Privacy Policy

This Privacy Policy explains what personal data Cradle Films collects, why we collect it, and how we protect it. We process personal data in accordance with applicable international data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies, and equivalent frameworks in other jurisdictions.

1. What we collect

When you use Cradle Films, we may collect:

• Account data — your name, email address, and password (stored hashed)
• Film data — title, logline, concept, poster, trailer link, cast and crew information, festival submissions
• Subscriber data — email addresses and names of people who subscribe to a film's updates
• Usage data — page views, press kit downloads, and social link clicks, aggregated per day per project
• Technical data — IP address and browser type, collected only for security and abuse prevention

2. How we use it

• To operate the Platform and display your film pages
• To send festival deadline reminders you have opted into through the tracking feature
• To send your subscribers updates about your films — only when you choose to do so
• To detect and prevent abuse, spam, and unauthorised access
• To improve the Platform based on aggregate usage patterns

3. What we do NOT do

• We do not sell your data to third parties
• We do not run third-party advertising networks
• We do not use tracking cookies — our analytics are server-side and aggregate only
• We do not share your subscriber list with anyone except you, its owner

4. Who has access

Your account data is accessible to you. Film data you mark as published is publicly visible through your film page. Subscriber lists are visible only to you and to the Platform's administrator for abuse prevention and support. We use the following service providers:

• Hosting provider — to run the Platform
• Email delivery provider — to send transactional email
• AI provider — to generate synopsis and copy when you request it; we send only the film text you provide

5. How long we keep it

We keep your account data while your account is active. If you delete your account, we delete your personal data within 30 days. Aggregated analytics — page views per day, without any identifying information — may be retained longer.

6. Your rights

Under applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your data, including your subscriber list
• Object to processing, or lodge a complaint with the data protection authority in your jurisdiction

7. International transfers

Our service providers may process data in countries outside your own. Where we transfer personal data internationally, we do so under appropriate safeguards recognised by applicable data protection law.

8. Security

Passwords are hashed using bcrypt. Data is transmitted over HTTPS. We follow standard security practices to protect accounts and data. If you suspect unauthorised access to your account, contact us immediately.

9. Contact

Data protection questions: hello@cradlefilms.info