Storyboard, powered by Trinetra AI
Privacy Policy
01Who we are
This Privacy Policy explains how ZBullet Enterprises Limited (“Bullet”, “we”, “us”) handles personal data when you use Storyboard, powered by Trinetra AI (“Storyboard”), including at our MIPCOM 2026 booth, on this website and through the links in our emails. Trinetra AI is powered by Bullet.
For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary, and for the purposes of the EU and UK General Data Protection Regulation (“GDPR”) we are the controller of your personal data. ZBullet Enterprises Limited, 18th Floor, A Wing, Marathon Futurex, Delisle Road, Mumbai 400013, Maharashtra, India. Email: support@bulletshorts.com.
02The personal data we collect
Information you give us:
- Contact details: the email address you sign in with, and, if you book a meeting, your full name, work email address, company, job title, country and phone number (optional).
- What you tell us when you book a meeting: the areas you are interested in, any message you write, and the date, time and time zone you pick.
- Your declarations and consents: the exact wording you agreed to, whether you agreed, the time, your IP address and your browser’s user agent.
- Your communication preferences, including whether you would like to hear from us about Trinetra AI and Bullet.
Your content:
- Your script: the title, the full text, and the original file if you upload one (PDF, DOCX, FDX or TXT). Scripts often contain names and stories about people; please do not include real people’s personal data that is not needed for the story.
- The choices and edits you make in the studio, for example to characters, props, locations and shots.
Information we collect automatically about your activity on the site:
- If you accept analytics cookies (see “Cookies and storage on your device” below): each screen you view and each button or option you tap, with the time it happened and a random session identifier. This website collects none today.
- Your IP address, browser and device type (user agent), and whether you are online.
- Whether you open our emails (a small image in the email tells us when it is displayed) and which links in them you click (links pass through our server first).
- If you accept marketing cookies: the campaign, link or QR code that brought you to the site.
We never put your script text or file, or your contact details, into these activity records.
Information we create about you:
- The character sheets, props, locations, storyboards and episodes made from your script.
- A reference number for a meeting you book (for example MTG-XXXX-XXXX) and a log of every step it goes through.
We do not ask for, and you should not give us, sensitive information such as health data, financial account details, government identity numbers or information about children.
03Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| To receive your script and run Storyboard for you. | Your consent (DPDP Act section 6; GDPR Art. 6(1)(a)) and taking steps at your request (GDPR Art. 6(1)(b)). |
| To turn your script with AI into character sheets, props, locations, a storyboard and episodes. | Your consent to AI processing. |
| To email you about your account and your meetings: sign-in codes, confirmations, reminders and links. | Your consent and taking steps at your request. |
| To follow up with you about working with us, if you asked us to or booked a meeting. | Your consent, which you can withdraw at any time. |
| To keep the service secure, prevent abuse and duplicate or copied submissions, and fix problems. | Legitimate uses permitted by the DPDP Act; our legitimate interests (GDPR Art. 6(1)(f)). |
| To understand, in aggregate, how people use the booth and the site so we can improve it. | Our legitimate interests (GDPR Art. 6(1)(f)); your consent under the DPDP Act. |
| To keep records of consents, decisions and activity, respond to lawful requests from authorities, and establish, exercise or defend legal claims. | Compliance with law (DPDP Act section 7; GDPR Art. 6(1)(c)) and our legitimate interests (GDPR Art. 6(1)(f)). |
We do not sell your personal data and we do not use it for advertising.
04Consent to AI processing
When you upload a script you consent to it being processed by artificial-intelligence systems operated by us and by our service providers. They read your script and produce a breakdown of it, character sheets, props, locations, storyboard frames and video clips from it.
Generation is automated, and you can review and edit what it produces. No decision about you that has legal or similarly significant effects is made by automated means.
You can withdraw your consent at any time by writing to us (see “Contact and grievances”). Withdrawal stops further processing; it does not affect processing already carried out.
05No training on your content
We do not use your script, or anything made from it, to train, fine-tune or otherwise improve any AI model, whether ours or a third party’s, unless you give us separate, explicit, opt-in consent for that purpose. This site does not ask for that consent, so your content is not used for training.
We require the AI service providers that process your content for us not to use it to train their models.
07Marketing communications
If you opt in, we send you marketing communications about Trinetra AI and its products, including Storyboard: product updates, news and offers. We send them by email, to the address you give us on this site.
Marketing communications are optional. They are switched off unless you switch them on: the option is never ticked in advance, and “Accept all” in the cookie banner does not switch it on. Storyboard works the same whether or not you opt in, and the emails about your own account and meetings (sign-in codes, confirmations, reminders and links) do not depend on this choice.
- To opt in: select “Marketing communications” in the cookie banner, or switch it on in “Cookie settings” at the bottom of any page.
- To opt out or withdraw your consent, at any time and free of charge: switch “Marketing communications” off in “Cookie settings”, use the unsubscribe link in any marketing email, or email support@bulletshorts.com. Withdrawing is as easy as opting in, and we then stop sending you marketing communications without delay.
- Your choice is attached to the contact details you give us during the same visit. On a shared screen, such as at our booth, it is not carried over to the next visitor.
We keep a record of your choice (what you chose, the date and time, the wording you were shown, your IP address, your browser’s user agent, and the random receipt number held in your consent cookie, which also remembers the choice on this device) so that we can show that consent was given or withdrawn. Our legal basis is your consent (DPDP Act section 6; GDPR Art. 6(1)(a)). Withdrawing it does not affect anything sent before you withdrew.
09Cross-border transfers
MIPCOM takes place in France, we are based in India, and some of our service providers operate in other countries, including the United States. Your personal data may therefore be transferred to and processed in countries other than your own.
Transfers out of India are made in line with section 16 of the DPDP Act and are not made to any country the Government of India has restricted. Transfers of personal data of people in the EEA or the UK to countries without an adequacy decision are protected by the European Commission’s Standard Contractual Clauses (and the UK Addendum) or another lawful safeguard. You can ask us for a copy of the relevant safeguards.
10How long we keep it, and deleting it
| Data | How long it stays in active use |
|---|---|
| Scripts and the character sheets, props, locations, storyboards and episodes made from them | While your project is active and for up to 24 months after our last contact with you. |
| Contact and professional details, and meetings | For up to 24 months after our last contact with you, or until you ask us to delete them. |
| Consent records, decisions, activity logs and email logs | For as long as needed to show what happened and to meet legal requirements, and at least one year where the law requires logs to be kept (for example under the Digital Personal Data Protection Rules, 2025). |
Deletion on request. You can ask us to delete your personal data at any time (see “Your rights”). Within 7 days of confirming your request we remove it from active use: it is no longer shown, processed, used to contact you or used for any other purpose.
Archived records. When data leaves active use, whether on request or at the end of its period, we keep a restricted archival copy, including the record of your activity on the site, but only where keeping it is necessary to comply with the law, to respond to lawful requests from government or regulatory authorities, or to establish, exercise or defend legal claims. Access to the archive is limited to authorised staff, it is not used for any other purpose, and it is permanently deleted once keeping it is no longer necessary for those reasons.
11Your rights
Under the DPDP Act you have the right to: obtain a summary of your personal data and how it is processed; have it corrected, completed or updated; have it erased; withdraw consent; have a grievance redressed; and nominate someone to exercise your rights if you die or become unable to.
If the GDPR applies to you, you also have the right to: access your data; have it rectified or erased; restrict or object to processing, including processing based on our legitimate interests; receive your data in a portable format; not be subject to a decision based solely on automated processing that significantly affects you; and complain to your data protection supervisory authority (in France, the CNIL).
To use any of these rights, email support@bulletshorts.com from the email address you use with us. We may need to confirm your identity. We will reply within one month, and in any case within the time the law allows.
12Children
Storyboard is for professionals aged 18 or over. We do not knowingly collect personal data from children. Please do not submit material that identifies a real child. If you believe a child has given us personal data, contact us and we will delete it.
13Security
We protect your data with encryption in transit, access controls and server-side processing of all keys and credentials. No system is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board of India, and any other authority, as the law requires.
14Contact and grievances
Grievance Officer: Saurabh Kushwah, ZBullet Enterprises Limited, 18th Floor, A Wing, Marathon Futurex, Delisle Road, Mumbai 400013, Maharashtra, India. Email: support@bulletshorts.com.
We will acknowledge your grievance within 48 hours and resolve it within the time required by law, and in any case within 90 days. If you are not satisfied with our response you may complain to the Data Protection Board of India or, if the GDPR applies to you, to your supervisory authority.
15Changes to this policy
We may update this policy. We will post the new version here with a new effective date, and if a change is significant we will tell you by email before it applies to you. This policy is governed by the laws of India, and the courts at Mumbai, Maharashtra have exclusive jurisdiction, as set out in our Terms of Use.