Privacy Policy

• Account information. You sign in with Google. From Google we receive your name, email address, and profile image. We do not receive or store your Google password.
• Project content (User Content). The production data you and your collaborators create or upload — scripts, storyboards, shot lists, budgets, schedules, equipment lists, locations, contacts, documents, and related files, including releases and deal memos prepared or signed through the Service.
• Cast & crew and other third-party data. When you add people to a project, you may enter their names, email addresses, phone numbers, roles, rates or compensation, and similar details. You provide this information; we process it on your behalf as described in Section 6.
• Payment information. Subscription payments are processed by Stripe. We do not collect or store full payment card numbers. We receive limited billing details from Stripe, such as your subscription status and plan, the card brand and last four digits, and billing country, to manage your account.
• Usage & device data. We collect technical information such as device and browser type, IP address, pages viewed, and actions taken, generated when you use the Service, to operate, secure, and improve it.
• Cookies.We use only essential, first-party cookies needed to sign you in, keep you signed in, and protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies, and we do not use third-party analytics or advertising trackers. See Section 10.

• to provide, maintain, and operate the Service;
• to authenticate you, manage your account, and process subscriptions and payments;
• to enable collaboration with the people you invite to your projects;
• to send transactional and service messages — for example, invites, trial-ending reminders, billing and payment-failure notices, security alerts, and changes to our terms;
• to secure the Service, prevent and investigate abuse and fraud, and debug and improve functionality;
• to comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under California and other state privacy laws. We do not use your private project content for advertising, and we do not use it to train artificial-intelligence or machine-learning models. We do not engage in profiling that produces legal or similarly significant effects.

We use Google OAuth for sign-in and access basic profile information (your name, email address, and profile image) to create and secure your account. If you choose to enable calendar features, we will, with your authorization, access your Google Calendar data solely to display and synchronize your production schedule within the Service; we will not use that data for advertising, will not sell it, and will not use it to train models. Calendar features are optional and are not enabled unless you turn them on.

ProductionAssistant’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can review and revoke our access to your Google account at any time at myaccount.google.com/permissions.

We share information with the service providers below, who process it on our behalf only to provide the Service and under contractual confidentiality and data-protection obligations. We remain responsible for their handling of the data.

We may also disclose information if required by law or valid legal process, to protect the rights, safety, and security of our users, the public, or us, or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy. We update this list when our providers change; you may contact us at support@productionassistant.app to ask about current subprocessors.

Where the GDPR or UK GDPR applies, we process personal data on these legal bases: to perform our contract with you (to provide the Service and process payments); our legitimate interests (to secure, maintain, and improve the Service and prevent abuse), balanced against your rights; your consent (for optional features such as calendar access, which you may withdraw); and to comply with legal obligations. Where we act as a processor for our customers’ uploaded data, our customer determines the legal basis.

The Service lets you store personal information about people who are not our users — such as your cast and crew. For that information, you are the controller (or “business”) and we act as your processor (or “service provider”), handling it only on your instructions to provide the Service, as set out in our Terms of Service. You are responsible for having a lawful basis to provide that information to us, for giving any required notices to those individuals, and for handling their requests. If someone whose data appears in the Service contacts us directly, we will refer them to the relevant customer or assist that customer in responding, as the law requires. Institutional customers and others who need a separate Data Processing Addendum may request one at support@productionassistant.app.

We keep account and project information for as long as your account is active and as needed to provide the Service. We keep billing records for the period required for tax, accounting, and legal purposes. When you delete content or close your account, we delete or de-identify the associated data within a reasonable period, except where we must retain it to comply with law, resolve disputes, or enforce our agreements. Residual copies may remain in routine, encrypted backups for a limited time — generally about 35 days — before they are overwritten. We retain usage and security logs for the period needed to operate and protect the Service.

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you as a controller: to know and access the information and how it is used; to correct it; to delete it; to obtain a portable copy; to opt out of the sale or sharing of personal information and of targeted advertising and certain profiling; and to be free from discrimination for exercising these rights. We do not sell or share personal information and do not use it for targeted advertising or significant automated decision-making, so those opt-out rights have nothing to act on for us, but you may still exercise your other rights.

To make a request, email support@productionassistant.app or use the controls in the Service to access, export, or delete your data and your account. We will respond within the time the applicable law requires and may need to verify your identity first. You may use an authorized agent where the law allows. If we deny a request, you may appeal by replying to our decision; if you remain unsatisfied, you may contact your state attorney general. If you are in the EEA or UK, you may also lodge a complaint with your local data-protection authority.

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, authentication through Google, isolation of customer data, and reputable infrastructure providers. Files you upload are kept in private storage and are served only to signed-in members of the project they belong to; they are not exposed through public links. We maintain a written security program informed by widely recognized frameworks and scaled to the size and nature of our operations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If a breach affecting your personal information occurs, we will notify you and the appropriate authorities as required by applicable law.

We use only essential, first-party cookies that are necessary to sign you in, maintain your session, and secure the Service. Because these cookies are strictly necessary, no cookie-consent banner is required to set them. We do not use advertising cookies or third-party analytics, and we do not track you across other websites or services. Because there is no consistent industry standard for “Do Not Track” signals, we do not respond to them; however, since we do not engage in cross-site tracking, this has no practical effect on your privacy. If we ever introduce analytics or other non-essential technologies, we will update this Policy, provide any required notice or consent mechanism, and honor opt-out preference signals such as Global Privacy Control where applicable.

We operate the Service from the United States and store data with providers in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States and other countries where our providers operate, which may have different data-protection laws than your own. Where required for transfers of personal data from the EEA, UK, or Switzerland, we and our providers rely on appropriate safeguards, such as the EU-US Data Privacy Framework and its UK and Swiss extensions or the European Commission’s Standard Contractual Clauses. You may request more information about these safeguards at support@productionassistant.app.

The Service is intended for adults and is not directed to children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@productionassistant.app and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Questions about this Privacy Policy or your data? Contact us at support@productionassistant.app. For legal notices, including copyright matters, see our Terms of Service.