Privacy Policy

Last updated 26 June 2026

Who we are

EventFlow Suite (“EventFlow”, “we”) is a shoot-management tool operated by Produced by Ben. Contact us at ben@producedbyben.co.uk.

What we collect

  • Account data: your name, email and role, used to sign you in and identify you to your crew.
  • Content you create: productions, shot lists, posts, captions, treatments, call sheets and any files you upload.
  • Billing data: handled by Stripe; we store your plan and a Stripe customer reference, never your card details.
  • Usage data: basic logs and AI-usage counts needed to run the service and enforce plan limits.
  • AI keys (optional): if you choose to bring your own Anthropic, Google or OpenAI API key, we store it encrypted, use it only to run AI on your behalf, and never return it to your browser.

How we use it

To provide the service, sync your data across your devices and crew, draft captions, import briefs and power the in-app assistant with AI when you ask, process subscriptions, and keep the product secure and reliable. We do not sell your data, and we don’t use your content to train AI models. When you bring your own AI key, the data needed for that request is sent to the provider you chose, under their terms.

Processors we use

  • Supabase: database, authentication and file storage.
  • Anthropic (Claude), Google (Gemini), OpenAI: AI features (caption drafting, brief import and the in-app assistant), processed server-side per your request. Which provider is used depends on your settings.
  • Stripe: subscription billing.
  • Vercel: application hosting.

Cookies & storage

EventFlow uses no advertising or analytics cookies. We keep a single first-party item in your browser’s local storage to keep you signed in (a strictly-necessary session token); without it you’d have to log in on every page. Stripe may set its own cookies on its checkout pages during payment. Because we set no non-essential or tracking cookies, there is no cookie-consent banner — if that ever changes, we’ll add one.

Sharing & access

Your productions are private to the people you invite. Public call-sheet links are token-scoped to a single crew member and can be revoked at any time.

Your rights

You can access, correct, export or delete your data — email us and we’ll help. Deleting your account removes your profile, your uploaded files and every production only you own; productions you share transfer to a teammate so their work survives.

Data retention

We keep your account and content while your account is active. Deleting your account removes your profile, uploaded files and solely-owned productions from our active systems; shared productions pass to a remaining member. Routine backups age out on a rolling basis. Usage counts and basic logs are kept only as long as needed to run and secure the service.

International transfers

Some processors (including Stripe, Vercel and the AI providers) operate in the United States, so your data may be processed there under appropriate safeguards.

Changes

We’ll update this page when our practices change and revise the date above.