Privacy and your material

Updated October 7, 2026. This notice describes the current private beta. It is not a promise of independent certification or zero provider retention.

Your work and this device

My Book, your saved understanding, Character Studio and call-sheet summaries are stored in this browser, separated by signed-in account. This is not encryption against someone who controls the device. They sync only if you enable the separate cross-device saving option available to your account. Removing browser data can remove these records. Keep your originals and download My Book regularly.

Cancelling a membership does not erase My Book. Practice exercises are not added to My Book. The Excel download includes your career rows, notes, grouping and starting count. Its hidden restoration sheet is not encrypted; it does not contain separate Studio, call-sheet or My Understanding records.

Optional My Book account backup

In My Book, Manage My Book lets you explicitly save a manual snapshot to your signed-in Lianarra account and restore it on another device. Nothing uploads automatically. It contains career entries, your notes, grouping and starting count only, not separate analysis, uploaded files or reader keys. Do not put confidential script text in career notes. Our hosting provider stores the snapshot; it is not end-to-end encrypted or sent to the AI provider for backup.

A new save replaces the previous snapshot. Cancellation does not erase it. Remove account backup or Remove my content deletes the live copy. A content-free revision marker remains to reject delayed writes. Removal requests and email opt-outs also leave a separate recovery record containing pseudonymous identifiers and removal instructions, without scripts, notes or email addresses. These records help prevent older database recoveries from reviving removed content or withdrawn consent. They are retained while older recoverable copies may exist; the final retention schedule requires review. Provider backup and log retention remain separate and are not fully verified. Local My Book edits or deletions do not change a previously saved account snapshot until you replace or remove it.

Optional cross-device saving

When you enable cross-device saving, Lianarra stores original scripts and audition files with its hosting provider, along with analysis, My Book and written notes. This storage is not end-to-end encrypted. It is separate from the manual My Book snapshot. Active scripts are not merely temporary downloads.

Uploads and AI

For new PDF readings, your browser renders the visible pages into images. Lianarra sends those images to OpenAI, with your questions, supplied plain text and relevant earlier analysis. It does not send the PDF container, concealed text layer, embedded attachments or document metadata to OpenAI. Uploaded images are also redrawn, and their image metadata is removed. Word documents must first be exported as PDF or plain text.

Practice My Lines also sends the original PDF to Lianarra’s own service for its exact-text comparison. That original and its extracted text are not forwarded to OpenAI. The original therefore still reaches our hosting provider; this is not a promise that concealed bytes never leave your device. Remove confidential material permanently before uploading if it must not reach Lianarra at all.

Rendering can fail or differ for unusual documents. If a file cannot be prepared, Lianarra stops rather than sending the raw file as a fallback. Earlier analysis and saved answers are not retroactively sanitized; start a new reading if older results may include concealed material. Lianarra asks the provider not to store its Responses API results, but that is not a guarantee of zero provider logs or abuse-monitoring retention.

Voice and reader links

Spoken reader cues are sent to OpenAI for speech generation. Voice recognition may be processed by your browser or its provider; available local listening depends on the device and mode. Microphone permission remains under your control.

A reader copy is encrypted in your browser. The decryption key is in the complete private link. Anyone who receives that link can view its selected material; send it only to a trusted reader. Links expire after 24 hours and can be revoked sooner. Revocation prevents future retrieval but cannot remove copies already received.

Email sign-in

Direct email sign-in is being prepared and is not open yet. When enabled, Supabase will process your email address, verification codes and authentication records to establish your Lianarra identity. Lianarra will use secure browser cookies to keep you signed in; it will not store a password. This sign-in service will not receive your scripts or My Book through the authentication integration. Existing ChatGPT sign-in remains available for authorized founder access. Accounts using different sign-in systems are not automatically combined, even if their email addresses match.

Signing out clears this browser’s Lianarra email session, but does not erase saved device records or downloaded files. Remove my content is separate from deleting a sign-in account. Contact us for removal of the sign-in identity and provider-held records; provider retention must be reviewed before email access opens.

Invited readers

Reader invitations are restricted to the email address selected by the actor. Resend delivers short-lived verification codes without script material. Lianarra stores a keyed digest of the invited email, verification state, and an invitation-specific browser session. Readers do not need a subscription or actor account. Verification records are removed after invitation expiry or revocation during privacy cleanup. Readers must agree to keep sides confidential before opening them.

Account and service records

Lianarra uses your sign-in identity for access. Hosting providers process requests. Optional email uses Resend; billing, when opened, uses Stripe. Early-access sign-up confirmations use Resend. Monthly practice invitations and billing remain closed in this private beta. Removing a Lianarra record does not recall email already delivered. Dream-role preferences describe fictional characters and are saved for matching practice material.

Product activity excludes scripts, dialogue, project names, questions and analysis. Its account identifiers are pseudonymous, not anonymous. Founder activity is excluded. Legacy identifiers derived from an email may be matched by someone who already knows or guesses that address.

Removal and retention

Remove Audition and Wrapped remove the corresponding temporary material from this browser and revoke associated reader links. Saved AI answers are generated material, including answers saved as My Understanding. Wrapped preserves your written production notes in My Book; other written notes remain separately available. Actor-owned career history remains until you erase it. Cloud removal may remain pending while disconnected or while files are being deleted; wait for confirmation in the app. In the app’s privacy panel you can view service-held account records or choose Remove my content. That action is separate from cancelling billing and does not delete your ChatGPT account.

Scripts and generated analysis expire after 30 days without use. Existing material receives a rollout grace period ending November 7, 2026 at 06:00 UTC. In-app warnings appear during the last seven days; choosing Keep or using the material extends it for 30 days. Background synchronization alone does not renew unchanged material. My Book and separately written notes are excluded. No warning email is sent. Cloud expiry blocks retrieval and queues physical file cleanup. Device-only cleanup runs when Lianarra is open; closed or disconnected devices and downloaded copies cannot be remotely erased.

Cleanup removes expired reader records, rate-limit records older than two days, product activity older than 90 days, completed practice-email delivery history older than 90 days, and disabled or expired email preferences after 30 days. Cleanup is checked hourly while the service receives traffic and also runs if the hosting scheduler invokes it. No fixed deletion deadline during an idle period is promised.

Financial-record retention needs a reviewed policy. Provider logs, backups, processing locations and organization-level AI retention settings have not all been verified. Local removal does not guarantee deletion from those systems, other devices or files you have downloaded. Contact us for an access or deletion request that extends beyond the app controls.

Questions or privacy requests: hello@lianarra.com.