Privacy Policy

INDUCE

Privacy Policy

Effective Date: June 1, 2025 | Last Updated: May 26, 2026

This Privacy Policy describes how Induce Media Labs, Inc. ("Induce," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you access and use our AI-powered cinematic production platform available at getinduce.com, including all related services, APIs, tools, and integrations (collectively, the "Services").

Enterprise Processor Notice: Where Induce processes personal information on behalf of enterprise customers or their affiliates acting as data controllers, such processing is governed by our separate agreements with those customers and not by this Privacy Policy. If you are an end user of an enterprise customer's deployment of Induce, please refer to that customer's privacy policies. Induce is not responsible for the privacy practices of its enterprise customers.

Please read this policy carefully. By using our Services, you agree to the practices described here. If you do not agree, you must discontinue use of the Services.

1. Who We Are

Induce is an AI-powered cinematic production platform serving independent creators, UGC producers, and professional filmmakers. We process scripts, creative briefs, visual references, and production assets to generate shot breakdowns, maintain cross-scene consistency, and enable studio-grade workflows powered by our proprietary Narrative Intelligence technology.

Legal Entity: Induce Media Labs, Inc.

Registered Address: 8 The Green, Ste B, Dover, Kent, Delaware 19901

Privacy Contact: privacy@getinduce.com

2. Information We Collect

2.1 Information You Provide Directly

• Account registration data: name, email address, password, and profile image
• Professional context: role, production studio, and use case
• Project Content: scripts, screenplays, story briefs, shot descriptions, storyboards, production notes, and other creative materials you upload or input (collectively, Inputs)
• Visual assets: images, reference photos, style guides, and character references uploaded for AI processing
• Voice and audio samples, if you opt into voice-enabled features
• Billing and payment information, processed by our third-party payment processor; we do not store raw card or banking data
• Communications you send us via support channels, email, or feedback forms
• Survey responses, feedback, and other information you voluntarily provide

2.2 Biometric and Sensitive Data

Certain features of the Services may involve the collection or processing of sensitive data:

• Face and voice characteristics: If you use features that process uploaded images or audio for visual consistency or voice-based functions, such processing operates on visual style parameters and audio characteristics only. We do not perform facial recognition, create biometric identification templates, or use such data to uniquely identify you. We do not create or store biometric identifiers or biometric information as defined under the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, Washington MIPA, or similar state laws.
• Voice data: If you opt into voice-enabled features, any voice samples are used solely to provide the requested feature and are not shared with third parties for their own purposes or used to train AI models without your separate consent.
• You may choose not to use features that involve image or voice processing. Declining will not affect your access to the core Services.

2.3 Information We Collect Automatically

• Usage data: features accessed, prompts entered, generations initiated, project history, and session duration
• Device and technical data: browser type, operating system, IP address, and device identifiers
• Log data: access times, pages viewed, errors encountered, and API call metadata
• Location data: general location inferred from IP address (city, state, country — not precise location)
• Communication interaction data: whether you open or click links in our emails, through pixel tags and similar technologies

• Cookies and similar technologies (see Section 9)

2.4 Information from Third Parties

• OAuth/SSO providers such as Google or Apple, if you sign in via these services
• Payment processors (Stripe, Inc.) for subscription and transaction management
• Analytics partners including Google Analytics — to understand platform usage and user behavior. You may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout
• Advertising partners, where applicable, for delivering relevant product communications
• Studio workflow integrations you connect to your Induce account

3. How We Use Your Information

3.1 Service Delivery

• Processing your Inputs through our AI models to generate Outputs including shot breakdowns, character sheets, visual consistency maps, and other cinematic production materials
• Maintaining Persistent Project Memory so that character profiles, visual styles, and production parameters carry across scenes and sessions
• Enabling collaboration features, version history, and workflow integrations

• Processing payments and managing your subscription

3.2 Platform Improvement

• Creating Aggregated Data and Usage Data — as defined in our Terms of Service — which Induce owns and may use for any lawful business purpose including product improvement, AI model development, analytics, and benchmarking. Aggregated Data and Usage Data do not contain your Project Content in recognizable form and cannot be used to identify you or your creative work.
• Developing new features and product capabilities based on usage patterns

• Conducting internal research and quality assurance

Important — AI Training: We do not use your Inputs or Project Content to train our AI models or any third-party AI models without your explicit, separately obtained, affirmative consent. This applies to all subscription tiers including free accounts. See our Terms of Service Section 5 for complete AI training practices and your opt-in rights.

3.3 Communication and Support

• Responding to support requests and technical issues

• Sending transactional communications including receipts, Account alerts, and security notices
• Sending product updates and marketing communications where you have opted in — you may opt out at any time via the unsubscribe link in any marketing email

3.4 Safety, Legal, and Compliance

• Enforcing our Terms of Service and Acceptable Use Policy

• Detecting, preventing, and investigating fraud, abuse, or security incidents
• Complying with applicable laws, regulations, and legal processes
• Protecting the rights, property, and safety of Induce, our users, and the public

4. AI Processing and Your Creative Content

When you submit Inputs, our systems process this content using AI models to generate Outputs. Here is how we handle this responsibly:

• Your Inputs are processed solely to provide the Services you request and to maintain project continuity within your workspace.
• Uploaded assets used in a generation session are not retained beyond what is required to fulfil your request and maintain your project state, subject to your Account settings and any explicit save actions. Assets not saved to your workspace are deleted within 24 hours of processing.
• We do not perform facial recognition, biometric identification, or identity verification on any uploaded images or videos. Any face-consistency features operate on visual style parameters only.
• All assets uploaded to Induce are set to private by default. They are not visible to or accessible by other users unless you explicitly change your sharing settings.
• AI Outputs belong to you, subject to the ownership provisions in our Terms of Service.
• We maintain strict role-based access controls on Project Content within our systems. Your content is not shared with other users or made available to third parties except as described in Section 5.

5. How We Share Your Information

We do not sell your personal information. We share information only in the circumstances described below:

5.1 Service Providers

We work with third-party vendors who process data on our behalf under contractual obligations that restrict their use of your data. These include: Amazon Web Services (cloud infrastructure); Stripe, Inc. (payment processing); Google Analytics and similar analytics platforms; and AI model infrastructure providers. All such providers are bound by Data Processing Agreements where required.

5.2 AI Model Providers

Some of our AI capabilities are powered by third-party foundation model providers. When your Inputs are processed through these models, they are shared with the relevant provider solely to the extent necessary to fulfil your request. We select providers who maintain strict confidentiality commitments and do not use customer inputs to train their own models without consent.

5.3 Studio Workflow Integrations

If you connect third-party tools to your Induce account, data exchanged through those integrations is subject to the privacy policies of those third parties. You control which integrations you authorize.

5.4 Enterprise Account Administrators

If you join an Induce enterprise or team account, the administrator of that account may access and control your Account. If you created an Account using an email address belonging to your employer or organization, we may disclose your email address to administrators or representatives of that organization to facilitate enterprise account management.

5.5 Business Transfers

In the event of a merger, acquisition, asset sale, or corporate restructuring (including investments, financing, or public stock offerings), your information may be disclosed to prospective counterparties and their advisers, and transferred as part of any such transaction. We will notify you by email and/or prominent in-product notice before your information becomes subject to a materially different privacy policy.

5.6 Legal and Compliance Disclosures

We may disclose your information if we believe in good faith that disclosure is required by law, regulation, legal process, or valid governmental request, or to protect the rights, property, or safety of Induce, our users, or the public.

5.7 Aggregated or De-identified Data

We may share Aggregated Data or de-identified data with partners, researchers, and the public for lawful business purposes. We will not attempt to re-identify any such data.

6. Data Retention

We retain your personal information and Project Content for as long as your Account is active or as needed to provide the Services. Specific retention practices:

• Account data: retained for the duration of your Account and for up to 30 days following Account deletion, to allow for recovery requests
• Project Content saved to your workspace: retained until you delete it or until Account deletion
• Uploaded assets used solely for a one-time generation and not explicitly saved: deleted within 24 hours of processing
• Billing records and transaction logs: retained for up to 7 years as required by applicable tax and financial regulations
• Security and access logs: retained for up to 90 days
• Marketing preferences and opt-out records: retained for up to 3 years to honor your preferences

You may request deletion of your Account and associated data at any time by contacting privacy@getinduce.com. We will process deletion requests within 30 days, except where retention is required by applicable law. Note that deletion of your Account does not affect Aggregated Data already derived from your usage, as such data cannot identify you.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information and Project Content, subject to legal retention obligations
• Portability: Request a machine-readable export of your personal data and project files
• Objection or Restriction: Object to or request restriction of certain processing activities
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link or by contacting us
• Withdrawal of Consent: Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing

See Section 11 for California residents; Section 12 for other US state residents; Section 13 for EEA and UK users.

To exercise any of these rights, contact us at privacy@getinduce.com or write to our registered address. We will respond within the timeframe required by applicable law, generally within 45 days. We may need to verify your identity before processing your request.

8. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256)
• Role-based access controls limiting internal access to Project Content

• Regular security assessments and penetration testing

• Mandatory multi-factor authentication for production environment access

• Incident response procedures and breach notification protocols

Induce's security controls and compliance certifications (including any applicable SOC 2 reports) are described at getinduce.com/security. Enterprise customers may request our security documentation through their account representative.

No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we are committed to maintaining protections that meet or exceed industry standards for an AI platform handling sensitive creative intellectual property.

9. Cookies and Tracking Technologies

We and our service providers and analytics partners use cookies, pixel tags, web beacons, local storage, and similar technologies to:

• Maintain your login session and Account preferences

• Understand how users navigate and use the platform (via tools including Google Analytics)

• Measure feature adoption and product performance

• Deliver relevant product communications

• Enable security features such as fraud detection

You may control cookies through your browser settings. Most browsers accept cookies by default until you change your settings. Disabling certain cookies may affect the functionality of the Services. We do not use third-party advertising cookies to serve behavioral advertising to you across third-party websites. To opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user under 18 has created an Account, we will terminate that Account and delete all associated data. If you believe a minor has provided us with personal information, please contact us at privacy@getinduce.com.

11. California Residents — CCPA and CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020:

• Right to Know: The categories and specific pieces of personal information we collect, use, disclose, and sell or share
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information for monetary consideration. To the extent any of our analytics integrations constitute sharing under the CPRA, you may opt out by contacting us
• Right to Limit Use of Sensitive Personal Information: Contact us to limit use of sensitive personal information to what is necessary to provide the Services
• Right to Non-Discrimination: Exercising your privacy rights will not result in discriminatory treatment

Shine the Light: California Civil Code Section 1798.83 permits California residents to request information about personal information disclosed to third parties for direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes without your consent.

To submit a verifiable consumer request or to designate an authorized agent, contact us at privacy@getinduce.com or write to our registered address. We will respond within 45 days.

12. Other US State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, or Utah may have rights similar to those described in Section 11, including rights to access, correct, delete, and port personal data, and to opt out of certain processing. To exercise these rights, contact us at privacy@getinduce.com. We will respond in accordance with the applicable law of your state of residence.

13. Notice to Users in the EEA and United Kingdom

If you are located in the EEA or UK, the following additional provisions apply under GDPR and UK GDPR:

Lawful Bases for Processing

• Performance of a contract: Processing necessary to provide the Services you have subscribed to
• Legitimate interests: Product improvement, security, fraud prevention, and direct marketing to existing users, where not overridden by your interests or fundamental rights
• Consent: Marketing communications, AI training opt-in contributions, and optional features
• Legal obligation: Compliance with applicable laws and regulations

International Data Transfers

Your data may be transferred to and processed in the United States and other countries. We rely on applicable transfer mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure adequate protection for your personal data when transferred outside the EEA or UK.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority (e.g., your national data protection authority) if you believe our processing of your personal data violates applicable law.

14. International Data Transfers

Our Services are hosted in the United States. If you access the Services from the EEA, UK, or other regions with data protection laws that differ from US law, please note that your personal information is transferred to and processed in the United States for storage and processing. We may also transfer your personal information to other countries in connection with operating our Services. By providing any personal information through our Services, you acknowledge this transfer. We implement appropriate safeguards, including SCCs, to protect personal data transferred internationally.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy at getinduce.com/privacy with a revised Effective Date, sending an email notification to your registered address for significant changes, and displaying a prominent in-product notice. Your continued use of the Services after the effective date constitutes acceptance of the changes.

16. Contact Us

Induce Media Labs, Inc.

8 The Green, Ste B, Dover, Kent, Delaware 19901

Privacy: privacy@getinduce.com

Legal: legal@getinduce.com

Website: getinduce.com