← Root Film

Privacy Policy

Last updated 20 August 2026 · version 2026-08-20

Draft — under legal review. This document describes how Root Film actually works, but it has not yet been reviewed by a solicitor. It may change.

What we collect, why, who else touches it, and how long we keep it. Root Film is operated by VFX Los Angeles Inc.

What we collect

Account details: your name, email address and the organisation you belong to. These come from Clerk, who handle sign-in for us.

Billing details: your plan, your invoices and your payment status. Payments are processed by Stripe. We never see or store your card number.

Your content: the images, video, audio, 3D files and prompts you upload or generate, and the projects they sit in.

Usage records: what you generated, which model was used, when, what it cost, and whether it succeeded. This is how billing and the provenance record work.

Support conversations, if you use the chat widget or email us.

Why we hold it

To run the service you asked for: making the thing you asked us to make, and showing it back to you.

To bill you accurately, and to show you where your credits went.

To keep the provenance record, which exists so you can show how a piece of work was made.

To keep the service working and secure — diagnosing failures, preventing abuse, and investigating anything that looks wrong.

To answer you when you get in touch.

We do not train on your content

We do not use your material to train our own models. That covers what you upload and what you generate — your inputs, your prompts and your outputs alike. We do not sell it or share it for advertising, and we do not pass it to anyone else to train on.

When you train a custom model, that happens only on material you deliberately upload for the purpose, and the result is available only to your organisation.

Who else processes your data

To run the service we pass data to the companies below. Each one only receives what it needs for its job.

Model providers receive the content of a request — your prompt and any reference material — at the moment you ask for a generation. Which provider receives it depends on the model you choose.

WhoWhat they doWhat they receive
ClerkSign-in and accountsName, email, organisation
StripePaymentsBilling details; card data goes to Stripe, never to us
NeonOur databaseAccount records, project data, usage records
Cloudflare R2File storageYour uploaded and generated files
ModalGPU compute we run ourselvesContent of requests run on our own models
VercelHostingRequests to the site, and operational logs
ResendEmail we send youYour email address and the message
CrispSupport chatWhat you type into the chat, and your email
Model providersGenerating images, video, audio and 3DYour prompt and reference material for that request
AnthropicThe prompt helper, and automatic captions for training imagesPrompt text; reference images wired into a prompt; photos in a training dataset
GitHubFault reportsProject and operation identifiers, and error text, when the service files an incident
ElevenLabsVoice generation and cloningThe text to speak, and any voice recording you upload

Which model providers

Which third parties receive a request depends on the model you pick, and the list changes as models are added and retired. The current list is shown in the app wherever you choose a model, and includes providers for image, video, voice and 3D generation.

One 3D capability is provided under our own name using an upstream supplier.

If you supply your own API key for a provider, that provider bills you directly and processes your data under your own agreement with them, not ours.

How long we keep it

While your account is active we keep your content so you can use it. You can delete a project or an individual file at any time, and doing so removes it from the service.

Plans describe an asset retention window — 30 days on the free plan, and no fixed limit on the paid plans.

BEING PRECISE ABOUT THIS, BECAUSE IT MATTERS: that window describes what your plan entitles you to and what we may do. There is no scheduled process today that deletes your project content when a plan window expires. If you need something gone, delete it, or ask us and we will.

Separately, some temporary files — export archives and similar — do carry their own expiry and are deleted automatically by a scheduled job when they lapse. Deleted files are removed from storage shortly afterwards rather than instantly.

Account and billing records are kept for as long as the law requires us to keep them, which is longer than your content.

If you cancel

Cancelling stops future billing. Your content is not deleted at the moment you cancel.

If you want your material removed when you leave, email us and we will do it.

Your rights over your data

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. You can also object to some uses of it.

Email info@vfxlosangeles.com and we will deal with it.

Depending on where you live you may have further rights over your personal data. We will honour any that apply to you.

Where your data goes

Our suppliers operate internationally, so your data may be processed outside the country you are in.

Where we transfer personal data across borders we do so under the safeguards the applicable law requires.

Cookies

We use cookies that are necessary to sign you in and keep you signed in. We do not use advertising cookies, and the app has no analytics or tracking service.

Our support chat is provided by Crisp and loads on every page, including before you sign in. It sets its own cookies so it can recognise a returning conversation.

Security

Your projects, assets and generations are scoped to your organisation and are not visible to other customers.

Two exceptions, stated rather than glossed. Our support and engineering staff can access account data where it is necessary to investigate a fault or abuse. And anything you post to the community forum is public to every signed-in customer by design.

Voices you train are built on our own infrastructure and belong to your organisation like any other model.

Any provider keys you add are stored encrypted and are not shown back to you in full.

No service is perfectly secure. If something happens that affects your data, we will tell you.

Changes

We may update this policy. The date at the top tells you when it last changed, and we will tell you about anything significant.