

Public Display by Choice: If you designate a script as "Public", its title, logline, cover, and reading experience become accessible to visitors. If you enable "Public Profile", your writer profile appears in the public Writers Directory.
Marketplace Reviewers: When you purchase coverage from an independent reviewer, that reviewer receives access to the designated script solely to evaluate it and produce your coverage report.
Service Providers & Sub-processors: We share data with vetted third-party vendors who assist in operating our infrastructure:
- Stripe, Inc. (Payment gateway and billing processing)
- Hosting & Storage Providers (Secure server hosting and media/PDF storage)
- AI Model API Providers (Ephemeral diagnostic analysis under zero-training terms)
- Google Analytics (Aggregated performance analytics, strictly conditioned on consent)
Legal Protection & Safety: We may disclose information if required by law, subpoena, or warrant, or if we believe in good faith that disclosure is necessary to investigate potential violations, protect user safety, or defend against intellectual property infringement.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, user information may be transferred as an operational asset, subject to the acquiring entity honoring this Privacy Policy.

7. Cookies & Analytics

We use strictly necessary first-party cookies for secure login sessions and CSRF protection. We do not currently use third-party marketing or advertising tracking cookies. With your consent, we also offer optional, privacy-respecting Google Analytics to measure site traffic and discoverability trends.

We fully support Google Consent Mode v2. Non-essential cookies remain disabled unless you explicitly grant consent. For a comprehensive audit table of all cookies and storage keys, review our dedicated Cookie Policy or adjust your choices below:

Cookie preferences are only active when analytics is enabled on this instance.

8. Data Retention & Account Deletion

We retain your personal data and uploaded scripts for as long as your account remains active. You maintain full autonomy over your data:

Deleting Manuscripts: You may edit or delete any manuscript from your Studio at any time. Deleting a manuscript purges the PDF file and derived drafts from our active databases.
Deleting Your Account: You can permanently delete your entire account, profile, scripts, and comments at any time via Settings → Account. Account deletion immediately revokes your credentials and permanently anonymizes or erases your personal data, subject only to necessary transaction ledgers retained to satisfy statutory financial and tax obligations.

9. Security Measures

We implement rigorous administrative, technical, and physical safeguards to protect your personal information and creative work:

All data transmissions are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
User passwords and private script access passwords are cryptographically hashed using industry-standard, slow salted key-derivation functions (PBKDF2 / Argon2). We never store passwords in plaintext.
All state-modifying requests require anti-CSRF token verification.
Administrative access to backend infrastructure is strictly restricted to authorized engineering personnel using multi-factor authentication.

10. International Data Transfers

F10P is operated and hosted in the United States. If you access the Platform from the European Economic Area (EEA), United Kingdom, Switzerland, or other regions with laws governing data collection and use, your data will be transferred to and processed in the United States. Where required, we utilize standard contractual clauses approved by the European Commission to ensure adequate safeguards for cross-border data transfers.

11. Your Privacy Rights (GDPR & UK Data Protection)

If you reside in the EEA or United Kingdom, you enjoy statutory rights under the GDPR:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may correct inaccurate or incomplete data directly in your account settings or by contacting us.
Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your personal data.
Right to Restrict Processing: You may request that we temporarily restrict the processing of your data under certain conditions.
Right to Data Portability: You may request a structured, machine-readable export of the data you provided to us.
Right to Object: You may object to the processing of your personal data based on legitimate interests.
Right to Lodge a Complaint: You have the right to file a complaint with your local Data Protection Authority.

12. Notice to California Residents (CCPA / CPRA & Shine the Light)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have specific statutory rights:

Right to Know & Access: You have the right to request disclosure of the categories and specific pieces of personal information we have collected, used, and disclosed about you over the past 12 months.
Right to Delete: You have the right to request deletion of your personal information, subject to statutory exceptions.
Right to Correct: You have the right to correct inaccurate personal information that we maintain about you.
Non-Discrimination: We will never discriminate against you, deny you services, charge you different prices, or provide a lower quality of service for exercising your CCPA rights.
Do Not Sell or Share Personal Information: F10P has not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months, and does not do so.
California "Shine the Light": Under California Civil Code Section 1798.83, California residents may request information regarding our disclosure of personal information to third parties for their direct marketing purposes. F10P does not disclose personal data to third parties for direct marketing.

To exercise any California privacy rights, submit a verifiable consumer request to [email protected].

13. Children's Privacy

F10P is strictly directed to adults aged 18 and older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13 (or under 16 in the European Union or California). If we discover that a child under 13 has registered or provided personal information, we will take immediate steps to delete that account and all associated data.

14. Changes to this Privacy Policy

We may revise this Privacy Policy from time to time to reflect enhancements to our Platform, legal updates, or changes in data practices. When updates occur, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will notify you through a prominent notice on the Platform or via email before the changes take effect.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact our Data Protection team:

F10P Inc. — Data Privacy Office
Email: [email protected]
Support: [email protected]
Web: firsttenpages.com