Your role stays yours.
OxyRole early access · Updated September 5, 2026. This page describes the current storyboard preview. Video rendering is not available yet.
What we store
We store your sign-in email, session information, storyboard projects, uploaded references, and the permissions you grant. Guest sessions let you save a limited set of drafts in this browser. If you clear your cookies before signing in, you may lose access to those guest drafts.
Planning your scene
Your brief and selected cast type are processed by a model hosted on Cloudflare Workers AI to propose an outline and shot directions. The planner does not receive reference photos. A Cloudflare Workflow lets planning continue when you leave the page; its saved inputs and results contain a request ID and status, not your brief or storyboard.
Pending briefs are stored in our database until planning finishes. Failed requests may retain their brief for up to 24 hours so you can retry; rejected or cancelled briefs are cleared. Failed request records are scheduled for deletion after 30 days. Account deletion removes these database records and prevents pending work from saving a project. Minimal Cloudflare execution metadata can remain.
Scene text reviews
Before saving new scene text, we screen it with Llama Guard hosted on Cloudflare. Director requests and proposed responses are also screened. This text check does not verify identity, consent or rights, and can make mistakes. Reference images are not sent to this text model. Built with Llama.
Briefs, individual text edits and Director instructions also pass an independent content-use classifier hosted on Cloudflare. This additional check can reject requests that the first model misses. Both checks can mistakenly reject harmless material.
Review records contain a decision, category codes, model and policy version, and a workspace-scoped digest. They do not contain a separate copy of your scene text. These records are removed on account deletion and scheduled for cleanup after 30 days.
Your references are private
References are held in private Cloudflare R2 storage and are served only to your authenticated account. Cloudflare decodes and re-encodes every new upload as WebP to remove image metadata before storage. We do not make references public, use them to train models, or send them to a video provider in this preview.
Director suggestions
When you ask the director for suggestions, your instruction and storyboard text are processed by a model hosted on Cloudflare Workers AI. This feature does not receive your reference photos. Suggestions appear for review before you apply and save them. We retain daily request counts and a minimal activity record to operate the feature and limit abuse. Daily request counts are scheduled for removal after 30 days.
Consent is specific
Cast profiles record permission for private storyboarding only. Voice use and training are not included. Personal profiles are restricted to adults using their own likeness and remain pending identity verification. Declaring ownership or verifying your email does not verify your face.
Revoke or delete
Open My cast to revoke future permission or delete a profile and its reference. Projects using a revoked profile are blocked from future rendering. Delete individual projects from My studio. A minimal event record may remain to document that a grant was revoked or data was deleted; it does not contain the reference image.
You can delete unused reference photos from My cast. Deleted references become inaccessible immediately. If storage is temporarily unavailable, the deletion request is retained and retried by an hourly cleanup job. Old files that were never attached to a saved reference are eligible for cleanup after 24 hours; active cast references are kept until you delete them.
Hosting and future video providers
Cloudflare hosts the application, account data, private references, and transactional sign-in email. If video generation becomes available, the selected provider and its processing terms must be disclosed before you authorize sharing your reference. Cloudflare-native hosting does not mean third-party inference runs inside Cloudflare.
Cookies and account data
We use essential authentication cookies. This preview does not use advertising cookies or third-party behavioral analytics. You can retrieve your account data from the authenticated account export endpoint. You can export or delete your account below. Account deletion removes private references and storyboards; a minimal record documents consent revocation and deletion.
Before commercial launch
A complete operator contact, legal review, retention schedule, identity-verification process, and abuse-response channel will be published before video rendering opens. This early preview accepts no payments and produces no video impersonations.
Your JSON export includes saved work, consent records and account activity. Photos have private download links; save them before deleting your account.