FrançaisSign in
← Back to home

Privacy policy

Last updated: October 2026

This English version is provided for convenience. The French version is the authoritative text.

Onspott is a music management tool for post-production, published by Narrativ. (see the legal notice). This page explains what data we collect, why, and how to exercise your rights.

Data controller

Narrativ. (SASU NARRATIV), 60 rue François Ier, 75008 Paris, France — contact: contact@onspott.app

Data we collect

Waitlist (home page)

  • your e-mail address, the site language and the form used;
  • the sign-up date and technical information about your browser ("user agent").

Your IP address is used only to limit abuse (number of attempts); it is not stored.

User account

  • your e-mail address and the name you provide;
  • your role in the projects you take part in.

Project content

  • the information you enter (scenes, cues, syncs, notes, comments, SACEM cue sheet data, rights holders);
  • the files you upload (audio, images, PDF scripts, video versions of the film uploaded for review, transferred files).

AI script analysis (optional)

  • when you click "Detect scenes with summaries (AI)", the PDF script concerned is sent to our AI provider to extract the scenes and write a short summary of each one;
  • nothing is sent without that click; scene detection without AI runs entirely on our servers.

Transfers and notifications

  • the e-mail addresses of the recipients you enter;
  • the history of a transfer's sending, opening and downloads.

Purposes and legal bases

  • Letting you know when access opens (waitlist) — consent, given when you sign up.
  • Providing the service (account, projects, sharing with the team, transfers, e-mail notifications) — performance of the service you use.
  • Analysing a script with AI — at your express request, each time you start the analysis.
  • Security and abuse prevention — legitimate interest.

We do not use your data for advertising, we do not sell it, and we do not carry out any profiling.

Retention periods

  • Waitlist: until your access opens, or at most 24 months without opening; you can ask to be removed at any time.
  • Account and projects: as long as the account is active; deleted within 30 days of the account's deletion.
  • Transfers: files are deleted automatically on the transfer's expiry date.
  • Deleted items (cues, syncs and their audio files): kept for 7 days after deletion so they can be restored, then permanently erased.
  • Review videos: kept as long as they remain in the project; a deleted version is permanently erased after 7 days, together with its comments.
  • AI analysis: the result (scenes and summaries) is kept in your project; our AI provider does not keep the script beyond processing, except for a limited technical period set out in its terms.

Recipients and processors

Your data is accessible only to Narrativ. and to the members of the projects you share. We use the following technical providers:

  • Supabase — database and authentication (European Union, Ireland);
  • Cloudflare R2 — file storage (European Union);
  • Vercel — website hosting (United States);
  • Resend — sending the service's e-mails (European Union);
  • Anthropic (Claude) — AI script analysis, only when you start it (United States). The data sent is not used to train its models.

Where data may be processed outside the European Union (Vercel, Anthropic), the transfer is governed by the European Commission's standard contractual clauses and/or the EU–US Data Privacy Framework.

Onspott’s administrators can see account metadata (email address, name, creation and last-activity dates, how the account was created, project titles) to manage access to the beta and the security of the service. They do so from a restricted console protected by two-factor authentication, which never displays project content; every administrative action there is logged.

Cookies

Onspott only uses cookies that are strictly necessary for the service to work (keeping you signed in, security, remembering your language). No advertising or third-party audience measurement cookies are set; no consent is therefore required.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time. To exercise them, write to contact@onspott.app. We reply within one month.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.