Legal
Last updated: 18 September 2026
This Privacy Policy explains how The Greenroom collects, uses, stores and shares personal information when you use The Greenroom.
It also explains your rights under UK data-protection law.
Dominic Devine, trading as The Greenroom, is the data controller responsible for the personal information described in this Policy except where we expressly act in another capacity.
Dominic Devine trading as The Greenroom
Business correspondence address: 3–4 Sentinel Square, London NW4 2EL, United Kingdom
Email: hello@the-greenroom.app
This Policy applies to personal information processed through Greenroom’s:
It applies whether you are a registered user, guest user, co-writer, invited contributor, purchaser or person contacting Greenroom.
Greenroom accounts are available to users aged 13 and over.
If you are under 18, this Policy applies to you in the same way as it applies to an adult, but we recognise that children and younger users deserve particular protection.
In simple terms:
We design and operate Greenroom with children’s interests, privacy and developmental needs in mind where the service is likely to be used by children.
We may use proportionate age-assurance measures and apply additional privacy or safety settings to younger users.
The information we collect depends on the Greenroom features you use.
This may include:
We do not need or receive your Google password.
If you choose to complete a professional profile, we may collect information such as:
You control whether many of these fields are provided and, where the feature allows, who can see them.
When you create or submit a project, we may collect:
Uploaded files may be converted or text-extracted to enable analysis.
Where Greenroom registration is used, we may process:
These records may be retained differently from ordinary account information because their purpose is to preserve historical evidence.
We may collect:
This information may be supplied by another writer before the co-writer has a Greenroom account.
We may create and store information derived from your submitted work, including:
This information is generated as part of the Greenroom service.
We may process:
Payment-card details are processed by our payment provider, such as Stripe. Greenroom does not ordinarily receive or store your complete card number or card security code.
We may collect information contained in:
We may process:
We use cookies, local storage and similar technologies as described in our Cookie Policy.
We obtain personal information:
UK data-protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we rely on the following bases.
Purpose: creating and operating accounts, receiving works, storing projects, providing coverage, supplying reports and administering purchases.
Lawful basis: performance of a contract or steps requested before entering into a contract.
Purpose: transmitting and processing your work through approved AI systems to generate the feedback or coverage you request.
Lawful basis: performance of our contract with you.
Where information is processed for security, quality assurance or prevention of abuse, we may also rely on legitimate interests.
Purpose: creating and preserving timestamped registration, contributor and chain-of-title records and protecting their historical integrity.
Lawful basis: performance of a contract and our legitimate interests in providing a reliable evidential registration service, preventing fraud and preserving the integrity of records.
Where a legal obligation requires retention or disclosure, we rely on that obligation.
Purpose: recording contributors, notifying co-writers, facilitating shared access and protecting legitimate interests of all contributors.
Lawful basis: performance of a contract and legitimate interests in operating collaborative projects and maintaining accurate records.
Purpose: processing payments, maintaining transaction records, preventing fraud, accounting and meeting tax obligations.
Lawful basis: performance of a contract, legal obligation and legitimate interests.
Purpose: answering questions, resolving problems, investigating complaints and maintaining service records.
Lawful basis: performance of a contract and legitimate interests in operating and improving Greenroom.
Purpose: authentication, system security, detecting abuse, preventing payment fraud, preserving logs and investigating incidents.
Lawful basis: legitimate interests and, where applicable, legal obligations.
Our legitimate interests are protecting Greenroom, its users and their creative material.
Purpose: understanding failures, aggregate service use, reliability and feature performance.
Lawful basis: legitimate interests where the impact on users is proportionate.
Where consent is legally required for device storage, analytics or another processing activity, we obtain consent instead.
Purpose: sending news, product information or promotional communications.
Lawful basis: consent where required, or another basis specifically permitted by electronic-marketing law.
You can opt out at any time.
We take particular care with marketing to users under 18 and do not use children’s data for behavioural advertising.
Purpose: responding to legal requirements, enforcing agreements, establishing or defending legal claims and cooperating with lawful authorities.
Lawful basis: legal obligation and legitimate interests.
Greenroom does not ordinarily ask you to provide health information, racial or ethnic origin, political opinions, religious beliefs, sexual-orientation information, biometric information or other special-category personal data about yourself or identifiable real people.
A creative work may nevertheless contain sensitive information, particularly where it concerns real events or real individuals.
You should not include unnecessary sensitive personal information about identifiable real people.
If you submit personal information about another person, you are responsible for ensuring that you have a lawful right to do so.
Where Greenroom becomes aware that special-category information is being processed and UK data-protection law applies, we will ensure an appropriate legal condition exists or restrict the processing where necessary.
Greenroom uses commercial artificial-intelligence services to analyse submitted creative work.
This means material may be transmitted to an AI provider for processing.
Our current coverage infrastructure includes commercial services supplied by Anthropic.
We choose commercial/API services rather than consumer AI accounts for this processing.
Under Anthropic’s current commercial arrangements, commercial customer data is processed on the customer’s behalf and is not used by default to train Anthropic’s generative models.
Greenroom’s own policy is that:
AI providers may retain limited data for periods permitted under their commercial, security, abuse-prevention or legal arrangements. We therefore do not promise that material is necessarily erased from every provider system immediately at the end of an API request.
Your uploaded creative work is private by default unless you deliberately use a feature that makes specified information available to others.
We do not automatically send scripts to producers, studios, development executives, agents or other industry professionals.
Access may be provided only to:
Greenroom administrators may need limited access when investigating a technical problem, abuse report, legal issue or support request.
Some Greenroom features may allow you to make profile or project information visible to other users or to the public.
Where possible, Greenroom provides visibility controls.
You should assume that information which you deliberately publish publicly can be copied, indexed or shared by others outside Greenroom.
Private scripts do not become public merely because you maintain a public professional profile.
Where Greenroom offers a project leaderboard or similar public feature, participation will be based on the relevant settings or opt-in mechanism.
If another Greenroom user identifies you as a co-writer, we may receive your name and email address before you have an account.
We may use this information to:
We do not treat the fact that somebody has identified you as a co-writer as conclusive legal proof of authorship.
If you believe information recorded about you is inaccurate, contact hello@the-greenroom.app.
Greenroom uses automated systems to produce creative analysis, scores and recommendations.
These outputs are intended as editorial feedback.
Greenroom does not ordinarily use these outputs to make a decision that produces a legal or similarly significant effect on you.
A score does not determine your ownership of a work, employment status, legal rights or entitlement to representation.
If Greenroom introduces automated decision-making that has legal or similarly significant effects, we will assess the applicable legal requirements and provide any additional information or rights required by law.
We share information only where reasonably necessary for the purposes described in this Policy.
Our service providers may include:
Base44
Greenroom is built and operated using Base44 infrastructure and services, which may provide application hosting, authentication, database, private file storage and related platform functionality.
Anthropic
Used for commercial AI analysis of submitted creative material.
Stripe
Used for payment processing and related transaction services.
Resend
Used for transactional and service-related email delivery, including emails to users and co-writers.
Used when you choose Google authentication or another expressly offered Google integration. Google may also provide web resources used by Greenroom.
Other technical providers
We may use carefully selected providers for functions such as hosting, security, storage, monitoring, communications, document generation, support or infrastructure.
We may change processors where reasonably necessary.
Where required, we put appropriate contractual data-protection arrangements in place.
We may also disclose information:
We do not sell or rent personal information to data brokers or advertisers.
Some Greenroom service providers may process information outside the United Kingdom.
Where personal information is transferred internationally and UK law requires safeguards, we use an appropriate lawful transfer mechanism.
Depending on the destination and provider, this may include:
We assess international transfers in accordance with applicable UK requirements.
We do not keep personal information indefinitely merely because it may be useful.
Retention depends on why information is held.
Generally retained while your account remains active.
Following closure, information is deleted or anonymised when no longer required, subject to the exceptions below.
Where Greenroom offers a temporary or guest-upload service, the applicable retention period will be stated when the upload is made.
If a temporary user does not convert the submission into an account or retained project, the material is deleted in accordance with the stated temporary-retention process.
Generally retained while the project remains active or stored within the user’s Greenroom account or Vault.
They may be deleted following a valid deletion request unless another contributor, evidential record, legal requirement or other lawful retention ground applies.
Generally retained while the associated project or account remains available, unless deleted under an applicable retention process or retained for a lawful evidential, contractual or dispute-related reason.
A finalised Greenroom registration has an initial 10-year registration term from the date of finalisation. During that term, we intend to retain the timestamped registration record and associated evidential registration information in order to provide the registration service and preserve its historical integrity, subject to applicable law and the service-continuity limitations described in our Terms.
Where Greenroom remains operational, registration holders will be given an opportunity to renew or extend a registration before the end of its 10-year term. If a registration is renewed, relevant registration information may be retained for the renewed period.
After the applicable registration term ends, some registration information may still need to be retained, restricted or anonymised where this remains necessary and proportionate for a legal obligation, protection of contributor interests, fraud prevention, establishment or defence of legal claims, dispute evidence or another lawful ground. This does not mean that Greenroom promises indefinite public or account availability of the registration service.
We will not retain unnecessary personal contact information merely because a historical registration exists where that information can appropriately be removed, restricted or anonymised.
Records required for UK tax, VAT or accounting purposes will generally be retained for at least six years, and longer where law, an HMRC enquiry or another applicable requirement requires it.
Retained for a proportionate period according to the nature of the record, risk and potential claim or investigation.
Retained for as long as reasonably required to investigate and resolve the matter and for any applicable limitation or legal-retention period.
Where analytics information qualifies for the statistical-purpose exemption from cookie consent, individual-level data is aggregated and not retained longer than necessary for that aggregation.
You may request account closure.
Closing an account is not necessarily the same as exercising the statutory right to erasure.
When an account is closed, we assess the information attached to it.
For a sole-writer project, deletion may include, where lawful and technically possible:
We may retain or anonymise information where necessary for:
For shared projects, we will not ordinarily delete a shared work merely because one contributor closes their account if another authorised contributor has a continuing legitimate interest in the project.
Where possible, personal contact information belonging only to the departing user will be removed or anonymised while the historical contributor relationship is preserved.
If all relevant contributors seek deletion, we may conduct a full retention review of the shared project.
Depending on the circumstances, UK data-protection law gives you rights including the right to:
These rights are not absolute in every circumstance.
For example, a request to erase information may not require deletion of data which must lawfully be retained for taxation, legal claims or protection of another contributor’s rights.
Where an evidential registration must be corrected, Greenroom may preserve the original historical event and add a corrective event rather than rewriting history.
We may ask for information needed to verify your identity before acting on a request.
To exercise a right, email hello@the-greenroom.app.
Children have data-protection rights in their own right.
A user aged 13 to 17 may contact Greenroom directly about their personal information.
A parent or guardian may help a child exercise their rights and may in appropriate circumstances act on their behalf. We may need to verify identity, parental responsibility or authority before disclosing information.
We will explain privacy matters in age-appropriate language where reasonably required.
If you believe Greenroom has mishandled your personal information, you may make a data-protection complaint by emailing hello@the-greenroom.app.
Please state that your message is a data protection complaint and explain the issue.
We will:
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.
You do not have to give up any right to complain to the ICO by first complaining to us.
Service emails necessary to operate your account, deliver purchases, notify co-writers, provide security information or communicate important contractual matters are not marketing emails.
Where we send promotional marketing, we will do so only where permitted by law.
You can unsubscribe from marketing using the unsubscribe mechanism provided or by contacting us.
Opting out of marketing does not prevent Greenroom sending essential service communications.
We do not use children’s personal information for behavioural advertising.
We use reasonable technical and organisational safeguards designed to protect personal and creative information.
Depending on the system concerned, measures may include:
No internet-based service can guarantee absolute security.
If a personal-data breach occurs, we will assess it and make notifications to the ICO and affected people where required by law.
Greenroom uses cookies, browser storage and related technologies for authentication, security, preferences, application functions and, where lawfully configured, analytics.
Our separate Cookie Policy explains these technologies and your choices.
Greenroom may contain links to external websites.
Their privacy practices are controlled by their respective operators. You should review their privacy notices before providing information to them.
We may update this Policy to reflect changes in law, Greenroom features, service providers or data-processing practices.
The effective date will be shown at the top.
Where a change materially affects how we use existing personal information, we will take reasonable steps to bring the change to affected users’ attention and obtain consent where the law requires it.
Questions, data-protection requests and complaints may be sent to:
Dominic Devine trading as The Greenroom
Business correspondence address: 3–4 Sentinel Square, London NW4 2EL, United Kingdom
Email: hello@the-greenroom.app
We use essential cookies to keep the site working and to process payments securely. By continuing to use The Greenroom, you agree to our Privacy Policy and Terms of Service.