Privacy Policy

Filmo is the data controller for personal data collected through our website and in the operation of our business (for example, when you request a demo or subscribe to our newsletter). For any privacy matter you can reach us at privacy@filmo.io.

When our customers use the Service to manage their own operations — inventories, projects, quotes, contacts of their clients and crew — those customers are the data controllers and Filmo acts as a data processor on their behalf, under the data processing terms agreed with each customer.

We collect data you give us directly and data generated by your use of the website and the Service:

• Contact and lead data — name, work email, company, and any message you send us when you request a demo, talk to sales, or subscribe to the newsletter.
• Account data — name, email, role, and credentials when a workspace is created for you in the Service.
• Customer content — the operational data your organization stores in the Service (projects, inventory, quotes, contacts), processed on your organization's instructions.
• Usage and device data — pages visited, actions taken, approximate location derived from IP, browser and device type, collected through privacy-friendly analytics.
• Preferences — settings such as language and currency, stored locally in your browser.

We use personal data on the following legal bases under the GDPR:

• To provide and operate the Service — performance of a contract.
• To respond to demo requests and sales inquiries — steps taken at your request prior to a contract.
• To send our newsletter and product updates — your consent, which you can withdraw at any time via the unsubscribe link.
• To secure, maintain, and improve the Service, and to understand aggregate usage of our website — our legitimate interest in running a safe and useful product.
• To comply with legal obligations, such as accounting and tax requirements.

We do not sell personal data, and we do not use it for third-party advertising.

Parts of the Service use artificial intelligence — for example to draft quotes, answer questions about your operation, or automate workflows. Content submitted to AI features may be processed by carefully selected AI model providers acting as subprocessors, only to provide the feature. We do not allow customer content to be used to train third-party foundation models without your organization's permission.

We share personal data only with service providers that help us run Filmo, under contracts that restrict how they may use it:

• Hosting and infrastructure providers (e.g. Vercel) that serve our website and the Service.
• Email delivery providers (e.g. Resend) that deliver transactional and newsletter emails.
• Analytics providers that measure aggregate website usage without cross-site tracking.
• AI model providers, as described in the AI features section.
• Professional advisers and public authorities, where required by law.

Some of our providers process data outside the European Economic Area. When that happens, we rely on safeguards recognized by the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses, to protect your data.

We keep personal data only as long as needed for the purposes above: lead and newsletter data until you ask us to delete it or unsubscribe; account data for the life of the customer relationship plus any period required by law; customer content for as long as your organization's subscription instructs us to, after which it is deleted or anonymized.

We apply technical and organizational measures appropriate to the risk — encryption in transit, access controls, isolated environments, and the principle of least privilege — and we review them regularly. No system is perfectly secure, but we work to protect your data against unauthorized access, loss, or alteration.

Under the GDPR you can ask us, at any time, to access, rectify, or erase your personal data; to restrict or object to its processing; and to receive it in a portable format. Where processing is based on consent, you can withdraw it without affecting prior processing. Write to privacy@filmo.io and we will respond within the legal deadlines. You also have the right to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

If your data lives inside a customer's workspace, we may redirect your request to that customer, who decides how it is handled as the data controller.

Our website does not use advertising or cross-site tracking cookies. We store functional preferences (such as language and currency) in your browser, and we measure aggregate traffic with privacy-friendly analytics that do not rely on tracking cookies or build individual profiles.

The Service is built for businesses and is not directed at children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the Service or the law evolves. We will post the new version on this page with an updated date, and for material changes we will notify you by email or inside the Service.

Questions about privacy at Filmo? Write to privacy@filmo.io and we will get back to you.