Privacy Policy
What Script Reader collects, why, who handles it, and how to have it removed. Short version: your script is read for you and nobody else, it is never used to train AI, and you can delete it whenever you like.
Last updated October 28, 2026 · Terms · Privacy · Cookies
This policy covers Script Reader at reader.upperstate.tv, run by Upperstate, Inc., a California corporation ("Upperstate", "we", "us"). Upperstate is responsible for your information (the "controller" in European terms). The Cookie Policy is part of this policy.
1. What we collect
- Account. Your email address, and a name if you add one (it prints on reports as "submitted by").
- Your Material. The scripts and files you upload, the title, writer and notes you enter, the text we extract, and the coverage reports we produce from them.
- Payments. When you tip or buy an add-on, Stripe gives us the amount, the date, the email you paid with, any note you wrote, and a Stripe customer reference. Stripe holds your card; we never see it.
- Use. How many reads you've run and when, what you've bought, and which reports you've shared.
- Security. The IP address and time of sign-ins, deletions, shares and similar actions, and the browser name of each signed-in session.
- Email. Whether sign-in and "your read is done" emails were delivered, as reported by our email provider.
- Analytics. Counts of page views, referring sites, countries and browser types from Cloudflare Web Analytics, which uses no cookies and does not follow you across sites.
We don't buy information about you, and we don't collect anything from other sites.
2. How we use it
- To run the Service: sign you in, read your scripts, print and store your reports, and send you the emails you need.
- To take payments, deliver add-ons, and keep the records accountants and tax law require.
- To keep the Service safe: rate limits, spending limits, and finding and stopping abuse.
- To answer you when you write, and to tell you about changes to the Service or these policies.
- To understand, in aggregate, how the Service is used, so we can improve it.
We don't send marketing email, we don't sell your information, and we don't use it for advertising.
3. Your script and AI
To produce a read, the text of your script, the details you typed and, for a new draft, your earlier coverage are sent to Anthropic, which runs the Claude model that writes the report. Anthropic acts as our service provider, under commercial terms that do not allow it to train its models on what we send. It may keep requests for a limited time for safety and abuse monitoring, under its own policies.
To add industry facts, we send TMDB the titles of comparable films and the names of suggested actors, never your script's text.
We do not use your Material to train or fine-tune any AI model, ours or anyone's.
4. Who we share it with
Only the companies that run parts of the Service for us, each for that part only:
| Who | What they do | What they get |
|---|---|---|
| Cloudflare | Hosting, database, file storage, PDF printing, security and analytics | Everything stored on the Service, held on our behalf |
| Anthropic | The AI that writes the coverage | Script text and your notes, per read |
| Resend | Sign-in and notification email | Your email address and the message |
| Stripe | Payments | What you enter on Stripe's checkout page |
| TMDB | Film and actor facts, and headshots | Film titles and actor names; your browser loads headshots from TMDB's image servers |
Sponsors. A sponsor card links out through reader.upperstate.tv so we can count clicks. We record the click and its time, not who clicked or from where, and a sponsor gets only totals. No sponsor gets any of your information, your scripts or your reports, and sponsor cards load nothing from the sponsor's servers.
We may also disclose information if the law requires it, to protect someone's safety, to defend our rights, or to a buyer or successor if Upperstate or the Service is sold or reorganized, in which case this policy keeps applying to it.
5. Who can see your work
Your scripts and reports are private by default. You can see them. People you send a share link to can read that report, but never the file you uploaded. The person who runs the Service can open a report to answer a support request or investigate abuse, and every such view is logged. Nobody but you can download the script file you uploaded.
6. How long we keep it
- Scripts and reports are kept until you delete them, or your account.
- Deleting a script or your account removes it from the Service at once. Copies can remain in our database provider's recovery backups for up to 30 days, after which they are gone.
- Payment records are kept for accounting and tax. When you delete your account, your name, email and note are taken off them.
- The security log is kept for twelve months, then deleted.
- Sign-in links expire after twenty minutes and are removed within a day. Sessions last 30 days, or until you sign out.
7. How we protect it
Everything travels over HTTPS. Uploaded files are kept in private storage that is never public. Sign-in links and session tokens are stored only as hashes, so a copy of the database couldn't be used to sign in. Access to your files is checked on every request. No system is perfectly secure, and if a breach affects you, we will tell you as the law requires.
8. Your choices
- See and download your reports any time, from your Scripts page.
- Correct your name on the Account page. To change your email, write to us.
- Delete a script from its report page, or your whole account from the Account page.
- Get a copy of the information we hold about you, or ask anything else, at joseph@upperstate.tv.
9. U.S. state privacy rights
Depending on where you live, including California, you may have the right to know what personal information we collect and how we use and disclose it (this policy is that notice), to get a copy, to correct it, to delete it, and to opt out of its sale or of sharing for targeted advertising. We do not sell or share personal information for advertising, we do not use sensitive information to infer anything about you, and we honor Global Privacy Control signals, though there is nothing for them to switch off. To use a right, write to joseph@upperstate.tv; we will verify the request through your email address, and an authorized agent may ask on your behalf with your written permission. We will not treat you differently for using any of these rights.
10. Europe, the UK and Switzerland
If you use the Service from the European Economic Area, the UK or Switzerland, we handle your information on these legal bases: to perform our contract with you (running the Service and taking payments), our legitimate interests (security, abuse prevention and understanding use, balanced against your rights), legal obligations (tax and accounting), and your consent where we ask for it.
The Service is run from the United States, so your information is processed there. Our providers transfer it under recognized safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
You have the right to access, correct, delete, restrict or object to our processing of your information, to receive it in a portable form, and to withdraw consent at any time. Write to joseph@upperstate.tv. You also have the right to complain to your local data protection authority.
11. Children
The Service is not for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us information, write to us and we will delete it.
12. Changes and contact
If we change this policy, we will update the date at the top, and tell you by email or on the site before a material change takes effect. Questions or requests: joseph@upperstate.tv · Upperstate, Inc., 3344 Glenhurst Avenue, Los Angeles, CA 90039