Privacy Policy

1. Who we are

BSMNT is a video production project management platform operated by Below Studios Limited, a New Zealand company. When this policy refers to "we", "us" or "our", it means Below Studios Limited.

If you have questions about this policy, contact us at taylor@below.co.nz.

2. What we collect

We collect information you provide directly when using BSMNT:

• Account information — your name, email address, and password (stored securely via Supabase Auth).
• Project data — project names, shot lists, runsheets, storyboards, budgets, time logs, and other content you create inside the app.
• Team information — names, roles, and contact details for crew members you add to projects.
• Usage data — basic logs of app activity (page views, errors) to help us fix bugs and improve the product.

If you connect Google Calendar, we access your calendar events solely to display them inside BSMNT. We do not store calendar data on our servers beyond your session.

3. How we use your data

• To provide and operate the BSMNT service.
• To sync your project data across devices and team members in real time.
• To send transactional emails (e.g. invites, password resets) via Resend.
• To generate runsheet PDFs and project reports on your request.
• To diagnose errors and improve the application.

We do not use your data to train AI models, sell to third parties, or serve advertising.

4. How we store your data

Your data is stored in Supabase (PostgreSQL database hosted in AWS ap-southeast-2, Sydney). Project data is encrypted at rest and in transit using TLS.

Storyboard images and other file uploads are stored temporarily in memory and in your browser's localStorage; large assets are not retained on our servers beyond the session.

5. Third-party services

BSMNT uses the following third-party services to operate:

• Supabase — database, authentication, and real-time sync.
• Railway — backend server for PDF generation and webhook handling.
• Netlify — hosting for the web application.
• Resend — transactional email delivery.
• Stripe — payment processing (if you subscribe to a paid plan). We never see or store your full card details.
• Google — optional Google Calendar integration (OAuth only; requires your explicit consent).
• Anthropic — AI-powered storyboard image generation (prompts only; no personal data is sent).

Each of these providers has their own privacy policy and data processing agreements. We only share the minimum data required for each service to function.

6. Cookies and local storage

BSMNT uses browser localStorage to cache your project data for faster load times and offline resilience. This data stays on your device and is not shared. We use a session cookie managed by Supabase Auth to keep you logged in.

We do not use advertising cookies or third-party tracking cookies.

7. Data retention

Your account and project data is retained for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

8. Your rights

Depending on where you're located, you may have rights including:

• Access to the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and associated data.
• Export of your project data.

To exercise any of these rights, email taylor@below.co.nz. We'll respond within 10 business days.

9. Children's privacy

BSMNT is not directed at children under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top. If changes are material, we'll notify active users by email.

11. Governing law

This policy is governed by the laws of New Zealand. BSMNT complies with the New Zealand Privacy Act 2020.