Privacy Policy

Filmo is the data controller for personal data collected through our website and in the operation of our business (for example, when you request a demo or subscribe to our newsletter). For any privacy matter you can reach us at privacy@filmo.io.

When our customers use the Service to manage their own operations — inventories, projects, quotes, contacts of their clients and crew — those customers are the data controllers and Filmo acts as a data processor on their behalf, under the data processing terms agreed with each customer.

We collect data you give us directly and data generated by your use of the website and the Service:

• Contact and lead data — name, work email, company, and any message you send us when you request a demo, talk to sales, or subscribe to the newsletter.
• Account data — name, email, role, and credentials when a workspace is created for you in the Service.
• Customer content — the operational data your organization stores in the Service (projects, inventory, quotes, contacts), processed on your organization's instructions.
• Usage and device data — pages visited, actions taken, approximate location derived from IP, browser and device type, collected through privacy-friendly analytics. Inside the Service we also measure which features you use, linked to your account.
• Service usage recordings — only if you agree, how you move through the app (screens, clicks, and scrolling), with your personal data hidden. What you type, passwords, and payment details always stay hidden.
• Preferences — settings such as language, theme and your cookie choice, stored in your browser.

We use personal data on the following legal bases under the GDPR:

• To provide and operate the Service — performance of a contract.
• To respond to demo requests and sales inquiries — steps taken at your request prior to a contract.
• To send our newsletter and product updates — your consent, which you can withdraw at any time via the unsubscribe link.
• To improve Filmo and give you personalized recommendations based on how you use the app — your consent, which you can withdraw at any time.
• To secure, maintain, and improve the Service, and to understand how our website and the Service are used — our legitimate interest in running a safe and useful product.
• To comply with legal obligations, such as accounting and tax requirements.

We do not sell personal data, and we do not use it for third-party advertising.

Parts of the Service use artificial intelligence — for example to draft quotes, answer questions about your operation, or automate workflows. Content submitted to AI features may be processed by carefully selected AI model providers acting as subprocessors, only to provide the feature. We do not allow customer content to be used to train third-party foundation models without your organization's permission. Data obtained from Google APIs is subject to stricter rules, described in the next section: it is never used to train AI models, under any circumstances.

If your organization enables the email module, you can connect your Google account to Filmo. The connection is established through Nylas, our email and calendar infrastructure provider, which processes and stores the synced data in the European Union. When you connect a Google account, Filmo accesses: your basic profile (name and email address) to identify the connection; your Gmail messages, threads, labels, and attachments — reading them, sending messages from your mailbox at your request, and updating message state (read/unread, labels, archive, trash); and your Google Calendar calendars and events, read and write, to provide two-way calendar sync.

We use Google user data solely to provide and improve the user-facing features you operate inside Filmo: the unified inbox, replies and follow-ups, inbox organization, and calendar synchronization. AI-assisted inbox features — such as classifying an incoming email or drafting a reply you request — process the content of the specific messages involved, only to provide that feature. Google user data is never used for advertising and is never sold.

Google user data is shared only with the subprocessors strictly necessary to operate these features: Nylas (connectivity and synced storage), our hosting and database providers, and — for the AI features described above — our AI model providers, whose API terms do not permit them to train models on this data. It is never transferred to data brokers or advertisers. Google user data is never used to develop, improve, or train generalized AI or machine-learning models, regardless of any other setting or permission in the Service.

Filmo's use of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Synced Google data is retained only while your Google connection is active. If you disconnect your account, or your workspace is deleted, the synced copies are deleted from our systems. You can also revoke Filmo's access at any time from your Google account security settings (myaccount.google.com/permissions).

We share personal data only with service providers that help us run Filmo, under contracts that restrict how they may use it:

We manage demo requests, resource downloads, communication preferences and follow-up in Filmo's internal Backoffice.

• Hosting, infrastructure, and database providers (e.g. Vercel, Neon, Google Firebase) that serve the website and the Service and store its data.
• Email and calendar connectivity (Nylas) for the accounts you choose to connect, as described in the Google user data section.
• Email delivery providers (e.g. Resend) that deliver transactional and newsletter emails.
• Advertising and web analytics (Google Ads and Google Analytics): cookieless measurement signals under advanced Consent Mode; advertising and analytics cookies only if you accept them.
• Payment processors (Stripe) that handle subscription billing, including billing contact and tax details.
• AI model providers, as described in the AI features and Google user data sections.
• Search providers (Algolia) that index your workspace's data to power instant search inside the Service.
• Support tools (Intercom) when you use the in-app chat or the help center.
• Error monitoring and performance tools (e.g. Sentry, EU region) that help us keep the Service reliable.
• Integrations your organization chooses to connect (e.g. Xero, Slack), which receive only the data needed for that integration.
• Analytics providers: privacy-friendly analytics that measure aggregate website usage without cross-site tracking, and PostHog (EU region) for product analytics inside the Service and, if you agree, usage recordings.
• Professional advisers and public authorities, where required by law.

Some of our providers process data outside the European Economic Area. When that happens, we rely on safeguards recognized by the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses, to protect your data.

We keep personal data only as long as needed for the purposes above: lead and newsletter data until you ask us to delete it or unsubscribe; account data for the life of the customer relationship plus any period required by law; Service usage recordings for 30 days; customer content for as long as your organization's subscription instructs us to, after which it is deleted or anonymized.

We apply technical and organizational measures appropriate to the risk — encryption in transit, access controls, isolated environments, and the principle of least privilege — and we review them regularly. No system is perfectly secure, but we work to protect your data against unauthorized access, loss, or alteration.

Under the GDPR you can ask us, at any time, to access, rectify, or erase your personal data; to restrict or object to its processing; and to receive it in a portable format. Where processing is based on consent, you can withdraw it without affecting prior processing. Write to privacy@filmo.io and we will respond within the legal deadlines. You also have the right to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (aepd.es).

If your data lives inside a customer's workspace, we may redirect your request to that customer, who decides how it is handled as the data controller.

Our website uses Google Ads and Google Analytics cookies only if you accept them in the cookie banner. They measure which campaigns bring visitors and requests, and can be used to show you Filmo ads on other sites; Google may set its own cookies for this. In production, the Google tag loads in advanced Consent Mode with all purposes denied until you accept. If you reject or do not choose, Google receives cookieless measurement signals, including your IP address, browser information and the page URL with non-campaign query parameters and the fragment removed. The filmo_consent cookie shares your choice across filmo.io and the app. You can change your choice at any time from “Cookie settings” in the footer. We also store functional preferences (such as language, theme and your cookie choice) and, for the current browser tab only, the campaign parameters and referring site of your visit, so that a request you send us can be linked to the campaign that brought you. We measure aggregate website traffic with privacy-friendly analytics that do not use cookies or build individual profiles.

Inside the Service we use PostHog (EU region) to understand which features are used. To do so it stores an identifier in your browser's local storage and links your usage to your account. Only if you agree, we also record how you move through the app to improve Filmo and give you personalized recommendations. Your personal data stays hidden in those recordings, and you can withdraw your consent at any time.

The Service is built for businesses and is not directed at children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the Service or the law evolves. We will post the new version on this page with an updated date, and for material changes we will notify you by email or inside the Service.

Questions about privacy at Filmo? Write to privacy@filmo.io and we will get back to you.