1. Who we are

Theater is a personal operating system for organizing and executing the work in your life. It is operated by Bushwick & Devoe LLC (“Theater,” “we,” “us”), a New York limited liability company. We are the controller of the personal data described here. This policy explains what we collect when you use gettheater.app and the Theater application, why, and the choices you have. Theater is currently offered in private beta, and these practices may evolve as the product does. We will note material changes as described in Section 17.

2. What we collect

We collect only what we need to run the service for you.

Information you give us

• Account details: your email address, display name, time zone, and preferences such as your coaching style and daily “call time.”
• Your content: the productions, scenes, notes, deadlines, goals, and any dollar values or costs you attach; messages you post on a production’s Callboard or send as direct messages; and writing samples you save to shape Maistro’s voice.
• Contacts you add or import: people you add to your network, including details you provide or import from a LinkedIn connections file or a phone contacts (vCard) file. See Section 6.
• Waitlist: if you join the waitlist, your email address.

Information from connected services (only if you connect them)

• Google Calendar: if you connect Google, we access your calendar events to sync them into Theater and to write your production deadlines back to your calendar, including event times, titles, and attendee information. See Sections 7 and 8.

Information we collect automatically

• Basic technical data needed to operate and secure the app (for example, authentication tokens and standard server logs).
• Local device storage: Theater stores some data in your browser (for example, waitlist state and interface preferences) so the app works. This is not a tracking or advertising cookie, and we do not run third-party advertising or cross-site tracking.

We do not collect payment card or bank information. Theater is free during the private beta and does not process payments.

3. How we use your information

• To provide the service: create and organize your productions, and run The Stage, The House, Cues, Inbox, and Calendar.
• To power Maistro’s features: briefs and coaching, drafting deliverables in your voice, digesting transcripts, and surfacing follow-ups. See Section 4.
• To send you the notifications and daily reads you have set up, and service messages such as collaboration invites.
• To secure the service, prevent abuse, debug problems, and comply with law.
• With your opt-in consent, to improve the product using feedback you choose to share (see Section 5 on how that is de-identified).

We do not use your content for advertising, and we do not sell it. See Section 5.

4. The AI layer (Maistro)

Maistro is the AI assistant inside Theater. It is powered by Anthropic’s Claude API. Here is exactly how your data is handled when a Maistro feature runs:

• Data minimization. When you use a Maistro feature, we send Claude only the information that feature needs to do its job (for example, a production’s goal, notes, and linked context to write a brief), not your whole account.
• Personalized to you, from your own data. Maistro learns your voice and your deliverable and tooling preferences from your own writing and settings, and uses them as context at the time of your request. This personalization is for you, on your account. Your content is never used to train AI models that serve other users, and we never build shared or cross-user models from it. “Learning your voice” here means using your own writing as context to draft for you, not training a model that anyone else touches.
• Our AI provider does not train on your data. Under Anthropic’s commercial API terms, inputs and outputs are not used to train Anthropic’s models, and Anthropic auto-deletes them on its side within a limited window (currently up to 30 days), subject to legal or abuse exceptions. This is Anthropic’s processing window for the API call, not our storage of your account. We are working to add Zero Data Retention with Anthropic; it is not enabled today, and we will state it here plainly once it is.
• You stay in control. Maistro proposes; you approve. Suggested changes, drafts, and digested items are not applied to your account until you accept them.

Maistro can be wrong. Its drafts and suggestions are a starting point for you to review. They are not professional advice. See the Terms of Use for the full disclaimer.

5. We never sell your work, and never train shared models on it

We make money from the product, through subscriptions, and never from selling your data. Specifically:

• We do not sell, rent, trade, or “share” your personal information or your content, as those terms are defined under applicable law.
• We do not use your content to train AI models that serve other users or third parties.
• If we are ever involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, any transfer of your personal information or content is conditioned on the recipient agreeing to honor privacy commitments at least as protective as these for data collected under this policy. We will give you advance notice and an opportunity to export and delete your data before any such transfer takes effect. This commitment is intended to bind our successors.

If you opt in to share feedback during the beta, any product insight we draw from it is aggregated and de-identified before it informs our roadmap, and your raw content stays private to you and your coaching. Sharing feedback is optional and off by default.

6. Contacts and other people’s information you import

Your network is yours. Theater lets you bring in the connections you have already made, from a LinkedIn export or your phone, and put them to work toward your own goals. We use them only for you, never to market to those people and never to build a directory. And we respect their data the same way we respect yours, which is why the handling below matters.

• You are responsible for having a lawful basis, and any consent or notice required by law, to share that information with us and to have us process it for the features you use.
• We process imported contact information only to provide the network, follow-up, and outreach features you actively use (for example, linking a contact to a production, or reminding you to follow up). We do not enrich it from outside sources, we do not sell it, we do not place it in any shared or public directory, and we never contact the people in your contacts on our own initiative.
• We delete an imported contact record when you delete the contact, disconnect the source, or delete your account.
• If you are not a Theater user and believe someone has uploaded your information, email hello@gettheater.app and we will locate and delete it where we can identify it.

7. Who we share data with (subprocessors)

We share data with a small set of vendors that help us run Theater. They process data on our behalf, under contract, only to provide their service to us. We do not permit them to sell it or use it for their own purposes.

Provider	What it does for Theater	Data involved
Supabase	Database, authentication, and file storage (our primary data store)	Your account and content
Vercel	Application hosting and serverless functions	Requests and technical data in transit
Anthropic (Claude API)	Powers Maistro’s AI features	Only the data a feature needs at request time (Section 4)
Loops	Transactional email (waitlist and collaboration invites)	Recipient email and message details
Google	Calendar sync, only if you connect it	Calendar events and attendees (Section 8)

We keep a current list of subprocessors and will update this policy when we add or change one. This list is complete as of the date above. Theater runs no analytics platform, no advertising network, and no third-party tracking of any kind. We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the service.

8. Google user data

Theater’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Concretely, if you connect Google Calendar:

• We request calendar access only to read your events into Theater and to write your production deadlines back to your calendar.
• We use Google data only to provide and improve those user-facing calendar features. We do not use it for advertising, and we do not sell it.
• When a feature you use requires it, calendar event details may be sent to our AI provider (Anthropic) solely to generate that feature’s output for you. This is a transfer to provide a user-facing feature. Google data is not used to train generalized AI models.
• We do not transfer Google data to others except as needed to provide the service, for security, or to comply with law.
• Your Google authorization tokens are stored so that only our server can use them, and are never exposed to your browser or to other users. You can disconnect Google at any time, which revokes our ongoing access.

9. Where your data is stored

Your data is stored on cloud infrastructure located in the United States (Supabase and Vercel). If you access Theater from outside the United States, your information will be processed in the United States and in the locations of the subprocessors listed above. For transfers of data from the EEA or UK, see Section 15.

10. How long we keep your data

We keep your account and content for as long as your account is active. When you delete specific items, they are removed from your active workspace. When you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain limited records to comply with law, resolve disputes, or enforce our agreements. Server logs and authentication tokens are kept for a short period (typically 30 to 90 days). Waitlist emails are kept until launch or until you opt out. Google authorization tokens are deleted when you disconnect Google. Data sent to the Claude API is subject to the provider-side window in Section 4.

11. Your rights and choices

• Access and export: Backstage gives you a one-click export of every row we hold, in a machine-readable format. You do not need to ask us for it.
• Correction: you can edit your account details and content in the app.
• Deletion: you can request full account deletion (a hard delete, beyond the reversible “Strike” state used inside the app).
• Object or restrict: you can object to or ask us to restrict certain processing.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time.
• Disconnect services: you can revoke Google Calendar access at any time.
• Email preferences: you can opt out of non-essential emails.

During the private beta, some of these are handled manually: email hello@gettheater.app and we will process your request. We will respond within the time required by applicable law, and in any case within 30 days. You also have the right to complain to a data-protection authority (see Section 15).

12. Shared productions and leaving Theater

Theater lets you invite collaborators to a production. When you share a production, the people you invite can see what you have shared with them, and messages you post on a shared Callboard are visible to that production’s collaborators. If you delete your account, we delete your personal data as described in Section 10, but content you contributed to a production owned or co-owned by someone else may remain with that production, shown as from a removed user, because another person also relies on it. You can remove collaborators, and leave or stop sharing a production, at any time.

13. If there is a data breach

If we become aware of a security incident that affects your personal information, we will notify affected users and any required authorities without undue delay, and we will describe what happened and what we are doing about it, as required by applicable law.

14. How we protect your data

We use technical and organizational measures to protect your information, including encryption in transit and at rest at the infrastructure-provider level, owner-only access controls on your core data, and server-side handling of sensitive credentials. See our Security Overview for details. No system is perfectly secure, and Theater is an evolving beta, so we describe our current posture honestly rather than promising certifications we do not yet hold.

15. Regional privacy rights

EU / UK (GDPR)

If you are in the EEA or UK, we process your personal data on these legal bases: to provide the service and your account (performance of a contract); for Maistro features, product improvement, and security (our legitimate interests); for connecting Google, sharing beta feedback, and training Maistro’s voice on your samples (your consent, which you can withdraw); and to meet legal obligations. You have the rights to access, correct, delete, port, object to, and restrict processing, and to withdraw consent, and you can lodge a complaint with your local supervisory authority (in the UK, the ICO). Maistro’s suggestions are proposals that you approve; we do not make decisions producing legal or similarly significant effects about you without human involvement. Where we transfer EEA or UK data to the United States, we rely on Standard Contractual Clauses (and the UK Addendum) with our subprocessors.

California (CCPA/CPRA)

We collect the categories of personal information described in Section 2 (such as identifiers, commercial information, and internet or app activity) for the purposes in Section 3, and we disclose them to the service providers in Section 7 under contracts that bar them from using the data for their own purposes. We do not “sell” or “share” personal information as those terms are defined under California law, so there is nothing to opt out of, and we honor Global Privacy Control signals regardless. You have the rights to know, access, correct, and delete your personal information, and to not be discriminated against for exercising them.

16. Children

Theater is intended for users 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it. Contact hello@gettheater.app.

17. Changes to this policy

We may update this policy as Theater grows. For material changes, we will provide notice (for example, by email or an in-app notice) before the change takes effect, update the date above, and, where the change requires your consent under applicable law, ask for it.

18. Contact us

Questions, requests, or concerns about privacy: hello@gettheater.app. Bushwick & Devoe LLC, a New York limited liability company. We will give you our postal address on request.