Privacy Policy

Last updated: February 23, 2026

1. Introduction

At MasterTimeline, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have regarding your information.

This policy applies to all users of MasterTimeline, available at mastertimeline.com. By using our service, you acknowledge that you have read and understood this Privacy Policy. For information about our compliance with the EU General Data Protection Regulation, please see our GDPR Compliance page.

2. Data We Collect

We collect the following categories of data to provide and improve our service:

Account Data

When you create an account, we collect your email address, display name, and password. Your password is stored as a cryptographic hash and is never stored or accessible in plain text.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, actions performed (such as generating content or creating projects), timestamps of activity, and session duration.

Content Data

We store the content you create and upload on the platform, including story concepts, project configurations, uploaded images and videos, AI-generated images, videos, and text, timeline layouts, and all other creative content associated with your projects.

Payment Data

Payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or other sensitive payment credentials on our servers. We retain only your subscription status, subscription tier, billing cycle dates, and transaction history for credit allocations.

Technical Data

We collect standard technical data transmitted by your browser, including your IP address, browser type and version, operating system, device type, screen resolution, and referring URL.

3. How We Use Your Data

We use the data we collect for the following purposes:

Providing the service: To operate your account, store your projects, process AI generation requests, manage your subscriptions, and deliver the core functionality of MasterTimeline.
Processing payments: To manage your subscription billing, allocate credits, process upgrades and cancellations, and maintain accurate billing records.
Improving features: To analyze usage patterns, identify popular features, diagnose technical issues, and guide product development decisions. This analysis is performed on aggregated or anonymized data wherever possible.
Communicating updates: To send you essential service notifications, including account confirmations, subscription changes, security alerts, and material changes to our terms or policies. You may also opt in to product updates and feature announcements.
Preventing abuse: To detect and prevent fraudulent activity, enforce our Terms of Service, protect the security of our platform, and comply with legal obligations.

4. AI & Third-Party Data Sharing

To provide our service, we share specific data with the following third-party sub-processors. Each sub-processor receives only the data necessary to perform its function:

Supabase (database, authentication, and file storage) — Stores all user account data, project data, generated content, and uploaded files. Supabase also handles user authentication, including email/password and OAuth flows.
OpenRouter (text AI aggregator) — Receives story prompts, narrative concepts, and chat messages for the purpose of generating story beats, AI chat responses, and other text content. OpenRouter does not receive your account information or payment data.
Fal.ai (image and video AI aggregator) — Receives image generation prompts, reference images (including uploaded character references and panel images), and video generation prompts for the purpose of producing AI-generated images and videos. Fal.ai does not receive your account information or payment data.
Stripe (payment processing) — Receives your email address, payment method details, and billing information for the purpose of processing subscription payments and managing your billing account.
Vercel (application hosting) — Serves the MasterTimeline web application and receives standard web traffic data, including IP addresses, request headers, and page requests, as part of normal web server operation.

We do not sell your personal data. Our third-party sub-processors are contractually obligated to process your data only for the purpose of providing their respective services and are prohibited from using your data for their own independent purposes.

5. Data Retention

We retain your data according to the following policies:

Active account data: Your account information, projects, and content are retained for as long as your account remains active and in good standing.
Deleted content: When you delete a project, panel, or other content within the platform, that content is permanently purged from our systems within thirty (30) days.
Account deletion: When you request deletion of your account, all associated personal data, projects, uploaded files, and generated content are permanently removed from our systems within thirty (30) days.
Anonymized analytics: Aggregated, anonymized usage statistics that cannot be traced back to an individual user may be retained indefinitely for the purpose of improving our service.
Legal obligations: We may retain certain data for longer periods where required by applicable law, such as tax and financial records related to subscription payments.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: You have the right to request a copy of the personal data we hold about you.
Correction: You have the right to request that we correct any inaccurate or incomplete personal data.
Deletion: You have the right to request deletion of your account and all associated personal data.
Export: You have the right to receive your content in a portable format. You can export your project content, including generated images and timeline data, through the platform's export features.
Object to processing: You have the right to object to certain types of data processing, particularly processing based on legitimate interest.
Restrict processing: You have the right to request that we limit the processing of your personal data under certain circumstances.

To exercise any of these rights, please contact us at privacy@mastertimeline.com. We will respond to your request within 30 days. For EU/EEA residents, additional rights under GDPR are detailed on our GDPR Compliance page.

7. Cookies

We use a limited number of cookies and similar technologies to operate and secure our platform. For detailed information about the specific cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

We will update the "Last updated" date at the top of this page.
For material changes that significantly affect how we collect, use, or share your data, we will notify you via the email address associated with your account at least 30 days before the changes take effect.
Your continued use of the service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

9. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@mastertimeline.com