Context for the draft Terms and Privacy Policy, which are with an attorney for review. This note is not itself a contract and creates no obligations.
Octoflick — notes on the legal review
Published alongside the draft Terms of Service and Privacy Policy dated 2 September 2026, both of which are with an attorney for review. This note explains what the business does and which parts of it are unusual enough to need careful drafting.
What the business is
Octoflick LLC operates a web application that turns a screenplay into pre-production paperwork and visuals: scene breakdowns, shot lists, storyboards, animatics, and an export file that imports into Movie Magic Scheduling. Customers are filmmakers, 1st ADs, line producers and small production companies. Founder: Pablo Riesgo Almonacid, a working 1st AD. Cine De Riesgo LLC is his separate production company and is not part of this.
Revenue is subscription only: a free tier, and paid plans from $29/month for one seat up to $160/month for ten seats, with annual options.
The three features that make this unusual
1. Bring your own keys
We do not resell AI generation at any margin. Customers connect their own API keys for Anthropic, Google, OpenAI and Replicate. We store those keys encrypted, make requests on the customer's behalf using them, and the provider bills the customer directly at the provider's prices. We never touch that money.
What the drafts have to get right: that we are clear about not being liable for provider charges, provider outages, provider content refusals and provider account suspensions, and that what we commit to on key security is precise rather than aspirational.
2. Customers upload third-party screenplays
This is the highest-sensitivity data in the product. A 1st AD will often upload a script they do not own, under a non-disclosure obligation to a production company or studio.
What the drafts have to get right: our data-protection role, given that our customer is one party and the screenplay's rights holder is usually another; whether production-company customers should be offered a data processing agreement; and whether the disclosure that content is transmitted to third-party AI providers belongs as an acknowledgement at the point of upload rather than only as a term in a document.
3. AI-generated output
Storyboards and animatics are generated by third-party models. Section 7.2 of the Terms discloses that copyright protection for such material is unsettled in the United States.
What the drafts have to get right: whether that disclosure is prominent enough, given that customers may put generated frames into pitch decks and investor materials.
Points under review in the drafts
Terms of Service
| § | Issue |
|---|---|
| 4.4 | Automatic renewal — California's Automatic Renewal Law and the applicable federal negative-option rule. Cancellation is self-service in the billing portal. |
| 4.8 | Refunds, and mandatory consumer withdrawal rights if we sell into the EU and UK |
| 12 | The notice and counter-notice procedure for copyright complaints |
| 19 | Governing law and dispute resolution, noting that the Free and Creator tiers are consumer-facing |
Privacy Policy
| § | Issue |
|---|---|
| 3.2 | Treatment of IP addresses logged for security, under CPRA and GDPR |
| 9 | Cookie consent for EU and UK traffic; California opt-out signals, including Global Privacy Control |
| 11.3 | Controller and processor determination, and what follows from it |
| 12 | The mechanism for international transfers |
Things we deliberately do not do
- No training on customer content
- No sale or sharing of personal information
- No advertising
- No reading of customer screenplays except on request during support
- No storage of full payment card numbers
Vendors
Google Cloud Platform for hosting, database and object storage, and Stripe for payments. A CDN, a transactional email vendor and a product analytics vendor will be named in the Privacy Policy as each is confirmed.
Questions
hello@octoflick.com