Privacy Policy

This policy covers three kinds of people: account holders who sign up directly, invited crew whom an account holder adds to a project by email, and clientswho open a share link an account holder sends them. If you've been invited to a shoot on SHOOTS, this policy applies to you even before you set a password.

Account information: name, email address, password (stored as a one-way bcrypt hash, so we never store or see your plain-text password), business name, phone number, occupation, preferred currency, and your plan (Free or Pro).

Project and shoot data: project titles, client names, budgets, shoot dates, times and locations, crew assignments, payment amounts and status, expenses, delivery milestones, and any notes you add.

Crew and Circle data:when you add someone to a project by email, we store that as a crew assignment and also save them to your personal "Circle" of past collaborators so you can rebook them later.

Feedback: anything you submit through the in-app feedback or bug-report form.

Technical data: IP address, browser and device type, and request logs, collected automatically for security and debugging. If you arrive from a link on this website, we may also record which link it was (for example, UTM parameters) so we know which pages work.

Payment data:if you buy Pro, the payment is handled by Razorpay. You enter your card, UPI or bank details on Razorpay's secure checkout, and they never reach us. From Razorpay we keep a record of each payment: the amount, date, status, payment method type (for example "UPI" or "card"), Razorpay's order, payment and refund references, and the Pro period it paid for. We keep these records for as long as Indian tax and accounting law requires, even if you delete your account.

If an account holder adds your email address to a project, we automatically create a placeholder account for you so you can be assigned call times, locations and payment status, even if you've never used SHOOTS before. We'll email you to let you know. You can set a password to access that account, or ask us to delete it (see Section 8).

As a crew member, you only see your own call times and your own payment status, not the project's budget or other crew members' pay. The person who added you is responsible for having your permission to share your email address with us for this purpose.

An account holder can create a share link for a project and send it to their client. Anyone who has the link can open it without an account. It shows the project title, the account holder's name or business name, the client name, the shoot schedule and, where enabled, delivery progress. It never shows budgets, expenses or crew pay.

Share links are marked so search engines don't index them. The account holder controls who they send a link to. We don't store any personal data about people who open a share link beyond the standard technical data in Section 2.

• To provide the service: projects, scheduling, crew management, budgets, payment tracking and share links.
• To apply your plan's limits and features (Free or Pro).
• To send transactional emails: crew invitations, password resets and account notifications.
• To keep accounts secure, including detecting misuse and enforcing our Terms of Service.
• To respond to feedback and support requests.
• To understand product usage in aggregate, where analytics are enabled, so we can improve the app.

We don't sell your personal data, and we don't use your project or payment data to serve ads.

We use a small number of service providers to run SHOOTS. Each one processes data on our behalf under its own security and privacy commitments:

• Neon: database provider, which stores account, project and payment-tracking data.
• Razorpay: processes Pro payments and refunds. Razorpay's own privacy policy covers the payment details you give it.
• Render: hosts our backend API.
• Vercel: hosts the SHOOTS web app and this website.
• Brevo: sends transactional emails (crew invitations, password resets) on our behalf.
• PostHog: product analytics, used to understand feature usage in aggregate (only where analytics are enabled).

Some of these providers process data outside India. We only share what each provider needs to do its job, and we don't allow them to use your data for their own purposes. Apart from these providers, we don't share your personal data with third parties, except where the law requires it.

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within [30] days, except where we're required to keep it longer for legal, tax or dispute-resolution purposes. Disabling a share link stops it working straight away.

You can view and correct your profile details at any time from your account settings. To get a copy of your data or delete your account, email us at thebrandingbrains@gmail.comand we'll handle it. If you were invited by someone else and never set a password, email us and we'll remove your placeholder account. Depending on where you live, you may have more rights under applicable law (for example, India's Digital Personal Data Protection Act, 2023), including correction, grievance redressal and withdrawal of consent.

We use industry-standard measures to protect your data, including password hashing, encrypted connections (HTTPS), and access controls that separate what account holders, crew and clients can see. No method of storage or transmission is completely secure, so we can't guarantee absolute security. If we become aware of a breach affecting your data, we'll notify you as the law requires.

SHOOTS is meant for working professionals. It isn't directed at anyone under 18, and we don't knowingly collect their data. If you believe a minor has given us data, contact us and we'll remove it.

We may update this policy as SHOOTS changes. If we make a material change, we'll notify active account holders by email or an in-app notice before it takes effect.

Questions, data requests or concerns: thebrandingbrains@gmail.com