Privacy Policy

1. Who We Are

Mugafi Private Limited ("the Company," "we," "us," or "our") operates mugafihq.com and the Mugafi screenwriting platform. Mugafi is an AI-assisted screenwriting tool built for creative writers, helping them develop beat structures, dialogue, and scene drafts for Indian film, OTT series, and short-form content. We are committed to handling your personal data responsibly and in line with India's Digital Personal Data Protection Act 2023 (DPDPA) and applicable international good-practice standards.

Registered office: Unit 12B, Linking Road, Bandra West, Mumbai, Maharashtra 400050, India. Contact for data matters: [email protected].

2. Data We Collect

Because Mugafi is a writing tool, the data we handle falls into two distinct categories: account data you provide, and script content you create.

Account and contact data: When you register, we collect your name, email address, and password (stored as a hashed credential). If you subscribe to a paid plan, our payment processor handles card details directly and we receive only a transaction reference and subscription status.

Script and creative content: When you use Mugafi to develop a screenplay or treatment, the text you enter, the beats you generate, and any dialogue suggestions you save are stored in your account. This content is yours. We process it to provide the beat analysis, dialogue assistance, and rewrite suggestions that make up the core product.

Usage and technical data: We collect browser type, device type, IP address (masked after 24 hours), page interactions, and feature usage events (for example, which beat analysis tools you used and how long you spent on a scene). This helps us understand where the product is working well and where writers encounter difficulty.

Communications: If you write to us via [email protected] or through the in-platform feedback form, we store the message content and your contact details to respond and improve the product.

3. How We Use Your Data

We use your account and contact data to authenticate your session, deliver the subscription tier you have chosen (Craft, Writer, or Studio), send transactional emails (password resets, subscription receipts), and respond to support requests.

We use your script content exclusively to deliver the Mugafi service to you: running beat-structure analysis, generating dialogue suggestions in your characters' voices, and flagging rewrite opportunities. We do not use your script content to train our AI models. Model training at Mugafi uses licensed published works and synthetic data; your original creative work is never used as training input without your explicit written consent.

We use usage and technical data to improve the product, diagnose errors, and understand which features matter most to writers. This analysis is conducted on aggregated and anonymised data wherever possible.

We do not sell your personal data to third parties.

4. Sharing and Processors

We share personal data only with service providers acting as processors under written contract, who are prohibited from using the data for any purpose other than delivering the service to us. Current processor categories include: cloud infrastructure (hosting and storage), payment processing (for paid subscriptions), transactional email delivery, and analytics tooling (anonymised usage events only).

We may disclose data where required by Indian law, court order, or a competent regulatory authority. We will notify you of such disclosure unless prohibited from doing so.

If the Company is acquired or merges with another entity, your data may be transferred as part of that transaction. We will inform you before your data becomes subject to a materially different privacy policy.

5. Retention and Security

Script content and account data are retained for as long as your account is active. If you delete your account, we delete your script content and personal data within 30 days, except where retention is required for legal compliance (for example, tax records tied to subscription payments, which are retained for 7 years as required under Indian financial regulations).

We apply administrative, technical, and physical safeguards designed to protect your data: encrypted data transmission (TLS), encrypted storage for credential data, access controls limiting who within the Company can view script content, and regular security reviews. No system is completely secure; if you believe your account has been compromised, contact us immediately at [email protected].

6. Your Rights under India's DPDPA and General Good Practice

India's Digital Personal Data Protection Act 2023 gives residents of India rights in relation to their personal data. Regardless of your location, we extend the following rights to all Mugafi users as a matter of good practice:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may ask us to correct inaccurate or incomplete data. Most account data can be corrected directly in your account settings.
• Erasure: You may ask us to delete your personal data. Deletion requests for script content take effect within 30 days; some data may be retained where required by law.
• Grievance redressal: If you have a complaint about how we have handled your data, you may raise a grievance with us. We will acknowledge your complaint within 48 hours and resolve it within 30 days.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, email [email protected] with the subject line "Data Request." We respond within 30 days.

7. Cookies and Tracking

See our Cookie Policy for a full description of the cookies and analytics tools we use on mugafihq.com.

8. Children

The Mugafi platform is intended for adult creative writers. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has created an account, we will delete the account and associated data promptly. If you believe a minor has registered, please contact us.

9. International Transfers

Our cloud infrastructure providers operate servers in multiple regions. Where your data is transferred outside India, we take steps to ensure it is protected to standards consistent with the DPDPA, including contractual data protection obligations with processors.

10. Changes and Contact

We will reflect material changes to this policy with an updated "Last updated" date. For significant changes affecting how we use script content or introduce new data categories, we will notify registered users by email before the change takes effect.