Privacy Policy

1. Introduction

Greenlit (“Greenlit,” “we,” “us,” or “our”) operates wearegreenlit.io — a professional network and AI-powered operating system for independent filmmakers (the “Platform”). This Privacy Policy describes how we collect, use, disclose, and protect information about you when you access or use our Platform, including our waitlist, website, and all associated services.

By creating an account, joining the waitlist, or using the Platform in any way, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

a. Information You Provide Directly

• Account information: name, email address, password, and professional role (Actor, Writer, Director, Producer, Casting Director, Crew, Post-Production).
• Profile information: bio, tagline, location, years of experience, disciplines, skills, genre preferences, union status, reel URL, portfolio links, and availability status.
• Credits and work history: film and project credits, roles, collaborators, and festival recognition you choose to list.
• Media uploads: profile photo, portfolio images, and demo reel files you upload to the Platform.
• Content you create: feed posts, project details, casting calls, crew calls, applications and submissions, direct messages, and community contributions.
• Calendar and availability data: scheduling preferences, availability blocks, and event information you enter.
• Waitlist registration: email address and any information you provide when joining the waitlist.
• Support communications: messages and attachments you send us.

b. Information Collected Automatically

• Usage data: pages visited, features used, AI agent interactions, casting and crew match activity, and Platform engagement.
• Technical data: IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Cookies and similar technologies: session tokens stored in secure, HTTP-only cookies for authentication. We do not use third-party advertising cookies.

c. Information from Third Parties

If you connect third-party accounts or services, we may receive information from those services as permitted by their terms and your privacy settings.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and deliver the Platform's features.
• Power AI-driven matching — connecting filmmakers with relevant casting calls, crew opportunities, and collaborators based on your profile, credits, and preferences.
• Generate personalized agent digests, activity summaries, and scheduling recommendations.
• Process subscription payments and manage your billing relationship with us.
• Send transactional emails (account activity, match alerts, digest emails) and, where you opt in, marketing communications.
• Enforce our Terms of Service, investigate misuse, and protect the safety of our community.
• Comply with applicable legal obligations.
• Analyze aggregated, de-identified usage patterns to improve Platform features and performance. We do not sell or share identified usage data for this purpose.

4. Information Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

a. With Other Users (by design)

Information on your public profile — including name, role, bio, credits, reel, and portfolio — is visible to other Platform members and, where applicable, to the public at your /u/[username] URL. Direct messages are visible only to participants in that conversation.

b. Service Providers (Sub-processors)

We share data with trusted vendors who process it on our behalf under confidentiality agreements:

• Supabase — database, authentication, and file storage ( supabase.com/privacy)
• Anthropic — AI language model powering agent features ( anthropic.com/privacy)
• Stripe — payment processing; we never store card numbers ( stripe.com/privacy)
• Resend — transactional and digest email delivery ( resend.com/privacy)
• Cloudinary — media hosting, optimization, and delivery ( cloudinary.com/privacy)
• Vercel — hosting and edge infrastructure ( vercel.com/legal/privacy-policy)

c. Legal Requirements

We may disclose information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, the safety of our users, or the public.

d. Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

5. Your Privacy Rights

California Residents (CCPA / CPRA)

You have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information (subject to certain exceptions).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising.
• Limit use of sensitive personal information.
• Non-discrimination for exercising any of the above rights.

EEA and UK Residents (GDPR / UK GDPR)

You have the right to:

• Access your personal data.
• Rectify inaccurate personal data.
• Erase your personal data (“right to be forgotten”).
• Restrict processing of your personal data.
• Receive your data in a portable format.
• Object to processing based on legitimate interests.
• Lodge a complaint with your local supervisory authority if you believe your rights have been violated.

Our lawful basis for processing is primarily contract performance (operating the Platform you signed up for) and legitimate interests (platform safety, fraud prevention, and improving our services).

How to Exercise Your Rights

Submit a request to privacy@wearegreenlit.io. We will respond within 30 days (45 days for complex requests). We may need to verify your identity before processing your request.

6. Data Retention

• Active accounts: data is retained while your account is active.
• After account deletion: profile data and user-generated content are deleted within 30 days. Anonymized usage logs may be retained for up to 90 days. Some data may be retained longer if required by law or to resolve disputes.
• Payment records: retained for seven years as required for tax and accounting compliance.
• AI interaction logs: retained for 12 months for safety and model improvement purposes, then deleted or de-identified.

7. Security

We implement industry-standard safeguards including TLS encryption in transit, encryption at rest, row-level database security, and HTTP-only session cookies. Payment card data is never stored on our servers — it is handled entirely by Stripe, a PCI-DSS-certified processor.

No method of transmission over the internet is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at security@wearegreenlit.io.

8. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe we have collected information from a minor, please contact us at privacy@wearegreenlit.io.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised “Last updated” date and, for significant changes, by sending an email to the address on your account or displaying a prominent notice on the Platform. Your continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, requests, or complaints: