Your privacy

This notice explains how Delulus Productions, the course brand of Shai Snir and Adi Moyal, uses information when you browse, pre-order, or contact us about Cinematic AI. For privacy requests, contact shaisnir@gmail.com.

We use the contact details you provide, order references, payment and refund status, course-access eligibility, and messages you send us. Technical requests can include your IP address, browser information, and security-challenge results. We use this information to confirm purchases, maintain the places counter, provide access and support, prevent abuse, and meet applicable recordkeeping obligations. If you submit a project for review, we also process the submitted work, feedback, and assessment score to evaluate your project and administer course certificates.

For international purchases, Dodo Payments handles the payment form and payment-card details as merchant of record. For Israeli purchases, Morning and Grow handle the payment page and card processing. Our course application receives order and payment information; it does not store your full card number or security code.

We use Cloudflare for hosting, application processing, database and media storage through D1 and R2, and Turnstile security checks. For international purchases, Dodo Payments processes transactions, billing, tax information, refunds, and disputes. For Israeli purchases, Morning and Grow process payment and transaction information, and Morning provides the payment documents. Information needed to operate these services is shared with the relevant provider. Skool processes the profile information, posts, and interactions you provide in the community. Zoom processes information needed for participation in group support sessions, including your display name and any audio, video, or chat you choose to share. Processing may take place outside your country, subject to applicable data-protection requirements.

We retain information for as long as needed to deliver your purchase, administer access, resolve disputes, and satisfy applicable legal or accounting obligations. Retention varies by record type; deleting a browsing preference does not delete a payment record that must be retained.

Website analytics is on by default unless you refuse it in Privacy choices or your browser sends Global Privacy Control or Do Not Track. It measures page sections, button actions, invitation sources and payment-option choices using a random browser identifier. Invitation attribution identifies the link that brought a visit, not the person using it. We do not send names, email addresses, invitation access tokens or full page URLs in these analytics events. Session replay is a separate optional choice in Customize. When accepted, it records masked page interactions on public training pages. Text and attributes are masked; forms, payment content and embedded frames are excluded. Rejecting or withdrawing replay stops future recording. This choice does not grant marketing email permission. The configured PostHog service processes analytics in the United States.

When website analytics is active, we also record broad traffic-source and campaign categories, which page sections become visible, waitlist-form starts and form-error categories. These analytics events do not include what you type into the form.

Essential browser storage, payment records and security checks remain active when analytics is rejected. Your analytics choice is stored in this browser; while analytics is active, a random tab-session identifier is kept in browser session storage. Privacy choices in the footer lets you reject analytics or change your choice. Withdrawal stops future browser tracking and clears that identifier. It does not erase required payment records or automatically delete previously received analytics; contact shaisnir@gmail.com for privacy requests. Marketing email permission and email-engagement tracking are separate from website analytics.

Depending on the law that applies to you, you may request access, correction, deletion, restriction, or a copy of your personal information, or object to certain processing. Contact shaisnir@gmail.com. We may need to verify your identity and explain when a legal obligation requires us to retain information. You may also contact your relevant data-protection authority.

For details of providers’ own processing, read Dodo Payments’ privacy notice and Cloudflare’s privacy notice.

Delulus Director is our filmmaking course companion in ChatGPT. We process your sign-in email, account and enrollment identifiers, course-access status, cohort, tier and course language, authentication and session information, connection permissions, and access and security events to verify course eligibility, connect Director, prevent misuse and provide support. Authentication may also process your IP address and browser information. Dedicated review accounts use sample course-access data and password authentication.

Cloudflare hosts Director, its databases and OAuth connection storage. When email sign-in is enabled, Resend processes the recipient address and sign-in message for delivery. OpenAI operates ChatGPT and receives the tool requests and responses needed to use the connection. The course-access response includes your eligible enrollment identifiers, cohort, tier and course language. The guidance tool returns course guidance for the requested filmmaking stage. Director does not provide a separate project-storage feature; project context is supplied in your ChatGPT conversation. OpenAI's own privacy notices and settings apply to your use of ChatGPT.

We retain service records while they are needed to provide access and support, manage eligibility, prevent abuse, resolve disputes or meet applicable recordkeeping obligations, as described in this course privacy notice. Record retention varies by category. Expiry of a sign-in code, session, access token or course entitlement does not mean that all associated service records have been deleted. Signing out or disconnecting Director does not itself delete your ChatGPT conversation history or all Delulus account, access or audit records. For requests concerning Delulus service records, contact course@delulus.productions; the privacy rights and applicable legal-retention exceptions described in this notice continue to apply.

By default, unless you have refused measurement, visits through a personal invitation are linked to the contact record holding that invitation. We record visit count and first/last visit times for enrollment analytics and follow-up. This is identifiable activity, not anonymous data. Refuse in Privacy choices to stop it; refusal does not affect registration or payment. Website analytics also runs by default unless refused; session replay still requires separate opt-in.

Visit observations and hashed withdrawal markers are retained for 30 days in the active database and then removed by scheduled cleanup. One visible tab session counts once. Forwarded links do not prove who visited. Refusal requests deletion of remembered sessions for the invitation currently open on this device; a pending notice means server deletion has not completed. Reopen Privacy choices to retry. For other sessions or full history deletion, contact shaisnir@gmail.com. Scheduled retention cleanup removes old observations and hashed withdrawal markers; failures can delay deletion. Essential lead/payment records and separately exported analytics are not deleted. This measurement does not authorize new emails.