Last updated May 30, 2026
Privacy Policy
This policy explains what Filmclusive collects, how it uses and shares that information, where it is stored, and what privacy controls and rights are currently available.
Filmclusive is a workflow platform. Some information is private by default, some information is shared only with people you invite or approve, and some profile content may be public if you choose to publish it.
Information we collect
We collect the information you provide directly, including account details, profile details, team and project information, contact details, photos, videos, audio, documents, messages, submissions, RSVP answers, survey responses, event registrations, listings, posts, billing selections, and any other content you upload or create inside Filmclusive.
Profile and directory data may include your name, email address, phone number, company, location, social links, credits, expertise tags, role selections, availability information, representative information, portfolio media, headshots, resumes, work samples, and other professional information you decide to add.
If you use contact-import features, we may collect names, email addresses, phone numbers, profile photos, source labels, and social identifiers from CSV files, Google contacts, call sheets, Instagram imports, manual entry, or similar tools that you choose to use.
Depending on the feature, we may also collect payment and transaction records, invoice and subscription identifiers, donation or ticketing details, support requests, consent decisions, suppression or unsubscribe signals, and records needed to investigate fraud, abuse, legal complaints, or account security incidents.
We also collect technical and operational data such as authentication events, cookies, local storage values, consent preferences, security logs, device and browser information, IP-derived or general location signals, session and activity data, and page or performance analytics when those features are enabled by your settings and applicable consent controls.
How we use information
We use personal information to run the service, authenticate users, host and display content, manage projects and teams, process uploads, deliver messages and notifications, complete event and directory workflows, process payments, prevent fraud and abuse, comply with legal obligations, and support users.
We also use information to maintain logs, troubleshoot incidents, measure product performance, and improve workflows. Some improvement and analytics uses depend on consent or opt-out controls described on our cookie and Do Not Sell pages.
If you choose to use AI or audio features, we use submitted content to generate the requested result. That may include processing through external AI or speech providers that act on our behalf.
We may also use contact and communication data to send transactional emails, outreach you initiate, account notices, consent requests, unsubscribe confirmations, support replies, ticketing messages, and other workflow communications tied to the service you are using.
Where information is stored and processed
Filmclusive currently uses Firebase and related Google Cloud services for authentication, database storage, backend processing, and some application infrastructure. User uploads and file workflows may also use Bunny.net object storage. Billing data is processed through Stripe. Optional product analytics and performance tooling may use Vercel services. Error monitoring may use Sentry. Rate limiting and abuse prevention may use Upstash. Scheduling workflows may use Zoom. Email is sent through the currently configured SMTP provider. Some AI and speech features use Google Gemini, OpenAI, or Google Cloud text-to-speech.
If you connect Google services, we may also process Google OAuth tokens and limited Gmail or People API data needed for the feature you turned on. People API contact reads are limited in the current app to names, email addresses, phone numbers, and profile photos. Contact writes are limited to names, email addresses, phone numbers, and organizations. Additional details for Google-restricted data appear in our Google Limited Use disclosure.
Service providers may process data in the United States and other jurisdictions where they operate. By using Filmclusive, you understand that data may be processed on infrastructure controlled by those providers on our behalf.
The current service-provider categories are listed on our Service Providers page.
How uploads, media, and temporary files work
Uploaded files can include headshots, portfolio media, project documents, legal or onboarding documents, event photos, receipts, and other workflow assets. We store and process those files to provide the feature that required the upload.
Some guest or temporary document flows are stored for short-lived processing and may be deleted automatically. Authenticated account data may remain until you delete it, the related record is removed, or retention rules require cleanup.
If you use AI processing on uploaded or pasted material, do not submit anything you cannot accept being handled by third-party model providers. We try to minimize exposure, but we do not represent that every AI provider treats all submitted material as zero-retention in every scenario.
Payments, subscriptions, and transaction records
If you use paid features, subscriptions, ticketing, donations, bookings, invoices, or related commerce tools, we and our payment providers may process customer identifiers, billing contacts, plan or product selections, invoices, payment status, transaction metadata, refunds, disputes, taxes, and accounting records.
Filmclusive does not store full payment card numbers in its application databases. Payment card handling is performed by payment processors such as Stripe according to the checkout or billing flow you choose to use.
Some service, booking, donation, or event workflows may include separate cancellation windows, refund policies, or payout records set by the applicable creator, provider, organizer, or payment flow.
Contact imports and third-party personal data
If you upload or import contacts, you are responsible for making sure you have the rights and permissions needed to provide that information to Filmclusive and to use it for your workflow. This includes names, emails, phone numbers, social handles, profile photos, and any notes or classifications you attach to those contacts.
Imported contact data may be stored as private records tied to your account so you can manage rosters, outreach, trusted collaborators, directory workflows, and related features. We do not treat imported contact data as yours to repurpose outside the service.
If a contact later creates or claims an account, some information may be linked to the new user record according to the relevant workflow, permissions, and privacy settings.
Communications, consent, and outreach
Filmclusive includes consent-aware outreach and communication tools. We may store consent status, contact-permission decisions, email suppression records, unsubscribe choices, delivery metadata, and related audit records so communication preferences can be honored and abuse can be investigated.
If you upload imported mailing lists or contact rosters, we may treat those contacts as restricted until the relevant workflow confirms a valid consent basis or another allowed relationship for the communication you choose to send.
How we share information
We share information with service providers that help us run Filmclusive, including providers for hosting, authentication, storage, payments, analytics, email, speech, AI processing, and connected Google features. We also share information when needed to comply with law, protect rights or safety, investigate abuse, or complete a transaction you request.
We may also share information with other users, team owners or admins, event organizers, project collaborators, booking counterparties, survey owners, applicants, invitees, or public viewers when that is the expected result of a feature you choose to use, such as public profiles, shared links, directory visibility, booking flows, group participation, survey responses, or event submissions.
We do not sell profile data as a separate data brokerage product. CPRA and related opt-out details are described on our Do Not Sell or Share page.
Operational processors and consent-based processors
Some processors are operational and may run to provide the service, keep accounts secure, complete requested transactions, or meet legal obligations. These include Firebase and Google Cloud, Stripe, Bunny.net, the configured SMTP provider, Sentry, Upstash, Slack security alerts, Zoom scheduling, and Printful merch fulfillment when those features are used.
Other processors are consent-based or feature-choice based. Optional analytics uses Vercel Analytics and Speed Insights only after analytics consent and Do Not Sell or Global Privacy Control checks. Google contact sync requires Google connection consent. AI note/script processing requires AI processing consent where the route enforces that control.
Cookies, analytics, and activity tracking
Filmclusive uses essential cookies to keep the service working and to preserve privacy choices. Optional analytics and some internal activity tracking are gated by consent and Do Not Sell controls in the current app.
When enabled, analytics may include page views, click events, performance metrics, session data, device information, and general location signals. When disabled or opted out, those optional analytics flows should not run.
For current cookie and tracking details, see our Cookie Policy.
User rights and choices
Users can manage many profile visibility settings in the app, including whether certain contact information is shown publicly. We also maintain consent controls for areas such as analytics, email tracking, marketing, AI processing, and Google-connected features.
Authenticated users can request a self-service data export through the privacy export flow currently wired to Filmclusive's privacy route. Users can also schedule account deletion, cancel a scheduled deletion during the waiting period, or request immediate deletion in supported cases.
The current account deletion flow supports a scheduled deletion window of 24 hours or immediate deletion, depending on the option you choose in settings. Some legal, security, fraud-prevention, audit, or rights-fulfillment records may be retained even after deletion because they are excluded from self-service deletion.
We may ask you to verify your identity before completing certain privacy requests, especially when the request would expose, delete, or transfer account data. Team, organizational, or shared-workspace data may also require additional review before release or deletion.
Children, sensitive data, and biometrics
Filmclusive is not intended for children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can review and remove it where appropriate.
Filmclusive may process photos, videos, audio, and identity-related professional information that can depict or describe a person. We do not intentionally require users to provide biometric identifiers for identity-recognition purposes, and we do not describe the service as a biometric-identification product.
We do not intentionally ask users to provide sensitive categories such as government identifiers, passport details, Social Security numbers, tax forms, health information, union membership, sexual-orientation data, or similar highly sensitive records unless a specific workflow clearly requires them. If you upload that kind of material anyway, we may store and process it only to operate the selected workflow, secure the service, investigate abuse, or comply with law, and we may remove or restrict that material at our discretion.
California and similar privacy rights
Depending on where you live, you may have rights to know, access, correct, delete, or opt out of certain processing or sharing. California residents can review our Do Not Sell or Share page for the current opt-out implementation.
We do not discriminate against users for exercising privacy rights, except to the extent a requested change prevents us from providing a feature that depends on the affected data or consent.
Retention
Retention depends on the type of data. User-controlled content is generally kept until you delete it, delete the related object, or delete your account. Temporary caches and imports may have shorter retention periods. Legal, security, audit, and rights-fulfillment records may be retained longer where necessary.
Our current privacy-rights map distinguishes user-controlled, operational, analytics, marketing, temporary, vendor, and legal or security retention classes, and some legal or security collections are intentionally excluded from self-service export or deletion.
When account deletion is completed, Filmclusive may also attempt related cleanup steps such as revoking Google OAuth tokens, deleting certain Stripe customer records, and removing user-scoped Bunny storage where supported by the current deletion workflow. Those vendor-side actions are best-effort and may be limited by provider rules, transaction history, or legal retention requirements.
Security
We use technical and organizational controls intended to protect information, but no system is perfectly secure. You should avoid uploading secrets, government identifiers, tax documents, or other highly sensitive material unless the relevant workflow specifically requires it and you accept the risk of online storage and processing.
Contact us
Questions, requests, or privacy complaints can be sent to privacy@filmclusive.com. General support requests may also be sent to support@filmclusive.com or by phone at (929) 255-4623.