Legal
IntiSafe Privacy Policy
Last updated July 26, 2026 • Effective July 26, 2026
The short version
Your IntiSafe content is end-to-end encrypted. We can’t read it, and we can’t recover it if you lose your recovery key.
We collect only what we need to run the service: account info, billing details, and the communications you send us.
We don’t sell your data. Ever.
We don’t use your content to train AI or for advertising.
We don’t currently run any website analytics or tracking.
Your project records remain yours — accessible in read-only mode and exportable even if your membership lapses or your account is closed, until you ask us to delete them.
You have the right to access, correct, export, or delete your data — just ask.
This policy applies to you wherever you are in the world. If your local law gives you additional rights, we’ll honor them.
When you upload performer information, you are the data controller for that data. IntiSafe processes it on your behalf. Your local legal obligations as a controller are yours to meet.
1. Who We Are
This Privacy Policy explains how CINTIMA LLC, a California limited liability company (“IntiSafe,” “we,” “us,” or “our”), collects, uses, and protects information when you use the IntiSafe platform, website, or related services.
IntiSafe is available to users anywhere in the world. This policy applies regardless of where you are located, and we aim to honor applicable privacy rights under local law wherever you use the platform.
This policy applies to visitors to intisafe.app, people who sign up for our newsletter or contact us, members who start a free trial or a paid membership, and users of the IntiSafe application.
2. What We Collect
We collect different categories of information depending on how you interact with IntiSafe.
2.1 Information You Give Us Directly
Account information — Name, email address, country, professional role (collected via our authentication provider, Clerk, when you sign up with an email code or with Google or Apple)
Billing information — Billing details processed by Stripe — we never see or store your full card number — plus billing address and transaction history
Communications — Messages you send via our contact form, support requests, feedback, survey responses
Newsletter signups — Email address, name, country, role (when you subscribe to our newsletter)
2.2 Your Encrypted Content
When you use IntiSafe, you may upload content including scripts, scene notes, rider documentation, performer information, and production records (“Your Content”). Your Content is encrypted on your device before it reaches our servers. Encrypted files are stored in Cloudflare R2 and associated records are stored in our Supabase database; in both cases we store only encrypted data, which we cannot read. Only you — and people you explicitly share with — hold the keys to decrypt it. If you lose your recovery key, we cannot recover this content for you (see Section 11).
You represent that you have the authorization to upload and process all content you submit, including production materials received in the course of a professional engagement. We do not verify the ownership or licensing status of content you upload; that responsibility rests with you.
A note about performer data. Your Content typically includes personal information about third parties — performers, cast members, and production personnel. This may include information such as physical characteristics, body exposure consents, and health conditions relevant to intimacy work. Information of this kind can be treated as sensitive or special category personal data under privacy laws in many jurisdictions (including the GDPR in the EU and UK), carrying additional protections. As the controller of this data, you are responsible for determining its classification under applicable law and for meeting the additional protections that apply.
When you upload and process performer data through IntiSafe, you are acting as the data controller for that data — you determine what is collected, why, and how it is used. IntiSafe acts as your data processor, handling that data on your behalf and under your direction. This relationship exists regardless of whether you are a US-based IC working domestically, a local IC hired by a foreign production, or a US IC on an overseas shoot. Your obligations as a data controller under applicable local law — including obtaining appropriate consent from performers and maintaining records in compliance with applicable regulations — are yours to meet. IntiSafe’s end-to-end encryption is designed to support those obligations, not substitute for them.
The terms governing our processing of this data as your processor are set out in the Data Processing Agreement, which is incorporated into the IntiSafe Terms of Service as Schedule A and applies when you accept those Terms. A standalone, separately signable copy is also available on request at support@intisafe.app.
2.3 Information Collected Automatically
When you use the platform, our infrastructure providers process basic technical data needed to deliver and secure the service — for example, IP address and standard server/security logs handled by our hosting and authentication providers (Cloudflare and Clerk). We do not currently run website analytics, advertising trackers, or behavioral profiling. See Section 8.
2.4 Information from Third Parties
We may receive information about you from Stripe (payment confirmation and basic transaction details), Clerk (authentication events and account status, e.g., sign-in method, email verification, membership state), and Loops (newsletter and contact-form submission data).
3. How We Use Your Information
We use the information we collect to provide, operate, and improve the IntiSafe platform; authenticate your account and keep it secure; process payments and manage your membership; send service-related communications (account confirmations, billing receipts, security notices); send marketing communications you’ve opted into (newsletter, product updates), which you can unsubscribe from at any time; respond to your support requests and feedback; detect, prevent, and address fraud, abuse, security issues, and technical problems; and comply with legal obligations.
What we don’t do: we don’t sell your personal information to anyone; we don’t use Your Content to train AI models; we don’t share your data with advertisers; we don’t read or analyze the contents of your encrypted files; and we don’t run website analytics or behavioral tracking.
4. Legal Bases for Processing (GDPR / UK GDPR)
If you are in the EEA, UK, or Switzerland, we process personal data on these bases:
• Performance of a contract (Art. 6(1)(b)) — to create your account, run your membership, and provide the platform.
• Legitimate interests (Art. 6(1)(f)) — to secure the platform, prevent fraud and abuse, and communicate about the service, balanced against your rights and freedoms. You may object to processing based on legitimate interests (Section 9).
• Consent (Art. 6(1)(a)) — for marketing emails; you may withdraw consent at any time without affecting prior processing.
• Legal obligation (Art. 6(1)(c)) — to comply with law, valid legal process, and tax/accounting requirements.
Where you upload personal data about performers or other third parties, you are the controller and determine the legal basis for that processing; we act as your processor (Section 2.2).
5. Who We Share Information With (Subprocessors)
We share information only with the service providers below, and only for the purposes described. These are our subprocessors.
Clerk — Authentication and identity; membership/billing state — Name, email, sign-in method, account and membership status
Stripe — Payment processing (via Clerk Billing) — Name, email, billing address, payment details
Supabase — Database for records and metadata — Encrypted content records and account metadata
Cloudflare — Application hosting and encrypted file storage (R2) — Encrypted file blobs; standard server/security logs (IP, request data)
Loops — Email, transactional and marketing (newsletter, contact form, lifecycle emails) — Email, name, role, country, message content (for contact form)
We may also share information when required by law (court orders, subpoenas, regulatory requests), to protect our rights and the safety of our users, or in connection with a business transfer (merger, acquisition, sale of assets) — in which case we’ll notify you and you’ll have the option to delete your account.
About law enforcement requests. Because Your Content is end-to-end encrypted, we cannot provide it in readable form to anyone — including law enforcement — even if compelled by court order. We can only produce what we hold: encrypted data plus account metadata (name, email, billing records).
6. International Data Transfers
IntiSafe is operated from the United States. If you are using IntiSafe from outside the U.S. — whether you are an IC based abroad, a local IC hired by a foreign production, or a US IC working on an overseas shoot — your account information and metadata will be transferred to, stored, and processed in the United States and in the regions where our subprocessors operate.
For transfers of EEA, UK, or Swiss personal data, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum / Swiss addendum as applicable), together with supplementary measures including the end-to-end encryption described in this policy. We enter into a data processing agreement incorporating these clauses with each subprocessor that processes personal data on our behalf (currently Clerk, Stripe, Supabase, Cloudflare, and Loops), and we make our SCCs available on request.
For users in Canada, we process personal information consistent with applicable Canadian privacy law, including PIPEDA and Quebec’s Law 25 where applicable. For users in Australia, we handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles. For users in all other countries, your data is processed in the U.S. in accordance with this policy; where your local law requires additional protections or transfer mechanisms, contact us at support@intisafe.app.
Data location. Our database currently operates from a single region. If your organization requires a specific data-residency arrangement, contact support@intisafe.app before purchase so we can tell you whether we can meet it.
Note: Your Content is end-to-end encrypted before it leaves your device. The transfer protections above apply to your account metadata, not to the encrypted content itself, which we cannot access regardless of where it is stored.
7. How Long We Keep Your Data
We retain personal information only as long as necessary for the purposes described in this policy.
Account information — While your account is active; account records retained as needed for legal and billing purposes following closure
Encrypted content — Retained (read-only) following membership lapse, cancellation, or account closure. We will not delete your project data without your affirmative written request. Upon request, deletion is completed within 30 days.
Billing records — Up to 7 years, as required by tax and accounting regulations
Newsletter subscriptions — Until you unsubscribe
Contact form submissions — Up to 2 years, then deleted unless an ongoing matter requires retention
Your project records are yours. IntiSafe treats production documentation as legal records. Even after your membership lapses or your account is closed, your projects remain accessible to you in read-only mode and are exportable in PDF or JSON format at any time, at no charge. We will not delete project data without your explicit written request.
8. Cookies and Tracking
We keep our use of cookies to the minimum needed to run the service.
8.1 Essential cookies
Our website and app use only the cookies and similar technologies necessary to make them work — for example, keeping you signed in (via our authentication provider) and remembering basic interface preferences. We do not use these for tracking or profiling.
8.2 No analytics or advertising cookies
We do not currently use analytics cookies, advertising cookies, or third-party behavioral trackers. If we introduce analytics in the future, we will update this policy and, where required by law, present a consent mechanism before any non-essential cookies are set.
8.3 Your Choices
You can configure your browser to block or delete cookies, though blocking essential cookies may break sign-in and other core functionality.
9. Your Privacy Rights
9.1 Rights for Everyone
Regardless of where you live, you can access the personal information we hold about you, correct information that’s inaccurate, request deletion of your account and associated data, export your data in a portable format, and unsubscribe from marketing emails (link in every email, or by emailing us). To exercise these rights, email support@intisafe.app. We’ll respond within 30 days.
9.2 Additional Rights for California Residents (CCPA / CPRA)
If you’re a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion of your personal information; to correct inaccurate personal information; to opt out of the sale or sharing of personal information (we don’t sell or share, but the right exists); to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights.
Categories of personal information. In the preceding 12 months we have collected these CCPA categories: identifiers (name, email), customer records (billing address, transaction history), commercial information (membership/transaction records), and internet/network activity limited to security and server logs. We collect these from you directly and from our authentication, payment, and email providers, and use them for the purposes in Section 3. We do not sell or share personal information as those terms are defined under the CPRA, and we do not use or disclose sensitive personal information for purposes that would require offering a right to limit. We retain each category per Section 7. The encrypted content you upload may itself contain personal information about third parties, but because it is end-to-end encrypted we cannot read, categorize, or use it; you act as its controller/business.
You can submit requests by emailing support@intisafe.app. We may need to verify your identity before fulfilling certain requests.
9.3 Additional Rights for EU/UK/Swiss Residents (GDPR)
If you’re in the EEA, UK, or Switzerland, you also have the right to restrict or object to certain processing, to withdraw consent at any time (for processing based on consent), and to lodge a complaint with your local data protection authority.
9.4 Rights for Users in Other Jurisdictions
Privacy law is active in many countries beyond the EU and California. If you are located in Canada, Australia, Brazil, South Africa, or anywhere else with applicable data protection law, your local law may give you rights similar to those described above — including rights of access, correction, deletion, and complaint.
We will honor reasonable requests made under applicable local law. Contact support@intisafe.app and identify the rights you are seeking to exercise. We'll respond within 30 days.
10. Children's Privacy
IntiSafe is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe we've collected information from a minor, contact us at support@intisafe.app and we'll delete it.
11. Security
Our protections include: true end-to-end encryption for content stored in IntiSafe — your data is encrypted on your device before it reaches us, and we hold no key to decrypt it (if you lose your recovery key, your encrypted content is permanently unrecoverable, by you and by us; there is no backdoor); encrypted connections (TLS/HTTPS) for all data in transit; limited employee access to systems containing personal data, on a need-to-know basis; and regular security reviews of our infrastructure and code.
No system is completely secure. If we become aware of a personal-data breach affecting your information that is not protected by end-to-end encryption, we will, without undue delay, notify affected users and the relevant authorities as required by applicable law (including, where applicable, California Civil Code § 1798.82 and, for EEA/UK personal data, the GDPR’s 72-hour supervisory-authority notification); describe the nature of the incident and the categories of data involved; and state the measures taken. Because most of Your Content is end-to-end encrypted and unreadable to us, a compromise of our storage would expose only ciphertext and account metadata, not the readable contents of Your Content.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we’ll notify you via email or through the platform at least thirty (30) days before the changes take effect, and update the “Last updated” date at the top of this page. For minor changes (clarifications, formatting), we’ll update the date without separate notification.
13. Do Not Track
Some browsers offer a “Do Not Track” signal. There is currently no industry standard for how to interpret these signals. Because we do not run analytics or behavioral tracking, we do not track you across the web regardless of this signal. We offer the cookie controls and privacy rights described in Sections 8 and 9.
14. Contact
Questions, concerns, or privacy requests? Reach out to:
CINTIMA LLC · support@intisafe.app
If you are located outside the U.S. and are not satisfied with our response to a privacy request, you may have the right to lodge a complaint with your local data protection or privacy authority.