Privacy Notice

1. Who controls your data

The data controller is WEBLOCK MEDIA LTD (registered office: 9a Wick Road Business Park, Wick Road, Burnham-On-Crouch, Essex, CM0 8FA, United Kingdom; company no. 12103785).

We are registered with the Information Commissioner's Office (ICO) under number ZB362075, in the company's former name, Stars & Music Media Ltd.

For anything about your data, write to [email protected]. We answer every request within one month.

2. What we hold, and why

We only ask for what the service genuinely needs. No profiling, and we never sell data to anyone.

Email address, name: To identify your account and to send you emails about the service. Lawful basis: performance of the contract.
Password: Stored only as a cryptographic hash, so not even we can recover the original. Lawful basis: performance of the contract.
What you create in the service: Projects, text, prompts, reference images you upload. Without these the service couldn't work. We never analyze your images on our own: they only reach the AI if you ask for a description. Lawful basis: performance of the contract.
Sign-in time and IP address: To protect your account and prevent abuse. We keep the times of sign-ins (without the IP address) for 90 days, which shows us how many people use the service. On our own server we estimate a country and city from the IP address; at sign-up we save this, along with the page you came from, to your account, and we keep the estimates for sign-ins for 90 days. We only use this for overall statistics on where our users come from, and we never send your IP address to anyone to make the estimate. Lawful basis: legitimate interests.
Subscription details: Which plan you're on, when it renews, which currency you pay in. We do NOT store card details. Lawful basis: performance of the contract.
Language and notification settings: So we write to you in the right language, and so we respect it if you don't want reminders. Lawful basis: performance of the contract.
Waiting list: email address: If you sign up on the home page, we send you one email when the skill pack launches. We use the address for nothing else. Legal basis: your consent, which you can withdraw at any time by emailing us.
License number and downloads: Every pack you download carries your license number and email address, and we record when you downloaded it. When Claude loads a skill through the connector, we record which skill, in which language and when. This protects the pack against unauthorized sharing and bulk copying. Lawful basis: legitimate interests.
Claude connection: If you connect your Claude account, we store the fact and time of the connection, and only an irreversible hash of the access tokens. You can disconnect at any time on the My account page. Legal basis: performance of the contract.
Brand profile: Your brand's name, logo, colors, fonts, style, tone and no-go rules, as you enter them. If you ask us to fill it in from your website address, our server fetches that page once and our AI provider summarizes it. The profile is kept until you delete your account. Lawful basis: performance of the contract.
Two-step sign-in: If you switch it on: your passkey's public key and name, the authenticator app secret (encrypted), your backup codes, and only a fingerprint of the codes we email you. These protect your account and are deleted when you delete your account. Lawful basis: performance of the contract.
Feedback: What you write to us on the Contact page while signed in, the screenshots you attach and the license number linked to your account. We use them to reply to you and to improve the service. Images are deleted after 15 days; the feedback itself is kept until you delete your account. Lawful basis: legitimate interests.

3. Who else sees it

A few tasks need outside providers. We have a data-processing agreement with each, and each only receives what its own job requires.

Stripe Payments Europe: Payments and invoicing. Receives your name, email address and billing details. Your card details are held only by them.
Anthropic: Produces the text for the AI steps. Receives only what you typed for that step. If you specifically ask for a description of an uploaded image, it receives that image too. We never send an image of yours on our own. Nothing is used to train the model.
Anthropic, for the Brand profile: It receives the downloaded text of the website you enter. Only when you start that step yourself.
Your Claude account (Anthropic): Only if you connect it: Claude then reads and writes your films at your request. Whatever you do in Claude is governed by Anthropic’s terms and those of your Claude account.
Cloudflare: Serves and protects the site against attacks. Sees technical data: IP address, time of request.
Sybell Informatika Kft., our hosting provider: The server where the database and files physically sit, in Hungary.
Google Analytics / Tag Manager: Visitor analytics. It only receives your data (IP address, browser, the pages you viewed) if you accept in the cookie banner.

We disclose data to authorities only where the law requires it.

4. Where we keep it, and for how long

Data sits on servers in the United Kingdom and the European Union. Processing by Anthropic may also take place in the United States. For that we rely on the contractual safeguards recognized in law.

We keep your account data for as long as the account exists.
After you delete your account we erase everything within 30 days, apart from what accounting rules require us to keep.
Billing records must be kept for 6 years by law.
Images you upload (references, start frames, Hollywood Box photos) are deleted automatically after 15 days.
Waiting-list addresses are deleted after the launch email, except for people who have subscribed in the meantime.

5. Your rights

You have the following rights over your data. Ask for any of them in an email. You don't have to give a reason.

Find out what we hold about you, and get a copy.
Have anything inaccurate corrected.
Have your account and its data erased.
Restrict what we do with your data.
Take your data with you in a machine-readable format.
Object to us processing it on the basis of legitimate interests.

If you think we're handling your data badly, you can complain to a supervisory authority. In the UK that's the Information Commissioner's Office (ico.org.uk); in the EU, the data protection authority where you live.

6. Cookies

Cookies needed for the site to work are always on: to keep you signed in, and to remember your chosen language and currency. We do not ask for consent for these, because the service would not work without them.

We also use analytics codes to see how visitors use the site: Google Analytics / Tag Manager. These ONLY load if you accept in the cookie banner. If you do not, the code is never added to the page and none of your data reaches its provider.

You can change your choice at any time with the "Cookie settings" button at the bottom of the page.

7. Emails

We send two kinds of email. Service updates (for example, that a new version of the skill pack is ready) can be switched off at any time: with a toggle in your account, or with one click at the bottom of the email.

Payment notices (successful charges, cancellations, failed payments) can't be turned off. They're part of the contract and the law requires us to send them.

We do not send newsletters. If you join the waiting list, you get one email when the skill pack launches.