Security
Kinema is built so nothing about your work leaks, surprises you, or ships without you. Here is what that means in practice.
STORAGE
Voiceovers, scripts, sources and finished renders are scoped to the project that created them and the account that owns them. Media is served through short-lived signed links, never public buckets, and nothing you upload is shared across accounts.
SOURCES
Each shot in the cut carries its provenance: where it came from and on what terms. Open the source list before render, inspect anything that looks off, and swap it without touching the rest of the film.
CONTROL
The pipeline pauses at the moments that matter. You approve the plan, you approve the sources, and the render starts when you press the button, not before. Exports leave the workspace only when you choose.
ACCOUNT
Sign-in and sessions are handled by Clerk. Payments are handled by Stripe, so your card details never touch our servers. Analytics are cookieless and aggregate, and there are no ad trackers anywhere on the site.
None of this needs a settings page. It is just how the product runs.
Every request between you and Kinema travels over TLS.
Uploads and renders live on encrypted object storage.
Internal services get the narrowest keys that do the job.
Auth and generation endpoints are throttled against abuse.
Provider keys, including any you bring, are write-only once saved.
A report to hello@kinema.cc reaches a person, not a queue.