Privacy notice

The service is operated by Many Monkeys (manymonkeys.ai). For all privacy matters, rights requests, and complaints, contact hello@manymonkeys.ai.

• Screenplay content: the script you upload and the report generated from it. Purpose: performing the analysis you purchase (contract performance). This is the heart of the service and is deliberately ephemeral (see retention).
• Anonymous session token: a random identifier in your browser linking you to your upload, report, and credit balance. It is not tied to your name, email, or any account, because none exist.
• Payment data: processed by our payment provider, Lemon Squeezy, as merchant of record. We never see your card details. Payment records are not connected to your screenplay content.
• Technical logs: request method, path, status, and duration for security and reliability (legitimate interest). We do not log request bodies or headers, which is where screenplay content travels.

Only the systems required to deliver the service process your data:

• Vercel: application hosting.
• Upstash: temporary datastore holding encrypted scripts and reports under automatic expiry.
• OpenRouter: routes the analysis request to the language model, and only to a provider endpoint that neither trains on it nor retains it.
• Lemon Squeezy: payments, receipts, taxes, and fraud prevention, as merchant of record under its own privacy policy.

Your script is deleted as soon as the analysis has run, or after an hour if it doesn't run. The report is deleted 24 hours after it is made. In detail:

• Uploaded scripts: stored encrypted at rest, and deleted as soon as the analysis has stored your report. A script that is not analysed expires one hour after it was uploaded; the hour restarts when you go to checkout and again when payment is confirmed.
• Reports: deleted automatically 24 hours after they are made, together with the analysis data they were built from, which can quote lines from your script. You can delete a report sooner yourself from the report page.
• Credit balances and redemption codes: kept long-term so purchased credits stay usable; they contain no content and no identity, only a token and a number.
• Payment, tax, and anti-fraud records: held by the payment provider for the periods required by applicable law. These periods are longer than ours and run independently of them.

• Contract performance: analysing the script you submit and delivering the report.
• Legitimate interest: service security, abuse prevention, and reliability logging.
• Legal obligation: payment, tax, and accounting records (held by the payment provider).

Our subprocessors may process data outside the European Economic Area. Where they do, transfers rely on the safeguards those providers offer, such as EU standard contractual clauses. Screenplay content additionally travels encrypted and expires on the timelines above wherever it is processed.

Your screenplay is not used to train or fine-tune any model, ours or anyone else's. Each analysis request requires a provider endpoint that does not train on it or retain it, and the request fails if none is available. No copy of your work is retained after expiry.

Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority.

One honest caveat: because sessions are anonymous, we usually cannot identify which stored data (if any) is yours; we cannot look up “the script belonging to this person”. In practice, erasure is largely automatic: your script is deleted as soon as the analysis has run, the report 24 hours after it is made, and you can delete a report at once from the report page. For anything else, contact hello@manymonkeys.ai and we will do what we can with what you can show us (for example, a payment receipt for credit matters).