Cinegraph Media LLC · for cinegraph.media, storyfirst.cinegraph.media (the story first // studio os academy) and studio360.cinegraph.media (Studio 360°)
Effective date: October 22, 2026 · This page: https://cinegraph.media/privacy (one privacy policy for all three sites)
Cinegraph Media LLC, a Colorado limited liability company ("we", "us", "our"), is responsible for your information. We run:
This policy covers all three websites, our forms, checkouts, member portal, emails and texts, filming sessions, and events we run. "You" means anyone whose information we handle under this policy.
Contact: Cinegraph Media LLC · [email protected] · 720.204.8547 · 905 Garden of the Gods Rd, Colorado Springs, CO 80907.
| Where | What we collect | Why |
|---|---|---|
| The "Mini Map" form (cinegraph.media/connect) | Name, email, business name, the package you're considering | To reply to you about working with us |
| Cinegraph Media · Story First forms (website sign-up, Academy waitlist) | Name and email, and anything else the form asks you for | To send what you asked for and keep you updated about the Academy |
| Studio 360° booking and checkout | Your name and email, any other contact or business details the checkout and booking calendar ask you for, your session time, and any code you use | To book, run and deliver your session, and contact you about it |
| Pre-session forms (Business Profile, prep questions) | Email; if you choose, your website, social links, contact details, answers to interview questions, and files you upload (logo, photos) | To prepare for your session |
| Upgrade and add-on orders | Name, email, phone, company name, the add-ons you choose | To deliver what you ordered |
| The Academy member portal and community | Name, email, login details, and what you post in the community | To give you access, run the course and community, and support you |
| Event tickets (sold through Eventbrite) | Name, email and whatever the event's registration form asks; Eventbrite shares these with us as the organizer | To run the event and contact attendees about it |
| Messages you send us | Whatever you write in emails, texts, chats or social messages | To answer you |
Payments. Online card payments are processed by Stripe through our booking and checkout platform. We don't see or store your full card number. If you pay us another way, that payment is handled by the provider you pay through. If we move to a different payment processor, we'll update this policy.
When you visit our sites, your browser shares technical information with us and with the services our pages load: your IP address, browser and device type, the pages you visit, the site you came from, and cookie identifiers. Section 6 lists the cookies.
We use AI services to work faster. Here's exactly what they do:
These services process the material to do the job. We keep raw video footage on drives and accounts we control; it isn't stored with these services as a library.
Matt sometimes wears a small recording device (Fieldy) at in-person business meetings, networking events and calls he takes part in. The recordings are transcribed by AI so he can remember what was said and follow up on what was agreed (for example, adding a meeting to the calendar or drafting a follow-up email that he then reviews and sends).
We use it to: answer you; book, run and deliver sessions, courses and events; process payments and refunds; send the emails you'd expect (confirmations, reminders, review links, delivery); send marketing emails, which you can stop at any time; send texts only if you opted in to them; publish videos as your release allows; improve our sites and services; keep our sites and accounts secure and prevent fraud; keep records the law requires; and enforce our agreements.
We only use your information for these purposes, or for a new purpose you agree to first.
Cookies seen on a first visit to our pages (checkout and log-in pages set their own):
| Cookie | Set by | What it does | Where |
|---|---|---|---|
_ga, _ga_W7VVD6BYZE |
Google Analytics | Tells visits apart so we can count visitors and see how the sites are used | All three sites |
msgsndr_id |
GoHighLevel | Our site platform's visitor identifier, used for forms and site features | All three sites |
__cf_bm |
Cloudflare | Detects bots and protects the sites | All three sites |
VISITOR_INFO1_LIVE, YSC, VISITOR_PRIVACY_METADATA, __Secure-YNID, __Secure-ROLLOUT_TOKEN |
YouTube (Google) | Plays embedded videos; YouTube's own cookies | cinegraph.media pages with videos |
The Academy member portal, hosted by GoHighLevel, uses its own cookies or similar technology to keep you signed in.
Our pages also fetch fonts from Google Fonts and Adobe Fonts, and use Cloudflare bot checks, so your browser contacts those companies and shares your IP address with them.
We use Google Analytics (through Google Tag Manager) to understand how people find and use our sites. We have turned on these Google Analytics Advertising Features: Google signals and ads personalization, and our Google Analytics property is linked to a Google Ads account. This means:
_ga) and third-party cookies (such as Google advertising cookies) or other identifiers together. With Google signals on, Google may connect visit data to the Google accounts of signed-in users who have allowed ad personalization.How to opt out: - Turn off ad personalization at adssettings.google.com (Google's "My Ad Center"). - Install the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout. - Opt out of interest-based ads from participating companies through the Network Advertising Initiative: optout.networkadvertising.org. - Block or delete cookies in your browser settings. Parts of the sites (like forms) may not work as well. - Or write to us and ask us to treat you as opted out of targeted advertising; we'll tell you which of the steps above applies to your device, because we can't switch Google's tracking off for one person from our side.
Third-party tracking. Google (including YouTube) may collect information about your online activity over time and across different websites when you use our sites.
Do Not Track and Global Privacy Control. Our sites don't currently change what they collect when your browser sends a Do Not Track or Global Privacy Control signal. Use the opt-outs above instead.
"Sale" and "targeted advertising." We don't sell your information for money. Some state privacy laws treat letting an advertising company collect data on your site for ad personalization as a "sale" or "targeted advertising". Google Analytics' advertising features may count under those definitions; the opt-outs above limit it.
We share information only with:
Texting data. We don't share your mobile number or text-messaging consent with anyone for their own marketing. Text-message opt-in data and consent are never shared with third parties, except the providers that deliver our texts.
We keep information only as long as we need it for the reason we collected it. We review what we hold, and delete what we no longer need, at least once a year.
| Information | How long |
|---|---|
| Google Analytics user- and event-level data | 14 months (Google's setting) |
| Contact records and form entries with no booking or purchase | Until our yearly review finds we no longer need them |
| Orders, invoices and payment records | As long as tax and accounting rules require (generally 7 years) |
| Your acceptance of terms and releases (name, email, date and time, version) | As long as we use the footage, plus 6 years |
| Studio 360° raw footage | 30 days in active storage, then cold archive; we don't promise to keep it beyond 30 days |
| Finished videos | As long as your release allows us to use them; we keep an archive copy |
| Story Sync session recordings | Kept while your project is active, then kept in our private archive. |
| Academy accounts | While your account is active, then until our yearly review |
| Recordings of business conversations | As long as useful for the business relationship, then archived or deleted at our yearly review (see section 4) |
| Emails and files | As long as needed for the reason we have them, checked at our yearly review |
When we no longer need information, we delete or destroy it so it can't be read or reconstructed, as Colorado law requires (C.R.S. 6-1-713). Backups and archives roll off on their own schedules.
We use established providers with their own security programs, limit access to the people and tools that need it, and protect our accounts with strong passwords. No system is perfectly secure. If a security breach affects your personal information, we'll notify you and, where required, the Colorado Attorney General, without unreasonable delay and within the time Colorado law sets (C.R.S. 6-1-716).
Wherever you live, you can ask us to:
How: write to [email protected] with the subject "Privacy request". We'll confirm it's you (usually by replying to the email address we have on file). Someone you authorize may ask for you, with your written permission. We'll answer within 45 days; if we need more time, we'll tell you why, and take up to 45 more. There's no charge.
If we say no, we'll tell you why. You can appeal by replying with the subject "Privacy appeal", and we'll answer within 45 days. If you're still unhappy, you can contact the Colorado Attorney General (coag.gov).
Limits. We may keep information the law requires us to keep, or need for a dispute, security or fraud prevention. For recordings, a first deletion request moves the recording to our private archive, and a second request deletes it (see sections 2 and 4). Deleting your information doesn't undo the Studio 360° Guest Media Release or another release for footage already filmed; to ask for a published clip to come down, follow the takedown steps in the release. We'll still delete your contact details if you ask.
Our services are for adults and businesses. We don't knowingly collect information from anyone under 13, and our forms, courses and studio sessions are for people 18 and older. If you believe a child has given us information, write to us and we'll delete it.
Please don't send us information about your patients or clients through our forms, and don't share it on camera. If you work in healthcare, counseling, law or finance, you're responsible for what your profession's rules let you say. We aren't a healthcare provider and don't ask for health information. One exception: if you choose to tell us about a health or safety need before a session (for example, mobility or light sensitivity), we use it only to look after you during that session.
We're based in the United States. Our service providers may process information in the United States and other countries.
We'll post any change here with a new effective date. If a change means using information you already gave us for a new purpose, we'll ask for your consent first.
Cinegraph Media LLC 905 Garden of the Gods Rd, Colorado Springs, CO 80907 [email protected] · 720.204.8547