The short version

Your writing is yours. We don’t read it, sell it, show ads against it, or train any AI on it.
We keep your email, your work, who is in your projects, the AI apps you’ve connected, your plan, and a security log of sign-ins and changes.
Stream never sends your work to any AI on its own. An AI you connect reads only what you can, until you disconnect it.
Everything is encrypted at rest on Cloudflare; Stripe handles payments, Resend sends the sign-in emails.
Sign in with an emailed link, or with Google if you like: Google shares only your email and name.
One cookie, to keep you signed in (and a ten-minute one while you sign in with Google). No tracking or analytics cookies, and no third-party analytics: we count visits and time spent in Stream ourselves, anonymously for visitors, keeping only country, region and city.
Download everything, or delete your account, any time from your account page.

The full policy follows.

Privacy Policy

Last updated: October 28, 2026

This policy describes how Upperstate, Inc., a California corporation (“Stream,” “we,” or “us”), collects, uses, and shares personal information through the Stream website and platform at stream.upperstate.tv (the “Site”).

Types Of Information We Collect.

The following provides examples of the type of information that we collect from you, how we use that information, and what our interest or legal basis is in using it.

Account Registration

We collect your email address, and your name if you choose to give it, when you create an account with us to use our Products and/or Services. You sign in with a one-time link that we email to that address, or, if you choose, with your Google account, in which case Google shares with us the email address and the name on that account, and we keep only those two. We do not collect a password.
We have a legitimate interest in providing information to you to provide the Products and/or Services.

Your Writing and Other Content

We store the screenplays, manuscripts, treatments, series bibles, notes, and drafts (saved copies of earlier versions) that you write or import, along with the marks showing which words an AI application you connected wrote, the red “sketch” marks you add, the conversations you save, and your board cards and colours. This content may include personal information, such as names of real people in a script.
We use this content to perform our contract to provide the Products and/or Services to you, including storing your projects, keeping your drafts, and showing your projects to the people you invite into them.

Projects and Invitations

We store which projects you are a member of, whether you are each project’s owner, an editor, or a reader, and the invitations you send and receive, including the email address each invitation is sent to.
We use this information to perform our contract to provide the features you have chosen to use.

Connected AI Applications

If you connect an AI application to your Stream account, we store the name of that application, as described in the Connected AI Applications section below.
We use this information to perform our contract to provide the features you have chosen to use.

Subscriber Information

We collect the email address, and the name if given, of our subscribers.
We have a legitimate interest in contacting our subscribers and communicating with them concerning normal administration.

Cookies

“Cookies” are small pieces of information that a website stores on your device. We use one session cookie to operate the website, keep you signed in, and secure your account. If you sign in with Google, a second cookie lasting ten minutes ties the trip to Google and back to your browser, and is removed when you return.
We do not use tracking, advertising, or analytics cookies, we do not run analytics on the content you write, and we do not use third-party advertising or cross-site tracking cookies. We measure how the Site is used without cookies, as described under Usage Measurement below.
We have a legitimate interest in making our website operate efficiently.

Feedback/Support

If you provide us feedback or contact us for support we will collect your name and e-mail address, as well as any other content that you send to us, in order to reply.
We have a legitimate interest in receiving, and acting upon, your feedback or issues.

Payments

When you subscribe to a paid plan, our payment processor, Stripe, collects your payment card and billing information directly. We keep only Stripe’s customer reference for you and the status of your plan, and we do not receive or store your card number.
We use your information to perform our contract to provide you with our Products and/or Services.

Security Log

We keep a log of sign-ins, invitations, exports, connections of AI applications, and deletions, including the Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used) from which each came.
We have a legitimate interest in monitoring our networks and the visitors to our website, and in detecting and preventing fraud.

Usage Measurement

We measure how the Site is used ourselves, without cookies and without sending anything to a third-party analytics service. For each page viewed we record the page, the time, the approximate location of the request as our hosting provider reports it (country, region, and city), the kind of device and browser, the website that referred you (if any), and how long the page was in front of you.
Instead of your IP address, which we do not store for this purpose, we record an anonymous identifier calculated from it that changes every day, so that we can count unique visitors on a given day but cannot follow anyone from one day to the next.
If you are signed in, we also record which part of Stream you are using (for example the script page, the board, a treatment, notes, or the bible) and for how long, but never the contents of what you write, and we associate that record with your account.
We have a legitimate interest in understanding how the Site is used so that we can maintain and improve it. We keep page-view records for about thirteen months, and we delete your usage record when you delete your account.

In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, partners, our affiliates, or publicly available sources.

Use and Processing of Information.

In addition to the purposes and uses described above, we use information in the following ways:

To identify you when you visit our website.
To provide services.
To improve our service offerings.
To process payments, fulfill orders, and administer your purchases.
To conduct analytics.
To respond to inquiries related to support, employment opportunities, or other requests.
To send promotional materials, including information relating to our services or promotions.
For internal administrative purposes, as well as to manage our relationships.
To operate artificial intelligence and automated tools that support our business, such as drafting assistance, scheduling, transcription, summarization, customer support, and fraud detection.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you complete a purchase we collect your information to perform our contract with you, but we also retain your information because we have a legitimate interest in maintaining it after the purchase is complete so that we can respond quickly to any questions about your order. As a result, our collection and processing of your information is based, in different contexts, upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

Sharing of Information.

In addition to the specific situations discussed elsewhere in this policy, we disclose information in the following situations:

Affiliates and Acquisitions. We may share information with our affiliates (e.g., parent organization, sister organization, joint ventures, or other organizations under common control). If another organization acquires, or plans to acquire, our Company, operations, or our assets, we will also share information with that organization, including at the negotiation stage.
Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
Service Providers. We share your information with service providers. Among other things service providers help us to administer our website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of Services.
Our Current Service Providers. We currently use Cloudflare to host the Site and to store your account and your projects, encrypted at rest, with the backup copies of your documents and your drafts further encrypted with a separate key for each project; Stripe to process payments; Resend to send sign-in and invitation emails; and, if you choose to sign in with it, Google to confirm your identity. These providers may process personal information only to provide their services to us.
Project Members. Stream has no public pages or public profiles. Everything in a project is visible only to its owner and the people invited into it, as editors or readers, and to any AI application one of those people has connected. Content you put in a project is disclosed to the project’s members.
Connected AI Applications. If you connect an AI application, it can read and edit what you can in Stream, and what it reads is disclosed to that application and its provider until you disconnect it. If someone you invite into a project connects an AI application, that application can read the project, and edit it if that person is an editor, in the same way.
No Sale of Your Information. We do not sell your personal information or your projects, and we do not share them with third parties except as described in this policy.

Artificial Intelligence and Automated Processing. Stream has no built-in artificial intelligence features and does not itself send the contents of your projects to any artificial intelligence provider. We use third-party artificial intelligence and machine-learning tools in the ordinary course of operating our business. Where those tools process personal information, the provider acts as our service provider or processor, is contractually restricted to using the information only to provide the service to us, and is prohibited from using it to train or improve its own general-purpose models, except where we tell you otherwise. We do not use automated processing to make decisions that produce legal or similarly significant effects concerning you — such as decisions about credit, lending, housing, employment, education, or healthcare — without providing the notice, explanation, and opt-out that applicable law requires. If we begin to do so, we will update this policy and provide a pre-use notice before that processing begins. You may ask us how a particular automated tool is used in connection with your information by contacting us at stream@upperstate.tv.

Connected AI Applications

How You Connect One. You may connect your own AI application, such as Claude by Anthropic or ChatGPT by OpenAI, to your Stream account through the Model Context Protocol, by approving an authorization request.

What It Can Do. A connected application can read and edit whatever you can read and edit in Stream, until you disconnect it.

What We Store. We store the name of each application you connect.

What We Do Not Do. We do not send your content to any AI provider ourselves, and we do not use your content to train artificial intelligence or machine-learning models. Your use of a connected application, and that provider’s handling of anything the application reads from Stream, are governed by your own agreement with that provider and its privacy policy, not by this policy.

Disconnecting. You can disconnect an application on your account page at any time.

Your Choices.

You can make the following choices regarding your personal information:

Access to Your Personal Information. You may request access to your personal information by contacting us at the address described below. If required by law, upon request, we will grant you reasonable access to the personal information that we have about you. You can also download all of your content as a .zip file at any time from your account page. Note that residents of certain states may be entitled to ask us for a notice describing what categories of personal information (if any) we share with third parties or affiliates for direct marketing.
Changes to Your Personal Information. We rely on you to update and correct your personal information. Note that we may keep historical information in our backup files as permitted by law. If our website does not permit you to update or correct certain information contact us at the address described below.
Deletion of Your Personal Information. Typically we retain your personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may, however, request information about how long we keep a specific type of information, or request that we delete your personal information by contacting us at the address described below. You can also delete your account and its content yourself at any time from your account page. Deleting your account erases every project you own and removes you from projects owned by others; content you wrote in a project owned by someone else stays in that project. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
Objection to Certain Processing. You may object to our use of your personal information by contacting us at the address described below.
Online Tracking and Opt-Out Preference Signals. Our website does not respond to legacy “Do Not Track” browser signals, for which no common industry standard was ever adopted. We do treat a Global Privacy Control (GPC) signal, and any other opt-out preference signal recognized under applicable law, as a valid request to opt out of the sale or sharing of personal information and of processing for targeted advertising, applied to the browser or device transmitting it. Where required by applicable law, we will display confirmation that the signal has been processed. If you are signed in to an account when the signal is transmitted, we will also apply your choice to that account.
Revocation of Consent. If you revoke your consent for the processing of personal information then we may no longer be able to provide you services. In some cases, we may limit or deny your request to revoke consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity. You may revoke consent to processing (where such processing is based upon consent) by contacting us at the address described below.
How We Verify and Respond to Requests. To protect your information, we will take reasonable steps to verify your identity before acting on a request, which may include asking you to confirm information already in our records or to respond from the email address associated with your account. We will not require you to create an account solely in order to make a request. An authorized agent may submit a request on your behalf with proof of authorization, and we may require you to verify your identity directly with us. We will respond within the time required by applicable law. If we decline your request, our response will explain why and, where applicable law provides an appeal right, how to appeal that decision. If we deny an appeal, you may contact your state attorney general.

How We Protect Personal Information

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Our website permits you to create an account. You sign in with a one-time link that we email to you, and there is no password. You are responsible for maintaining the security of the email account to which your sign-in links are sent, and you are responsible for any access to or use of your account by someone else that has obtained a sign-in link or access to that email account, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your account.

How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. We apply the following general criteria to determine how long we keep each category of information:

User Content. Retained until you delete it or close your account, after which it is removed from our active systems. Content you wrote in a project owned by someone else stays in that project.

Account and Customer Records. Retained for the life of your account and, for limited account and billing records, for up to seven (7) years afterward, in order to administer the relationship, resolve disputes, and satisfy tax, accounting, and recordkeeping obligations.

Payment and Transaction Records. Retained for seven (7) years from the date of the transaction to satisfy tax and financial recordkeeping requirements. We do not store complete payment card numbers; those are handled by our payment processor.

Support and Correspondence. Retained for three (3) years after the matter is closed.

Backups and Legal Holds. Information may persist in routine backups for a limited period after deletion from active systems. Where information is subject to a litigation hold, regulatory inquiry, or other legal obligation, we retain it until that obligation ends, notwithstanding the periods above.

Sensitive Personal Information

Some information we collect may be treated as “sensitive personal information” or “sensitive data” under applicable state privacy laws. Depending on the Products and/or Services you use, this may include account log-in credentials or the contents of your communications with us where we are not the intended recipient.

We collect and use sensitive personal information only as reasonably necessary to provide the Products and/or Services you have requested, to secure your account, to detect and prevent fraud and unlawful activity, and for other purposes for which applicable law provides no right to limit. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you, and we do not sell it or share it for cross-context behavioral advertising.

Where applicable law requires your consent before we process sensitive data, we will obtain that consent first. You may ask us to limit our use of sensitive personal information, or withdraw a consent you previously gave, by contacting us using the details below.

Your State Privacy Rights

Depending on where you live, state privacy laws (including those of California, Colorado, Connecticut, Oregon, Texas, Virginia, and other states) may give you the right to know about and access the personal information we hold about you, to correct it, to delete it, to receive a copy in a portable format, and to opt out of the sale of your personal information, targeted advertising, and certain profiling. You may also have the right to appeal our decision on a request. Whether or not your state's law applies to us, you can download all of your content, delete your scripts and other content, or delete your entire account at any time from within the platform, and you may contact us at stream@upperstate.tv to make any of the other requests described above.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising or for profiling that produces legal or similarly significant effects. We do not disclose personal information to third parties for their own direct marketing purposes, as described in California Civil Code Section 1798.83. We will not discriminate against you for exercising any of your privacy rights.

Children’s Privacy

We do not intentionally collect personal information from children under the age of 13, and our Products and/or Services are not directed to children under 13. If you are under the age of 13, you may view our website, but you should not make a purchase, register, or submit personal information to us. We do not knowingly sell or share the personal information of consumers under the age of 16. We do not process the personal information of a consumer we know to be at least 13 and under 16 for purposes of targeted advertising, sale, or profiling without that consumer’s affirmative authorization, and we do not do so for a consumer we know to be under 13 without authorization from a parent or guardian. If you believe we have collected information from a child or teen, please contact us at stream@upperstate.tv so that we can take appropriate action.

Users Outside the United States

If you are a non-U.S. user of the Site, by visiting the Site and providing us with data, you understand and agree that the data you provide to us may be processed for the purposes listed in this Policy. You also understand and agree that the data you provide to us may be processed in the United States. U.S. laws regarding the processing of data may be less stringent than the laws of your country. By providing your data, you consent to this processing.

European Economic Area, United Kingdom, and Switzerland

The Products and/or Services are directed to and intended for users in the United States. We do not target or market to individuals located in the European Economic Area, the United Kingdom, or Switzerland, and we do not monitor the behavior of individuals in those jurisdictions. If you are located there and choose to use the Products and/or Services, you understand that your information will be transferred to and processed in the United States. You may contact us at stream@upperstate.tv to access, correct, or delete personal data we hold about you.

Miscellaneous

The following additional information relates to our privacy practices:

Transmission of Information to Other Countries. As a company located in the United States, we process personal information in the United States. If you provide your personal information to us your information will be processed in the United States where privacy laws may be less stringent than the laws in your country. By submitting your personal information to us you agree to the transfer, storage and processing of your information in a country other than your country of residence including the United States.

Third Party Applications/Websites. We have no control over the privacy practices of websites or applications that we do not own.

Changes to This Privacy Policy. We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. We review this policy at least once every twelve (12) months and update the “Last Updated” date below whenever it changes.

Contact Information. If you have any questions, comments, or complaints concerning our privacy practices please contact us at the appropriate address below. We will attempt to respond to your requests and to provide you with additional privacy-related information.

Upperstate, Inc. (Stream), 3344 Glenhurst Avenue, Los Angeles, California 90039

stream@upperstate.tv

Last updated: October 28, 2026