Privacy Policy

Last updated: Sep 29, 2026.

1. Who we are and what this policy covers

Straz Inc. ("Straz," "we," "us," or "our") provides an AI-assisted acting rehearsal service through our mobile application, www.heystraz.com, and related support and communications (the "Services"). Straz Inc. is responsible for the personal information described in this policy and acts as its controller where that term applies.

Straz lets you upload scripts, prepare characters and dialogue, rehearse with synthetic scene-partner voices, and manage subscriptions and rehearsal settings. The scene partner is AI, not a human performer. Our current release is intended for people who are at least 18 and have reached the age of legal majority where they live.

This policy explains our information practices. It is not a blanket consent to every use of your information. We request separate permission or consent where required. Our Terms of Service govern use of the Services and the rights needed to upload content.

2. Information we collect and process

Account and support information

We process your name, email address, authentication information, account identifier, eligibility information you provide, profile information you choose to provide, preferences, and communications with us. This includes support requests, survey responses and voluntary beta feedback. If an authorized Straz administrator creates a complimentary-access account for you, we receive the account information supplied for that purpose.

Scripts and related content

We process the files and text you upload, including scripts, audition sides, character notes, stage directions and edits. Processing also creates structured script text, character information, delivery instructions and generated scene-partner audio. Files can contain personal information about other people; upload only information you are authorized to provide.

Straz provides private rehearsal accounts, not a public user-script library. We do not make your private uploads available to unrelated users, claim ownership of them, or use them as advertising or sample scenes without separate permission from someone authorized to grant it. These restrictions do not prevent the necessary service-provider processing, support access or lawful disclosures explained below.

Having a copy of audition sides does not necessarily authorize sending them to AI providers. Our privacy practices do not override an NDA, casting instruction, production restriction or copyright license.

Microphone audio, transcription and delivery analysis

When you allow microphone access and use a microphone-enabled rehearsal mode, your speech is processed to follow your lines, identify turns and operate rehearsal controls. This can involve sending audio to a third-party speech-recognition provider and producing a transcript even though the transcript is not displayed to you.

AI analysis can also interpret your delivery and influence the scene partner's response. Emotion-feedback features can display inferred delivery labels. Those labels are fallible interpretations of a performance; they are not reliable findings about your actual feelings, personality or health.

The current release does not provide a feature for saving and replaying a recording of your own rehearsal performance. This is different from the generated scene-partner audio that is saved with your script. It also does not mean that processing occurs only on your device or that no temporary audio or transcripts exist.

You can deny or revoke microphone permission in your device settings. Microphone-dependent modes will then be unavailable; prerecorded rehearsal remains available subject to your plan and the content available to you. Do not capture another person's speech without any legally required permission.

Subscription and usage information

Apple or Google processes current in-app purchases. RevenueCat helps manage purchase receipts, product identifiers and subscription entitlements. We receive subscription status, transaction identifiers, renewal and cancellation information, and related account records. The app-store purchase flow does not give Straz your full payment-card number.

We also process allowance consumption and session measurements, such as script identifiers, session timestamps, duration, lines practiced, generated-audio activity and processing status. These records can remain personal information when linked to your account.

Device, website and technical information

We process information needed to operate, secure and troubleshoot the Services, such as IP address, device and app version, authentication/session records, errors, processing events and usage diagnostics. Website technologies may collect browser and page-interaction information as described in Section 7. We do not treat a record as anonymous merely because it lacks your name.

3. Why we use information

We use information to:

Create and secure accounts and provide the features you request.
Parse scripts, generate scene-partner audio and operate rehearsal sessions.
Apply preferences, manage subscriptions and measure disclosed usage allowances.
Respond to support requests and send service, billing and security notices.
Diagnose failures and improve reliability, accessibility and performance.
Prevent fraud, unauthorized access and misuse; enforce our agreements; and handle legal obligations and claims.
Send marketing messages where permitted, subject to your choices.

We may use aggregated or de-identified operational measurements for analytics and service improvement. We take reasonable measures to prevent re-identification and do not attempt it except as law permits to test our safeguards. We do not use this provision to disclose private scripts or identifiable performances.

4. AI providers, training and access to private content

We use service providers to support the following functions:

AI and speech processing: processing uploaded scripts, rehearsal audio, text and related instructions to provide script analysis, speech recognition and synthetic scene-partner speech.
Hosting and operations: storing and processing information needed for accounts, authentication, security, diagnostics, communications and customer support.
Subscriptions and payments: processing information needed to manage purchases, subscriptions, payment status and app distribution.
The information shared depends on the feature you use and the provider’s role. Additional feature-specific notices identify relevant AI providers and explain the information shared before we request permission for that sharing.

Training restriction. We do not use your private scripts, rehearsal audio, transcripts or private performance content to train general-purpose AI models, or authorize our providers to do so. Processing your content to provide requested features, such as script analysis and generated speech, is distinct from model training. Any optional training use would require a separate explanation, an appropriate legal basis and required permissions from the relevant rights holders. Accepting our Terms or acknowledging this policy does not grant that permission.

5. When we disclose information

We disclose information to providers and contractors for the functions described above, subject to appropriate contracts and safeguards. App stores and independent services you choose may process information under their own privacy notices. Using a provider does not remove Straz's responsibilities under applicable law.

We may also disclose limited information:

At your specific request or with legally valid authorization.
To professional advisers under appropriate confidentiality duties.
To comply with lawful requests, protect security and rights, investigate misuse, or establish or defend claims.
During a genuine financing, reorganization, sale or similar transaction, with appropriate restrictions on access and use. A successor remains subject to applicable law and existing privacy commitments unless lawfully changed.

Complimentary access does not authorize a coach, school or sponsor to view your scripts or rehearsal content. Any organization access requires a separately agreed arrangement and clear disclosure before it is enabled.

We do not sell private scripts or rehearsal content or use them for third-party advertising. Privacy choices concerning other information are described in Sections 7 and 9.

6. Retention and deletion

We retain personal information for the purposes described here, considering the service you request, the sensitivity of the information, legal requirements and the need to resolve disputes. Different categories have different schedules:

Account information: while the account is maintained, followed by the limited retention needed for legal, security and accounting purposes.
Saved scripts and generated scene-partner audio: while needed for your library, subject to deletion requests and the subscription-expiry rule below.
Microphone audio, transcripts and analysis inputs: processed for the requested rehearsal functions. Temporary copies and provider records may persist beyond a session for processing, troubleshooting, security, abuse prevention or legal requirements. Retention depends on the feature and provider involved; absence of a saved recording in your account does not mean every processing copy is immediately deleted.
Support, diagnostics and security records: retained as needed to resolve the request or incident, investigate recurring failures, prevent misuse and meet applicable legal obligations. Relevant records may be retained longer where needed for an ongoing dispute or investigation.
Payment, legal and consent records: as necessary for applicable recordkeeping requirements and the establishment, exercise or defense of claims; retained records are restricted to those purposes.
Backups: deletion from active systems may precede expiration of backup copies. Remaining copies are subject to backup rotation and recovery processes and applicable legal retention requirements; deletion does not necessarily remove all copies immediately.

Paid-plan expiry. Uploaded scripts and their prepared audio are scheduled for deletion from active systems 30 days after a paid subscription expires, unless you renew before deletion or a necessary legal exception applies. Cancellation while a paid period remains does not itself start this countdown. This storage period does not extend access to paid features. Backup and legally required retention are separate from active-library storage.

You can delete a script using its in-app controls, request account deletion in Settings, or email support@heystraz.com. We process deletion requests within applicable legal deadlines and apply them to relevant providers as required. Restricted backup, legal or security records may remain for the purposes described above; a requirement to retain transaction records does not by itself justify retaining your scripts.

Deleting your account or uninstalling the app does not automatically cancel an Apple or Google subscription. Use the store's subscription controls to stop renewal. We can help you locate them. Deletion is not conditioned on purchasing further service.

7. Cookies, analytics and marketing choices

Necessary technologies support functions such as login, security and preferences. Website and app technologies may also measure use and diagnose performance. Third-party services may process device identifiers and interaction information under their own notices. Where consent is required for optional technologies, it must be obtained before they are used. You can unsubscribe from promotional email using its unsubscribe link; service notices may continue. Device settings control push notifications and microphone access. Browser settings can restrict cookies, although doing so may affect functionality. A browser Do Not Track setting alone may not communicate a privacy request to us; use the contact method in Section 9. Where applicable law requires us to recognize a browser-based opt-out signal, that requirement applies independently of this policy.

8. Security

We use administrative, technical and organizational measures designed to protect information and limit unnecessary access. No service can guarantee absolute security. Protect your credentials and contact us about suspected unauthorized access.

We handle security incidents and legally required notices under applicable law.

9. Privacy requests and rights

Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a copy of your personal information; restrict or object to processing; withdraw consent; or opt out of covered sales, sharing, targeted advertising or certain profiling. Where applicable, you may use an authorized agent, appeal a denied request and complain to a privacy regulator. We do not unlawfully discriminate because you exercise a right.

Email support@heystraz.com with the subject "Privacy Request" or "Privacy Appeal." We verify requests proportionately, respond within the applicable legal period, and explain any permitted refusal and available appeal route. Please do not send identity documents unless we request an appropriate verification method. Withdrawing consent does not invalidate prior lawful processing but can prevent provision of the affected feature.

Straz's rehearsal feedback is not intended to make decisions about employment, education, credit, insurance or similar significant matters.

10. International users

Straz is based in the United States. Providers may process information in the United States and other countries. Those countries may have different privacy protections. Where applicable law requires safeguards for an international transfer, the transfer must be supported by an authorized mechanism, such as applicable contractual safeguards or an adequacy determination. Contact support@heystraz.com for information about safeguards relevant to your information.

Where EEA or UK data-protection law applies, our processing bases are: performance of our agreement for account, core rehearsal and billing functions; legitimate interests in proportionate security, support and reliability; legal obligations for required records and responses; and consent where required for optional processing or communications. We assess the particular activity rather than treating acceptance of this policy as a universal legal basis. You may object to processing based on legitimate interests. You may complain to your local supervisory authority, including the UK Information Commissioner's Office where applicable.

11. Age restrictions

The current service is for adults: at least 18 and the age of legal majority where they live. We do not offer child or teen accounts through this release. Parental permission or school sponsorship does not create an exception. If you believe an ineligible child has supplied information, contact support@heystraz.com so we can investigate and take appropriate action, including deletion when required.

12. Changes and contact

We identify each version by the date above and provide appropriate notice of material changes. We obtain additional consent where required before a new use begins. Changes do not retroactively authorize incompatible uses of information already collected.

Straz Inc.
1178 Broadway, 3rd Floor #4561
New York, NY 10001, United States
Email: support@heystraz.com
Website: www.heystraz.com