Privacy Policy

Effective date: 2026-01-01

Movie Calendar (“we”, “us”, “our”) operates this service. This Privacy Policy explains what we collect, why, and how to control it.

1. Information we collect

Account information. When you create an account, we collect your email address.

Authentication metadata. Devise stores an encrypted password, a remember-me token, and the timestamp / IP of your last sign-in for abuse triage.

Uploaded files. Any files you upload are stored in our object store with a per-file random key.

Audit log. Mutating admin actions are written to an internal audit log keyed by actor + action + timestamp.

2. How we use it

  • To authenticate you.
  • To send transactional email (password reset, email change).
  • To send marketing email only when you have opted in. You can opt out via the link at the bottom of every marketing email or via the preference center linked in each message.
  • To prevent abuse and respond to support requests.

3. Third-party processors

  • Email delivery: your configured SMTP provider.
  • Object storage: Amazon S3 (or your configured equivalent).
  • LLM providers (when the app makes AI calls on your behalf): the provider you have configured (OpenRouter, Anthropic, etc.).

4. Data retention

Account data is retained until you delete your account. Soft-deleted accounts are kept for a short grace window and then purged.

5. Your rights

You can:

  • Update your email preferences via the link in any marketing email.
  • Request a copy of your data by emailing [email protected].
  • Delete your account by emailing support — we’ll act on the request within a reasonable window.

6. Contact

Questions about this policy? Email [email protected].