Privacy Notice
Last updated: October 2026 · Operating entity: GEM Studios · privacy@gem.studio
A plain-English summary of what we collect, who can see it, and how to reach us. We aim to keep this short. If our practices change in a way that would meaningfully affect you, we'll update it here.
What we collect
- Account information — your name, email, password (hashed), and account type (writer or industry partner).
- Profile information — for industry partners, your company name and role. For writers, optional profile fields.
- Scripts you upload — we extract the text from the PDF and run it through our AI evaluation.
- Reports and edits — the evaluation we generate, plus any titles, headlines, tags, or privacy settings you configure.
- Communications — messages we deliver between you and other users (e.g. producer intros), and any messages you send us directly.
- Payment information — billing address and the last four digits of your card. Full card details are handled by Stripe; we never store them.
- Usage data — pages you visit, actions you take, browser, device, IP, approximate location.
Who sees what
- Your scripts and report content are seen by GEM staff for support and platform operations, by you, and — if you choose to publish — by industry partners on the platform, on a per-section basis you control.
- Producer ↔ writer messagesare delivered by us. We never expose either party's email address to the other except through the messages they themselves initiate.
- Service providers that operate GEM see whatever data they need to do their job: hosting (Vercel), database (Supabase), AI evaluation (OpenAI), payments (Stripe), email (Postmark), analytics (PostHog), advertising attribution (Google).
- Legal process. If we receive a valid subpoena, court order, or other legally enforceable request, we will comply.
- Business transfer.If GEM is acquired, your data may transfer to the acquiring entity. We'll notify you if that happens.
We do not sell your information.
Your script content and AI
When you upload a screenplay, we send the extracted text to OpenAI to generate the evaluation. OpenAI's published policy says they don't use API content to train their models. We don't sell, license, or share your script content with anyone other than the recipients described above. You retain all rights to your script. Our limited license to display and process it is described in the Terms of Use.
Privacy rights
If you live in a jurisdiction with specific privacy rights (e.g. California, the EU, the UK), you may have rights to access, correct, delete, or export your information. Email privacy@gem.studio and we'll honor your request.
You can also email us to delete your account at any time. We'll remove your data from active systems within a reasonable period after the request, except where we're required to retain it (e.g. tax records).
Cookies
We use cookies to keep you signed in, secure your session, measure how the product is used (PostHog), and attribute advertising (Google Ads). You can disable cookies in your browser; some functionality will break.
Security
We use TLS for all traffic, encryption at rest, and role-based access controls. We can't guarantee absolute security. If we discover a breach affecting your information, we'll let you know.
Adults only
GEM is for adults. Don't use it if you're under 18.
Updates
We'll post updates here. If a change is meaningful, we'll let you know by email.