Privacy Policy

E8 Productions ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://e8productions.com and our production workflow management application (collectively, the "Service"). This Policy applies to all users of the Service, including those who access it via third-party authentication providers such as Google or Meta (Facebook).

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

We collect information that you provide directly to us, information we obtain automatically when you use our Service, and information from third-party sources such as Google or Meta when you choose to sign in using those platforms.

2.1 Information You Provide Directly

• Account Information: Your name, email address, phone number, job title, and password when you create an account.
• Profile Information: Profile photo, company name, and role preferences you add to your profile.
• Content and Files: Files, documents, videos, images, and other content you upload to the Service.
• Communications: Messages, support requests, and other communications you send through or about the Service.
• Payment Information: Billing address and payment method details if you make payments. Payment processing is handled by third-party processors.

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical data, including:

• Usage Data: Features accessed, pages viewed, actions taken, and time spent on the Service.
• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Log Data: IP address, access times, and referring URLs recorded in server logs.
• Cookies and Similar Technologies: Browsing activity data collected via cookies and pixels. See Section 7 for details.

2.3 Information from Google Sign-In (OAuth 2.0)

If you choose to register or log in using Google Sign-In, we receive the following information from your Google Account via Google's OAuth 2.0 service:

• Your name
• Your email address
• Your Google profile photo (if available and permitted by your Google account settings)

We do not receive or store your Google password. Information received from Google is used solely to create and authenticate your account on the Service. We do not use this data for advertising, profiling, or any purpose beyond providing and improving your account experience.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer your Google data to third parties except as strictly necessary to provide the Service, and we do not use it for any secondary purposes.

2.4 Information from Meta (Facebook Login)

If you choose to register or log in using Meta (Facebook) Login, we receive the following information from your Meta account, subject to your Meta privacy settings and the permissions you grant:

• Your name
• Your email address
• Your Meta profile photo (if permitted)
• A unique Meta user identifier (User ID)

We do not receive your Meta password. Information received from Meta is used solely to create and authenticate your account on the Service and to provide you with the features you have requested. We do not use this data for advertising, profiling, or any purpose unrelated to operating the Service.

Our use of data received via Meta Login complies with Meta's Platform Terms and Developer Data Use Policy. We do not sell, transfer, or use Meta user data in any way inconsistent with those policies or this Privacy Policy.

2.5 Information from Other Third Parties

• Third-Party Integrations: If you connect other third-party services to your account, we may receive information as permitted by your settings on those platforms.
• Business Partners: Clients or partner organizations who add you to their projects within the Service.

We use the information we collect only for the purposes described in this Privacy Policy:

• Provide and Maintain the Service: To operate, maintain, and improve the Service, process transactions, and manage your account.
• Authentication: To verify your identity when you sign in, including via Google Sign-In or Meta Login, and to manage your account access securely.
• Communication: To send technical notices, updates, security alerts, support messages, and administrative communications.
• Personalization: To personalize your experience and deliver content relevant to your role and preferences.
• Analytics: To analyze usage patterns, monitor trends, and improve the Service's functionality.
• Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Marketing: With your explicit consent, to send promotional communications. You may opt out at any time.

Data received from Google Sign-In or Meta Login is used exclusively for authentication and account management. It is never used for marketing, advertising, or any purpose beyond what is necessary to operate your account on the Service.

We do not sell your personal information, including any data obtained through Google Sign-In or Meta Login. We may share your information only in the following limited circumstances:

• With Your Consent: When you explicitly direct us to share information or provide consent.
• Service Providers: With trusted third-party vendors who perform services on our behalf (hosting, analytics, customer support, payment processing). These providers are contractually required to use your data only as directed by us and consistent with this Privacy Policy.
• Team Members and Clients: With other users within your organization or project as necessary for collaboration through the Service.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to the same privacy protections in this Policy.
• Legal Requirements: When required by law, legal process, or government request, or to protect the rights, property, or safety of E8 Productions, our users, or others.
• Aggregated or De-identified Data: Aggregated or de-identified information that cannot reasonably identify you.

We do not share Google or Meta user data with third parties for advertising, profiling, or any purpose unrelated to the direct operation of the Service.

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including legal, accounting, or reporting requirements.

We will delete or anonymize your personal information in the following circumstances:

• When you request deletion of your account or personal data (see Section 8 for how to submit a request).
• When your account is terminated, within a reasonable timeframe not to exceed 90 days, except where retention is required by law.
• When the data is no longer necessary to provide the Service or a specific feature.
• Upon request by the applicable third-party platform (e.g., Meta or Google) in accordance with their policies.

Data received from Google Sign-In (name and email) and Meta Login (name, email, and User ID) will be deleted or anonymized upon account termination. We do not retain third-party authentication data beyond what is necessary for active account management.

When determining retention periods, we consider the nature and sensitivity of the information, applicable legal requirements, and whether the purpose of processing can be achieved with less data.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability testing
• Role-based access controls and multi-factor authentication
• Employee training on data protection practices
• Incident response and breach notification procedures

In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law and in accordance with our obligations under any platform policies (including Meta's Developer Data Use Policy).

No method of transmission over the Internet or electronic storage is 100% secure. While we use commercially acceptable security measures, we cannot guarantee absolute security.

We use cookies and similar tracking technologies to collect and store information about your interactions with our Service.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function, including authentication and security.
• Functional Cookies: Enable personalized features and remember preferences.
• Analytics Cookies: Help us understand how users interact with the Service.
• Marketing Cookies: Used to deliver relevant content and track campaign effectiveness.

Managing Cookies

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect Service functionality. You can also manage your preferences through your Google Account settings or Meta Account settings for data associated with those platforms.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information. To submit a deletion request, email us at privacy@e8productions.com with the subject line "Data Deletion Request" and include your account email address. We will process your request within 30 days.
• Portability: Receive a copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us directly.
• Restriction: Request restriction of processing in certain circumstances.
• Disconnect Google Sign-In: Disconnect your Google account at any time by contacting us at privacy@e8productions.com or via your Google Account settings at https://myaccount.google.com/permissions.
• Disconnect Meta Login: Disconnect your Meta account at any time by contacting us at privacy@e8productions.com or via your Facebook settings at https://www.facebook.com/settings?tab=applications.

We will respond to all privacy rights requests within the timeframe required by applicable law. Some requests may be subject to identity verification before we can fulfill them.

If you are a resident of California, Virginia, Colorado, Utah, or Connecticut, you have additional rights under applicable state privacy laws including the CCPA, CPRA, VCDPA, CPA, UCPA, and CTDPA:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information and do not share it for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
• Right to Limit Sensitive Data Use: Where applicable, you may request we limit our use of sensitive personal information.

To submit a request under any of these laws, please contact us at privacy@e8productions.com. You may designate an authorized agent to make a request on your behalf with appropriate written authorization.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer personal information outside of your jurisdiction, we implement appropriate safeguards — such as contractual protections — to ensure your information remains protected consistent with this Privacy Policy and applicable law.

Our Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. We do not use Google Sign-In, Meta Login, or any third-party authentication service in connection with users we know to be under 16. If we learn we have collected personal information from a child under 16, we will delete it promptly. If you believe we may have collected information from a child under 16, please contact us at privacy@e8productions.com.

Our Service integrates with and may link to third-party services not operated by us, including:

• Google (Sign-In / OAuth 2.0) — Privacy Policy | Terms
• Meta / Facebook (Login) — Privacy Policy | Terms

This Privacy Policy does not govern the practices of these third-party services. We encourage you to review their policies directly. We are not responsible for the privacy or security practices of any third-party platforms accessed independently through our Service.

Our collection and use of data through third-party integrations is governed by the respective platform policies:

• Google API Services User Data Policy (including Limited Use requirements)
• Meta Platform Terms and Developer Data Use Policy

In the event of any conflict between this Privacy Policy and a platform policy with respect to that platform's user data, the more restrictive or more protective provision will apply.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform integrations. We will notify you of material changes by posting the updated Policy on this page with a new "Last Updated" date. For significant changes, we may also notify you via email or an in-app notice.

Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For data deletion requests specifically, email privacy@e8productions.com with the subject line "Data Deletion Request" and your account email address. We will respond within 30 days.