Last updated: February 26, 2026
This Privacy Policy explains how Hyperfokal LLC, doing business as Lína ("Lína," "we," "us," or "our"), collects, uses, stores, and protects information when you use our website at discoverlina.com and our production management platform at app.lina.tools (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your email address and password. You may optionally provide a display name. Passwords are cryptographically hashed using PBKDF2 with a per-user salt and a server-side pepper before storage; we never store passwords in plain text.
1.2 Project Data
The Service stores the production data you create and upload, including screenplays, breakdowns, schedules, shot lists, storyboard images, cast and crew information, call sheets, and related project files ("Your Content"). This data is stored securely and is only accessible to you and any collaborators you explicitly invite.
1.3 Usage Data
We use Google Analytics (GA4) on our marketing website (discoverlina.com) to collect anonymized usage data such as pages visited, referral sources, browser type, device information, and approximate geographic region. This data helps us understand how visitors find and interact with our site. We do not use Google Analytics within the Lína application itself (app.lina.tools).
1.4 Contact and Support Data
When you contact us via our support form, email, or the in-app feedback feature, we collect the information you provide, including your name, email address, and the content of your message. We use this information solely to respond to your inquiry and improve the Service.
1.5 Log and Diagnostic Data
Our servers automatically collect standard log information when you use the Service, including IP addresses, request timestamps, and error data. This information is used for security monitoring, abuse prevention, and diagnosing technical issues. Log data is retained for a limited period and is not used for advertising or profiling purposes.
2. How We Use Your Information
We use the information we collect to: provide, operate, and maintain the Service; authenticate your identity and manage your session; process payments and manage subscriptions (when applicable); respond to support requests and communicate about your account; protect against fraud, abuse, and unauthorized access; improve the Service based on aggregated, anonymized usage patterns; and comply with applicable legal obligations.
3. Artificial Intelligence and Your Data
Lína does not use artificial intelligence, machine learning, or large language models as part of its features or functionality. Your Content — including screenplays, breakdowns, schedules, and all other project data — is never used to train, fine-tune, or otherwise develop AI or machine learning models of any kind, whether by us or by any third party. We do not sell, license, or provide access to Your Content for the purpose of AI training or development. This commitment is fundamental to our philosophy of preserving the creative intent of filmmakers.
4. Data Security
We implement industry-standard security measures to protect your data, including: encryption in transit via TLS for all connections; cryptographic hashing of passwords with PBKDF2, per-user salts, and a server-side pepper; secure, HttpOnly, SameSite session cookies; CSRF protection via origin validation on state-changing requests; and IP-based rate limiting on authentication and public endpoints. While no system is completely immune to security threats, we take the protection of your data seriously and continuously evaluate our security practices.
5. Third-Party Services
We use a limited number of third-party services to operate the platform:
Cloudflare — Infrastructure, hosting, content delivery, DNS, and DDoS protection. Your data is processed and stored using Cloudflare Workers, D1 (database), and R2 (file storage). Cloudflare may process data in multiple geographic regions as part of its global network. See Cloudflare's Privacy Policy.
Resend — Transactional email delivery for account notifications, password resets, call sheet distribution, and support confirmations. Resend processes the recipient email address and message content necessary to deliver emails on our behalf. See Resend's Privacy Policy.
Google Analytics (GA4) — Used on discoverlina.com only (not within the application) for anonymized website traffic analysis. Google may set cookies on your browser when you visit discoverlina.com. See Google's Privacy Policy.
Google Fonts — Web fonts are loaded from Google's servers on both discoverlina.com and app.lina.tools. This may result in your IP address being transmitted to Google. See Google Fonts Privacy FAQ.
We do not sell, rent, or share your personal information with advertisers, data brokers, or any third party for marketing purposes.
6. Cookies and Local Storage
For a detailed explanation of the cookies and local storage technologies we use, please see our Cookie Policy.
In summary, we use one essential session cookie for authentication within the Lína application, Google Analytics cookies on our marketing website, and a localStorage preference to remember whether you have dismissed the beta notice on discoverlina.com. We do not use third-party advertising or tracking cookies.
7. Data Retention
We retain your account information and project data for as long as your account is active. If you delete your account, we will delete your personal information and project data within 30 days, except where we are required by law to retain certain records or where data has been included in routine backups that will be overwritten in the normal course of operations. Anonymized, aggregated usage data that cannot be used to identify you may be retained indefinitely for analytical purposes.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
Access: You may request a copy of the personal information we hold about you.
Correction: You may update or correct inaccurate personal information through your account settings or by contacting us.
Deletion: You may request deletion of your account and associated data. You can initiate this from your account settings or by contacting us.
Data Portability: You may request an export of your project data in a machine-readable format.
Objection and Restriction: You may object to certain processing activities or request that we restrict how we use your data.
Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
9. International Data Transfers
The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our infrastructure providers operate. By using the Service, you acknowledge and consent to the transfer of your information to these locations. We ensure that any such transfers are subject to appropriate safeguards consistent with applicable data protection laws.
10. Children's Privacy
The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately at [email protected], and we will take steps to delete such information promptly.
11. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined under the CCPA. You have the right to request disclosure of the categories and specific pieces of personal information we have collected, to request deletion of your personal information, and to not be discriminated against for exercising your privacy rights. To make a CCPA request, contact us at [email protected].
12. European Economic Area (EEA) and UK Users
If you are located in the EEA or UK, we process your personal data on the following legal bases: performance of our contract with you (to provide the Service), our legitimate interests (to improve the Service, ensure security, and prevent fraud), your consent (where specifically requested, such as for analytics cookies), and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by email or through a prominent notice within the Service at least 14 days before the changes take effect. Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
14. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Hyperfokal LLC
Email: [email protected]