Privacy Policy

Filmo is the data controller for personal data collected through our website and in the operation of our business (for example, when you request a demo or subscribe to our newsletter). For any privacy matter you can reach us at privacy@filmo.io.

When our customers use the Service to manage their own operations — inventories, projects, quotes, contacts of their clients and crew — those customers are the data controllers and Filmo acts as a data processor on their behalf, under the data processing terms agreed with each customer.

We collect data you give us directly and data generated by your use of the website and the Service:

• Contact and lead data — name, work email, company, and any message you send us when you request a demo, talk to sales, or subscribe to the newsletter.
• Account data — name, email, role, and credentials when a workspace is created for you in the Service.
• Customer content — the operational data your organization stores in the Service (projects, inventory, quotes, contacts), processed on your organization's instructions.
• Usage and device data — pages visited, actions taken, approximate location derived from IP, browser and device type, collected through privacy-friendly analytics.
• Preferences — settings such as language and currency, stored locally in your browser.

We use personal data on the following legal bases under the GDPR:

• To provide and operate the Service — performance of a contract.
• To respond to demo requests and sales inquiries — steps taken at your request prior to a contract.
• To send our newsletter and product updates — your consent, which you can withdraw at any time via the unsubscribe link.
• To secure, maintain, and improve the Service, and to understand aggregate usage of our website — our legitimate interest in running a safe and useful product.
• To comply with legal obligations, such as accounting and tax requirements.

We do not sell personal data, and we do not use it for third-party advertising.

Parts of the Service use artificial intelligence — for example to draft quotes, answer questions about your operation, or automate workflows. Content submitted to AI features may be processed by carefully selected AI model providers acting as subprocessors, only to provide the feature. We do not allow customer content to be used to train third-party foundation models without your organization's permission. Data obtained from Google APIs is subject to stricter rules, described in the next section: it is never used to train AI models, under any circumstances.

If your organization enables the email module, you can connect your Google account to Filmo. The connection is established through Nylas, our email and calendar infrastructure provider, which processes and stores the synced data in the European Union. When you connect a Google account, Filmo accesses: your basic profile (name and email address) to identify the connection; your Gmail messages, threads, labels, and attachments — reading them, sending messages from your mailbox at your request, and updating message state (read/unread, labels, archive, trash); and your Google Calendar calendars and events, read and write, to provide two-way calendar sync.

We use Google user data solely to provide and improve the user-facing features you operate inside Filmo: the unified inbox, replies and follow-ups, inbox organization, and calendar synchronization. AI-assisted inbox features — such as classifying an incoming email or drafting a reply you request — process the content of the specific messages involved, only to provide that feature. Google user data is never used for advertising and is never sold.

Google user data is shared only with the subprocessors strictly necessary to operate these features: Nylas (connectivity and synced storage), our hosting and database providers, and — for the AI features described above — our AI model providers, whose API terms do not permit them to train models on this data. It is never transferred to data brokers or advertisers. Google user data is never used to develop, improve, or train generalized AI or machine-learning models, regardless of any other setting or permission in the Service.

Filmo's use of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Synced Google data is retained only while your Google connection is active. If you disconnect your account, or your workspace is deleted, the synced copies are deleted from our systems. You can also revoke Filmo's access at any time from your Google account security settings (myaccount.google.com/permissions).

We share personal data only with service providers that help us run Filmo, under contracts that restrict how they may use it:

• Hosting, infrastructure, and database providers (e.g. Vercel, Neon, Google Firebase) that serve the website and the Service and store its data.
• Email and calendar connectivity (Nylas) for the accounts you choose to connect, as described in the Google user data section.
• Email delivery providers (e.g. Resend) that deliver transactional and newsletter emails.
• Payment processors (Stripe) that handle subscription billing, including billing contact and tax details.
• AI model providers, as described in the AI features and Google user data sections.
• Search providers (Algolia) that index your workspace's data to power instant search inside the Service.
• Support tools (Intercom) when you use the in-app chat or the help center.
• Error monitoring and performance tools (e.g. Sentry, EU region) that help us keep the Service reliable.
• Integrations your organization chooses to connect (e.g. Xero, Slack), which receive only the data needed for that integration.
• Analytics providers that measure aggregate website usage without cross-site tracking.
• Professional advisers and public authorities, where required by law.

Some of our providers process data outside the European Economic Area. When that happens, we rely on safeguards recognized by the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses, to protect your data.

We keep personal data only as long as needed for the purposes above: lead and newsletter data until you ask us to delete it or unsubscribe; account data for the life of the customer relationship plus any period required by law; customer content for as long as your organization's subscription instructs us to, after which it is deleted or anonymized.

We apply technical and organizational measures appropriate to the risk — encryption in transit, access controls, isolated environments, and the principle of least privilege — and we review them regularly. No system is perfectly secure, but we work to protect your data against unauthorized access, loss, or alteration.

Under the GDPR you can ask us, at any time, to access, rectify, or erase your personal data; to restrict or object to its processing; and to receive it in a portable format. Where processing is based on consent, you can withdraw it without affecting prior processing. Write to privacy@filmo.io and we will respond within the legal deadlines. You also have the right to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

If your data lives inside a customer's workspace, we may redirect your request to that customer, who decides how it is handled as the data controller.

Our website does not use advertising or cross-site tracking cookies. We store functional preferences (such as language and currency) in your browser, and we measure aggregate traffic with privacy-friendly analytics that do not rely on tracking cookies or build individual profiles.

The Service is built for businesses and is not directed at children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the Service or the law evolves. We will post the new version on this page with an updated date, and for material changes we will notify you by email or inside the Service.

Questions about privacy at Filmo? Write to privacy@filmo.io and we will get back to you.