Privacy policy

1. Who is responsible for your data

Personal data processed through FilmVault is controlled by FilmVault by wantek.pt (“we”, “us”, “our”). For any privacy question, or to exercise your rights, contact us at hello@filmvault.pro.

2. What data we collect

We collect only what we need to provide the Service:

• Account data — your name, email address, and optional profile photo, plus account type and settings.
• Content you upload — your films, DCPs, masters, subtitles, artwork and the associated metadata (titles, credits, director, technical specs). This may include personal data if you choose to include it (for example names in credits).
• Sharing & delivery data — the recipients you share links with, festival submissions, and basic viewing analytics on watch links (such as open counts and approximate watch duration), shown to you as the owner.
• Outreach engagement data — whether a festival outreach email was opened, its CTA was clicked, FilmVault was visited, and an account was created from that outreach.
• Payment data — handled by Stripe. We receive confirmation and limited billing details (such as country and the last digits / card brand) but not your full card number.
• Technical data — IP address, device/browser information and server logs, generated automatically when you use the Service, used for security and reliability.

3. How and why we use it

• To provide the Service: creating your account, storing and validating your files, running encodes, generating KDMs, and delivering shared links.
• Payments and records: processing purchases and keeping invoicing/tax records we are legally required to keep.
• Security, reliability and improvement: protecting the Service against abuse, keeping it working, and understanding aggregate usage.
• Communications: service emails such as sign-in links, receipts, and important notices.
• Festival outreach measurement: measuring opens, clicks, visits and account creation so we can assess and improve our outreach to festivals. Open counts are approximate.
• With your consent: where we ever ask for it (for example any optional marketing) — you can withdraw it at any time.

We do not use your content to train third-party AI models, and we do not sell personal data.

4. Who we share it with

We share personal data only with service providers who help us run FilmVault, under contracts that require them to protect it:

• Cloud storage provider — hosts your uploaded files in the United States (see below).
• Stripe — payment processing and fraud prevention.
• Email/infrastructure providers — transactional email and hosting used to operate and secure the Service.
• Google (sign-in), YouTube, Vimeo and The Movie Database — parts of the interface are loaded from these services: the Google sign-in button, trailer players, poster artwork and Google profile photos. They see the request your browser makes, including your IP address, and apply their own policies. See our Cookie & storage notice.
• Google Analytics — aggregate measurement of how the site is used: sanitized page addresses, plus a record of account creation, sign-in and completed purchases. Login keys, screener tokens and identifiers are stripped out before the request leaves your browser, and we never send your name, your email, or anything you upload.

We may also disclose data where legally required, or to establish, exercise or defend legal claims. If our business is transferred, data may pass to a successor under the same protections.

5. Where your data is stored

Your uploaded film files and account data are stored with cloud providers located in the United States. If you use FilmVault from outside the US, your data is transferred to and processed in the US, where privacy laws may differ from those of your country. Our service providers are bound by contracts requiring them to protect your data regardless of where it is processed.

6. How long we keep it

We keep personal data only as long as needed:

• Account & content: for as long as your account is active. After you delete content or close your account, we remove it within a reasonable period, subject to transient backup copies that age out.
• Billing records: retained for as long as required by tax and accounting law.
• Logs: kept for a limited period for security and troubleshooting.

7. Your rights

Wherever you are, you can:

• Access — get a copy of the personal data we hold about you.
• Correct — fix inaccurate or incomplete data.
• Delete — ask us to delete your data, subject to legal exceptions (for example billing records we must keep).
• Export — receive your data in a structured, commonly used format.
• Opt out of marketing — we send service emails only unless you've opted in to more; any optional marketing always has an opt-out.

To exercise any of these, email hello@filmvault.pro. We aim to respond within 30 days. If you're in a jurisdiction that grants you additional statutory rights (for example in the EU or UK), we will honor those rights as the law requires.

8. California residents

If you are a California resident, the CCPA (as amended by the CPRA) gives you specific rights:

• Right to know — what categories of personal information we collect, why, and who we share it with (set out in sections 2–4 above).
• Right to delete — request deletion of your personal information, subject to statutory exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of.
• Right to non-discrimination — we will never treat you differently for exercising any of these rights.

To make a request, email hello@filmvault.pro from the address on your account (so we can verify it's you). An authorized agent may submit a request on your behalf with proof of authorization.

9. Security

We protect your data with encryption in storage, integrity checks, access controls, and optional AES-128 encryption for DCPs with KDM-gated access. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the risk. Keeping your own master copies of anything irreplaceable is still wise.

10. Cookies

FilmVault uses minimal browser storage — essential login tokens, payment-processor cookies, and Google Analytics for aggregate site measurement — and no advertising or retargeting trackers. URLs are stripped of login keys and screener tokens before any analytics request leaves your browser. Full details, including how to opt out of analytics, are in our Cookie & storage notice.

11. Children

The Service is intended for professional use by adults and is not directed at children. We do not knowingly collect personal data from anyone under 18.

12. Changes

We may update this policy from time to time. If we make material changes we will take reasonable steps to notify you before they take effect. The “last updated” date above always reflects the current version.

13. Contact & complaints

For any privacy request or question, contact hello@filmvault.pro.