Privacy Policy
Effective: 10/21/2026
1. Who we are
SiteTools, Inc. d/b/a FilmIndustry.com (“we”, “us”) runs FilmIndustry.com. This policy explains what personal information we collect, why, who can see it, how long we keep it, and your choices. We don't sell your personal information, we don't share it for cross-context behavioural advertising, and we don't run ads or third-party trackers.
2. What we collect from members
| What | Examples | From |
|---|---|---|
| Account | Email address, mobile number, password (stored only as a salted Argon2 hash), invite code used and who invited you, when you accepted our Terms | You |
| Two-factor login | Your authenticator secret (encrypted), backup codes (hashed only) | You |
| Verification | Results of the email and phone checks (valid or not, risk score, line type) and when they ran | Verified.net |
| Profile | Name, handle, photo, headline, bio, location, roles, skills, links, availability, a link to your public film credits | You; credits from Wikidata |
| Creator details | Social accounts and follower counts, niches, rate card prices, sample video links | You |
| Your work | Projects, brand campaigns, synopses, scripts and documents, roles and gigs you post, updates, applications, reel links, résumés, invitations, votes, follows, dream casts | You |
| Messages | Direct and team messages you send and receive | You and other members |
| Team agreements | Terms proposed and accepted, the name you type to accept, when, your IP address and browser | You and the other party |
| Script access | Who requested or opened a script, when, and their IP address; each copy is stamped with the reader's name, email and the time | Automatically |
| Safety | Reports, blocks, moderation actions, an audit log of staff actions | You, other members, our staff |
| Alerts and notifications | Job and gig alert settings, notifications, email preferences | You |
| Technical | IP address (security and rate limits), browser type, your timezone (to show times correctly), error logs | Automatically |
A résumé, bio or message may contain anything you choose to put in it. Please don't include sensitive details (such as health information or your Social Security number) unless you need to.
3. If you're not a member
- Waitlist: the email, name, role and note you give us.
- Business outreach: we keep a list of productions, film schools, brands and agencies we contact about listing with us: the organisation, a contact's name, work email and phone, website, city, our notes, and the emails we've sent. This comes from public sources such as company websites and casting notices, or from the person directly. Every email we send has a link to stop further emails, which we honour permanently.
- Brands that ask us to find creators: the company, contact name, work email, website, the brief, and payment status. Card payments go straight to Stripe; we receive only the result (paid, amount, date), never card numbers.
- Listings we post for an organisation: its name and contact email. Applications to those listings are emailed to that address (section 5).
- Representatives we contact for outreach (Terms section 11): names and business contact details from public sources.
4. How we use it
- To run the Service: accounts, profiles, projects, listings, applications, messages, script sharing, alerts, notifications and agreements.
- To verify accounts and keep the Service safe: verification, spotting fake or duplicate accounts and vote manipulation, moderation, security, and rate limits. Accounts that fail the automated verification check may be refused; you can ask a person to review the decision (section 9).
- To email you: account emails, and optional ones you can turn off (section 7).
- For outreach: to contact organisations about listing with us, and, when a project reaches a vote milestone, to share its public details with representatives of people in its dream cast.
- To improve the Service, using our own aggregate statistics (no third-party analytics).
- To comply with the law, enforce our Terms, and establish or defend legal claims.
We don't use your information for advertising, and we don't make automated decisions about you beyond the verification check above and automatic hiding of content after several reports (always reviewed by staff).
5. Who sees it
- The public, by your settings. Public profiles, public projects and publicly listed jobs and gigs can be seen by anyone and indexed by search engines, including Google's job search. Members-only projects show their title and summary to everyone and the rest to verified members.
- Other members. The member directory (Find crew) is for signed-in verified members. Private projects, scripts, applications, résumés, invitations, messages and agreements are shown only to the people involved. Team members see each other's names, roles and points, never each other's fees.
- Organisations whose listings we post (Terms section 13): when you apply, your name, profile link, note and reel link, but not your email address or résumé, which they see only if they claim the listing and you've applied.
- Service providers that process data for us under contract and only on our instructions: Verified.net (verification; a company under common ownership with FilmIndustry.com, which receives your email address and mobile number for that purpose only), Backblaze (encrypted backups), and Hivelocity (our servers). We send email from our own mail server.
- Representatives, for outreach: a project's public details only, never your contact details unless you agree.
- Legal and safety: when the law requires it, or to protect people, the Service or our rights.
- Business transfers: if FilmIndustry.com is merged or sold, with notice to you.
6. Cookies and tracking
We use only the cookies needed to run the Service. No analytics, advertising or tracking cookies, pixels or third-party scripts.
| Cookie | Purpose | Lasts |
|---|---|---|
| fi_session | Keeps you signed in | 14 days |
| fi_csrf | Protects forms against cross-site attacks | Browser session |
| fi_mfa | Carries you from your password to your two-factor code | 5 minutes |
| fi_tz | Your timezone, so times show in your local time | 1 year |
Challenge films. Films entered in the FilmIndustry Challenge are hosted on YouTube or Vimeo. Nothing loads from them until you press play on a film; then that film's player loads from YouTube (in its privacy-enhanced mode) or Vimeo, which receive your IP address and may set their own cookies under their own privacy policies.
Do Not Track and Global Privacy Control. We don't track you across other sites, so we treat every visitor the same whether or not their browser sends a Do Not Track or Global Privacy Control signal. Since we don't sell or share personal information, there's nothing further to opt out of.
7. Email
We always send account emails: confirming your address, password resets, security alerts, applications, agreements and moderation notices. You can turn off new-message and invitation emails, job and gig alerts, project updates, the daily notification summary and FilmIndustry news in Settings → Email preferences, or with the unsubscribe link in those emails. We don't send text messages.
8. How long we keep it
| Data | Kept |
|---|---|
| Your account, profile and content | While your account is open, or until you delete it |
| Read notifications | 90 days |
| Sign-in sessions | 14 days from last use |
| Server and error logs | Rotated automatically, usually within a few weeks |
| Security and staff audit records (including IP addresses) | 2 years |
| Sign-up and waitlist submissions our anti-spam checks blocked (what was typed, IP address, browser) | 30 days |
| Accepted team-agreement records | As long as either party may need them, at least 7 years |
| Business outreach contacts | Until no longer useful, or until you ask; an opt-out is kept so we honour it |
| Encrypted backups | Up to about 12 months, then overwritten |
When you delete your account (Settings → Your data): we delete your profile and photo, creator details, rate card and samples, messages you sent, applications and résumés, invitations, votes, alerts, blocks and waitlist entry, and projects you own that have no team. Projects you own that have a team are archived and kept for that team, with your name replaced by “Deleted member”. We keep, de-identified where possible, accepted team-agreement records (the other party may need them), reports and our moderation and audit records, because we may need them to complete a transaction, keep the Service secure or handle legal claims. If we ever restore a backup, we re-apply deletions so deleted accounts stay deleted.
9. Your rights
You can ask to know, access, correct or delete your personal information, and to get a copy in a portable format. Most of this you can do yourself:
- Copy of your data: Settings → Your data → Download your data (a ZIP file).
- Correct: edit your profile and settings at any time.
- Delete: Settings → Your data → Delete your account.
- Emails: Settings → Email preferences.
- A person to review a verification refusal or a moderation decision: email us.
For anything else, email privacy@filmindustry.com. We'll confirm it's you (usually by email from your account address), answer within 45 days, may accept requests from an authorised agent with your permission, and won't treat you differently for using your rights. If we refuse a request, we'll tell you why and how to appeal.
10. California residents
In the last 12 months we've collected these categories of personal information, from the sources and for the purposes above: identifiers (name, email, phone, IP address, account names); customer records (verification results); professional information (roles, skills, credits, résumés, rates); internet activity on our own Service (pages and scripts opened, for security and access logs); inferences limited to verification risk scores; and account log-in credentials. We use log-in credentials only to run and secure your account, so there's no need to limit their use. We disclose personal information for business purposes only to the service providers in section 5. We don't sell or share personal information, and we have no actual knowledge of selling or sharing information of anyone under 16.
California's “Shine the Light” law: we don't share personal information with third parties for their own direct marketing.
11. Security
Passwords are hashed with Argon2; two-factor secrets are encrypted; the site is HTTPS only; sessions are server-side; backups are encrypted before they leave our server; scripts are served only through access checks, stamped with the reader's details, and logged. Admin accounts must use two-factor login. No system is perfectly secure. If a breach affects your personal information, we'll tell you as the law requires.
12. Where it's stored
FilmIndustry.com is for people in the United States. Your information is stored in the United States: on our servers in Dallas, Texas, and in encrypted backups with Backblaze (US East).
13. Children
FilmIndustry.com is for people 18 and over; members confirm their age when they sign up. We don't knowingly collect personal information from anyone under 18. Roles for minors are applied for by a parent or guardian through their own account. If we learn we've collected information from a child, we'll delete it.
14. Changes and contact
We'll post changes here with a new effective date, and email you about material ones before they take effect. Questions or requests: privacy@filmindustry.com, SiteTools, Inc. d/b/a FilmIndustry.com, 1411 Federal Ave, Ste 6, Los Angeles, CA 90025.
Also see our Terms of Service. Version 2026-10-21.2.