Home / Trust / Privacy Policy
Developum AI Inc. · Privacy

Privacy Policy.

Effective July 1, 2026

This Privacy Policy explains how Developum AI Inc. ("we," "us," or "Developum") collects, uses, and protects your information when you use developumaiengine.com, the EVOLUM platform at evolumstudio.com, or any related service. By using our services you consent to the practices described here.

1. Information We Collect

Account information

When you create an account, we collect your email address, display name, and password (hashed and stored securely via our authentication provider, Supabase).

Content you provide

Screenplays, treatments, project data, pitch decks, sizzle reels, and other creative materials you upload, generate, or edit through the platform.

Usage data

We collect anonymized data about how you interact with the platform — pages visited, features used, session duration. This informs our engineering roadmap. We do not use third-party analytics that transmit identifiable data off-platform.

Payment information

Subscription payments are collected and processed by Stripe. We store only Stripe customer IDs and subscription references. Your full payment card number is never stored on our systems and never transits our infrastructure.

2. How We Use Your Information

3. Your Creative Content

We do not sell, share, or license your creative content. Your screenplays and project data are not used to train external AI models. Screenplays never leave the platform for third-party AI processing — the EVOLUM engine is deterministic and runs locally on our infrastructure.

4. Third-Party Services (Sub-processors)

We use the sub-processors documented at /subprocessors. In brief:

See the full sub-processor list for regions, purposes, and change-notification policy.

5. Cookies & Sessions

We use session cookies to keep you signed in and remember your preferences. We do not use third-party tracking cookies, advertising pixels, or cross-site trackers.

6. Data Security

Full technical detail lives at /security. Summary: TLS 1.2+ in transit, AES-256 at rest, Row-Level Security enforced at the database layer, JWT session tokens with 1-hour rotation, and no LLM cloud calls for customer creative content.

7. Data Retention

Account data and content are retained while your account is active. When you delete your account, we remove your personal data and content within 30 days, subject to any legal retention obligation. Backups roll over on documented schedules per our Disaster Recovery plan.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Exercise any of these rights by contacting privacy@developumaiengine.com. Enterprise customers should refer to our Data Processing Addendum.

9. International Transfers

Our infrastructure spans US and EU regions. For personal data transferred out of the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses as incorporated into our DPA.

10. Children

The platform is intended for users 18 or older. We do not knowingly collect personal data from anyone under 18. If we learn we have, we delete it.

11. Changes to This Policy

We update this policy as the platform evolves. Material changes are announced to registered users at least 14 days before taking effect. The "Effective" date at the top of this page reflects the current version.

12. Contact

Privacy questions: privacy@developumaiengine.com. General contact: hello@developumaiengine.com.

Questions or requests? Reach us at security@developumaiengine.com for security, compliance, or auditor inquiries. For all other legal questions: hello@developumaiengine.com.