Privacy Policy
Effective September 16, 2026
The software platform at beta.socialcinemax.com is developed and operated by Reed Labs LLC. This policy explains what information SCX collects, why, who else receives it, and what you can ask us to do about it.
It describes the product as it actually works. Where a service provider receives information, that provider is named below rather than hidden behind the phrase "trusted partners".
Information you give us
- Account information - the email address you sign in with, and a password. Passwords are handled by our authentication provider and are stored only as a hash; nobody at SCX can read yours.
- Your workspace - the name you give it.
- Contact and relationship information - everything you enter about the people in your network: names, contact details, employers and roles, notes, tags, relationship context and the reasons somebody matters to you.
- Images you upload - photographs of business cards or documents you want read, screenshots attached to feedback, and media you attach to a show.
- Media links - the YouTube links you add to your library and arrange into mixtapes.
- Access requests - if you ask for beta access, the email address and the description of what you do that you submit.
- Feedback - anything you send through the in-product feedback control, including an optional screenshot.
- Messages - anything you email us.
Information created by using SCX
- Authentication and session data - the cookies that keep you signed in, and a record of when your account was last active.
- Device and output records - when you use a device as a controlled screen, SCX records that device's role, a label, and the state of what it is showing, so a phone can control it and so a reconnecting device can recover.
- Live session records - when you create a shareable session so somebody can control a screen, SCX stores a hashed token and a start time for that session.
- Product records - the ordinary rows that make the product work, such as which items are in which mixtape, and timestamps of when records were created or changed.
- Server logs - our hosting provider records ordinary request information, including IP addresses, as part of serving and securing the site.
Why we use it
- To operate the product and do the things you ask it to do.
- To authenticate you and keep accounts separate from one another.
- To provide support when you write to us.
- To keep the service secure, diagnose faults, and prevent abuse.
- To improve SCX, informed by what is breaking and what people tell us.
- To meet legal obligations, and to enforce our Terms.
Information about other people
SCX is a tool for keeping track of people you know, so most of what you put into it is information about somebody else. You decide what to enter, and you are responsible for having a proper basis for entering it and for keeping it accurate.
We process that information on your behalf in order to run the product for you. We do not use the contacts in your workspace to market to them, and we do not build a shared or cross-customer directory out of them. Another SCX customer cannot see your workspace.
If somebody in your records asks us to remove information about them, we will generally direct them to you, since it is your record - and we will help you act on it.
Service providers who receive information
SCX does not run its own data centers or its own models. The following providers process information as part of the product working. Each is named because each genuinely receives data - this is not a generic list.
- Supabase - the database, authentication, file storage and realtime messaging behind SCX. Effectively everything you store in SCX is stored with Supabase.
- Vercel - hosting and the edge network that serves the site. Vercel handles every request and the ordinary log data that comes with it.
- Anthropic - the AI features. When you use conversational intake, have a photograph read, or ask SCX to structure pasted text, the text or image you submitted is sent to Anthropic's API to be processed and the result is returned to you. Only the content you submit to those features is sent; SCX does not send your contact database to a model in the background.
- Tavily - the optional research search. When you ask SCX to research a contact, a search query built from that contact's name, employer, handles or website is sent to Tavily's search API. If you do not use the research feature, nothing is sent.
- YouTube (Google) - media playback. SCX embeds YouTube's own player, so when you play a video your browser connects to YouTube directly and Google may set cookies and collect information under its own policies. SCX does not host or copy the media.
- Stripe - payments. If you subscribe to Screen Control, Stripe processes the payment and receives the billing details you enter; card numbers are entered on Stripe's own surfaces and are never seen or stored by SCX. SCX keeps only what it needs to know whether your subscription is running: the Stripe identifiers for your customer and subscription, its status and renewal date, and the amount and month of each payment it has counted.
What we do not do
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- We run no advertising, and there is no advertising technology in the product.
- There is no analytics or product-tracking SDK in SCX - no Google Analytics, no tag manager, no session-replay tool, no third-party behavioral tracker of any kind.
- We do not use your contact records to train AI models, and we do not send them to a model except when you use a feature that asks a model to process something you submitted.
Cookies and local storage
SCX uses cookies for one purpose: keeping you signed in. Those are set by our authentication provider and are strictly necessary - without them you cannot use an account.
The product also stores small amounts of data in your browser's own local and session storage to remember interface state, such as which view you last had open and whether an operator console on that device is locked. That data stays in your browser.
There are no advertising or analytics cookies to consent to, because there is no advertising or analytics.
Playing media loads YouTube's embedded player, which may set its own cookies in your browser under Google's policies.
How long we keep it
Information in your workspace is kept while your account exists, because it is the product: deleting it on a timer would delete the thing you came for.
When you ask us to delete your account, we remove your workspace data from the live system. Ordinary encrypted backups may retain copies for a limited period before ageing out, and we may keep the minimum needed to meet a legal obligation or resolve a dispute.
Access requests and feedback are kept as an operating record of the beta.
Security, honestly stated
Every table in the SCX database has row-level security enabled, and access is granted deliberately rather than by default. File storage buckets are private - files are reached through short-lived signed links, never a public URL. Traffic is encrypted in transit.
No system is perfectly secure, and SCX is a beta product built by a very small team. We do not claim that a breach is impossible. If one affects you, we will tell you.
Your choices and your rights
You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Write to reedjrobertson@gmail.com from the address on the account and we will verify it is you before acting.
You can edit or delete most of what is in your workspace yourself, directly in the product.
We will not treat you differently for exercising any of these rights.
California residents
Reed Labs LLC is a very small business and may not meet the revenue or volume thresholds that make the California Consumer Privacy Act apply to it. We are not claiming that it does. Whether or not the statute applies, we handle requests from California residents as described here.
The categories of personal information described above are identifiers, commercial information, internet activity relating to your use of SCX, and any content you choose to upload. They are collected for the business purposes listed under "Why we use it" and disclosed only to the service providers named above, each of which is engaged to perform services for us.
We have not sold personal information, and we have not shared it for cross-context behavioral advertising. Because neither happens, SCX does not operate a "Do Not Sell or Share" mechanism - there is nothing for it to switch off.
To make a request, write to reedjrobertson@gmail.com.
Children
SCX is a professional tool and it is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, write to us and we will delete it.
Where information is handled
The SCX software service is operated from the United States and its providers process information there. If you use SCX from elsewhere, you are sending information to the United States.
Changes to this policy
When this policy changes we will post the new version here and update the effective date above. If a change materially affects how we handle your information, we will make a reasonable effort to tell account holders directly rather than relying on you to re-read the page.
Contact
Privacy questions, requests and complaints go to reedjrobertson@gmail.com. A person reads them.
This document describes how SCX actually works today and is written to be read, not to impress. It is an operational policy, not legal advice, and it does not create rights beyond those the law already gives you.