Privacy Policy

FilmConnector is operated by FilmConnector ("FilmConnector", "we", "us", "our").

Registered office: Handelskaai 17 bus 11, 1000 Brussel, Belgium
BCE/KBO: 0501.698.846
VAT: BE 0501.698.846
Contact for privacy matters: privacy@filmconnector.app

We act as the data controller for the personal data we process about our subscribers, the people they invite as collaborators, our website visitors, and the people who contact us. In some cases (Section 7), we act as a data processor on behalf of our subscribers.

This policy applies to:

• The FilmConnector websites (filmconnector.com, filmconnector.app and their subdomains).
• The FilmConnector web application and every FilmConnector app.
• Communications between you and us.

It does not cover third-party services we link to but do not operate, such as the websites of the festivals you submit your film to. Those services have their own privacy policies.

3.1 Account and identity data

• Your email address and name.
• Your password (stored only in hashed form; we never see your plaintext password).
• The role you describe yourself as (filmmaker, sales agent, producer, festival programmer, etc.).
• The country and language you operate in.

3.2 Subscription and billing data

Most billing data is processed by our payment providers on our behalf. We do not store full card numbers. We retain:

• Subscription tier and start and end dates.
• Billing cycle (monthly or annual).
• Add-ons purchased.
• Invoice records, including the billing name, address and, for businesses, VAT identification number.
• A reference that links you to your billing record at our payment provider.

For business subscribers, we validate VAT identification numbers against the European Commission's VAT validation service. We store the yes or no result and the timestamp.

3.3 Profile and company data

If you operate as a company or sales agency, we collect your company name, logo (optional), country of operation and, for invoicing, registered address and VAT number.

3.4 Project content and creative data

When you create a project (a film), you can add:

• The film's title, languages, year, runtime, format, genres and other catalogue metadata.
• Synopsis and logline text.
• Press kit materials (text, images, posters).
• Screener links and password-protected viewing assets.
• Trailers, stills and other promotional assets you choose to upload.
• Notes and strategy documents you write inside the platform.

Apart from screening rooms, we do not host the film itself. Where a screening room is enabled, we process the film and the viewing data needed to run it.

3.5 Festival strategy and submission data

• The list of festivals you have added to a project's strategy radar.
• Submission status (planned, submitted, accepted, declined, awarded).
• Notes and timestamps you record about each submission.
• Festival fees paid through external systems (we record the fact of payment and the amount, not the card data).

3.6 Collaborator data

When you invite a collaborator to a project, we hold the collaborator's email address, name (if provided), declared role, and the projects they have access to. See Section 7.

3.7 Communications data

• The content of emails you send to us and we send to you.
• Calendar bookings you make with us.
• Optional chat messages where applicable.

3.8 Technical data

• IP address (truncated where possible for analytics).
• Device, browser and operating system identifiers.
• Pages visited, features used and timing data, captured via our analytics tooling.
• Cookies and similar technologies (Section 13).

3.9 AI processing inputs and outputs

Where we offer an AI feature and you use it, our AI systems process the content needed for that feature. We do not use your content to train third-party foundation models without explicit, separate consent. See Section 14.

3.10 Customer support data

Support tickets, the email thread that produced them, and any internal notes we add while resolving them.

• Directly from you: when you sign up, complete your profile, create projects, invite collaborators, build a strategy, contact support or book a call.
• Automatically through your use of the service: analytics, cookies, technical logs and AI feature inputs.
• From third parties: payment providers for billing confirmations; the European Commission's VAT validation service; festival platforms for submission decision data when our integrations support it; and public film databases for catalogue information.

Where we rely on legitimate interests, we have balanced our interest against your rights and concluded that the processing does not override them. You can ask us about that balancing test at any time at privacy@filmconnector.app.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We do not process special category data (health, racial or ethnic origin, religious beliefs, biometric data) in the ordinary course of providing FilmConnector. Please do not include such data in project notes, synopses or submission records unless it is essential to the film and you have a clear lawful basis to share it.

To run FilmConnector we rely on service providers. They process personal data on our behalf, under data processing terms and only for the purposes below.

We also share data with public bodies where needed, such as tax authorities and the European Commission's VAT validation service.

We may share data with festival platforms when you instruct us to forward a submission. The data shared is the data the festival requires. Each festival's privacy policy then governs what they do with it.

We may also share data with our professional advisors under confidentiality, and with public authorities when required by law.

We do not sell your personal data. We do not allow our service providers to use your data for their own marketing.

If you ask, we tell you which recipients received your personal data (Section 11). Business customers receive information about our processors, and about changes to them, under the Data Processing Addendum.

When you invite a collaborator, you make a decision about another person's personal data. In legal terms, you are the data controller for the relationship with that collaborator, and FilmConnector is your data processor for that collaborator's personal data, acting on your instructions.

• Only invite collaborators who have a legitimate reason to see the project's information and a reasonable expectation that they would be invited.
• Inform the collaborator that the project is hosted on FilmConnector and how their data will be used.
• If a collaborator asks us to delete their data, we route the request to you and act on your instruction. We act unilaterally only if the collaborator has a clear right that supersedes your instruction.
• When your subscription ends or you remove a collaborator, the collaborator loses access to the project. We retain the audit trail (who was invited, when, by whom) for the period set out in Section 9.

A Data Processing Addendum that formalises this controller and processor relationship is available on request.

Most of our processing happens within the European Economic Area. Some of our service providers may process data outside the EEA, primarily in the United States.

For any transfer outside the EEA we rely on one or more of the following safeguards:

• Standard Contractual Clauses approved by the European Commission.
• Adequacy decisions where they apply, such as the EU-US Data Privacy Framework where the provider is certified.
• Supplementary technical measures such as encryption in transit and at rest.

For a copy of the safeguards that apply to a specific transfer, write to privacy@filmconnector.app.

Where data must be kept for legal reasons beyond the period you would prefer, we restrict access and stop using it actively as soon as we can.

• Encryption in transit for all communication with the FilmConnector application.
• Encryption at rest for the application database.
• Hashed and salted passwords: we never store, log or transmit your plaintext password.
• Access controls: only authorised members of the FilmConnector team have administrative access, and access is logged.
• Provider selection: we only work with vendors that meet our security and GDPR-compliance criteria.
• Data minimisation: we collect only what we need.
• Incident response: a written process for detecting, containing and notifying data breaches in line with GDPR Art. 33-34.

No security system is perfect. If a breach affects your data and is likely to create a high risk to your rights, we will tell you what happened, what we are doing about it, and what you can do.

How to exercise your rights: write to privacy@filmconnector.app with a clear description of your request. We respond within one month, extendable by two months if the request is complex, with notice to you within the first month.

Right to complain to the Belgian Data Protection Authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35, 1000 Bruxelles
contact@apd-gba.be, www.dataprotectionauthority.be

You can also complain to the data protection authority of your country of residence within the EU.

FilmConnector is a professional tool. It is not directed at people under 18 and we do not knowingly create accounts for them. If we learn that we have collected personal data from a person under 18, we delete it as soon as practicable. If you believe a person under 18 has registered, write to privacy@filmconnector.app.

We use cookies and similar technologies to make the service work, to remember your preferences and, with your consent, to understand how the platform is used. We do not use advertising cookies and do not run third-party advertising on the platform. Our Cookie Policy lists the specific cookies, their purpose and their expiry. You can revisit your choices at any time via the "Cookie preferences" link in the footer.

Where FilmConnector offers AI features, they may use third-party providers.

• AI features process the content needed to provide that feature.
• We do not use your project content to train third-party foundation models without explicit, separate consent.
• We do not make solely automated decisions about you that produce legal effects or similarly significantly affect you. You remain the decision-maker on every submission.
• AI inputs and outputs follow the retention schedule in Section 9.

When we update this policy, the new version is published on this page with a revised date. Material changes, such as new categories of data, new lawful bases or substantive changes to retention, are announced by email to active subscribers at least 30 days before they take effect. You can always cancel and exercise your erasure rights if you disagree. Older versions are available on request.

Email: privacy@filmconnector.app
Post: FilmConnector, Handelskaai 17 bus 11, 1000 Brussel, Belgium

We aim to reply within five working days for general questions and within one month, extendable by two months for complex cases with prior notice, for formal requests about your data.

17.1 YouTube

FilmConnector uses YouTube API Services to publish and manage videos on its own YouTube channel and to read statistics and public comments for that channel. By watching or interacting with FilmConnector content on YouTube you are also bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

Through YouTube API Services we access only our own channel's data: our videos, their metadata and statistics, and public comments and replies on our videos. We do not access, store or share YouTube data of any other user's account, we do not sell it, and we do not use it for advertising. We store this data in our database in the EU for running and moderating our channel, refresh or delete it within 30 days, and delete it within 30 days after our access is revoked. We do not place cookies or similar technologies for YouTube API Services; YouTube itself may do so when you watch an embedded video.

You can revoke any app's access to your Google account at Google's security settings. For questions or deletion requests contact privacy@filmconnector.app.

17.2 Meta (Instagram, Facebook, Threads)

When we publish to Instagram, Facebook or Threads we use Meta's official APIs. Meta processes your data under its own Data Policy. We store only public interactions with our own accounts (see Section 9).

17.3 Other social networks

We also publish to other social networks, using only our own accounts. Each network handles your data under its own privacy policy. We store only public interactions with our own accounts, as set out in Section 9.

17.4 AI processing disclosure

We use AI to translate and check our own posts. No personal data of subscribers or commenters is sent to AI models for this. Figures shown as estimates or model results are labelled as such.

17.5 Data deletion

To have your data deleted, email privacy@filmconnector.app. We answer within 30 days.