Filmadex Privacy Policy

This Privacy Policy explains how Okliko Inc., a Delaware corporation and the operator of Filmadex, collects, uses, processes, discloses, retains, and protects personal information.

"Filmadex," "Okliko," "we," "us," and "our" refer to Okliko Inc.

This Policy applies to the Filmadex website, applications, project workspaces, subscriptions, artificial intelligence features, collaboration tools, public and private project pages, customer support, and related services collectively referred to as the "Service."

By using the Service, you acknowledge the practices described in this Policy.

1. Scope

This Policy applies to personal information collected through:

• Filmadex accounts;
• subscription and billing activity;
• project workspaces;
• project invitations;
• uploads and project materials;
• AI-assisted features;
• public and private project pages;
• customer-support communications;
• Filmadex emails;
• security and audit systems;
• cookies and similar technologies; and
• other interactions with Filmadex.

This Policy does not govern third-party websites, services, applications, or platforms that maintain their own privacy policies.

2. Okliko's Privacy Roles

Okliko Inc. may process personal information in different legal capacities.

Okliko as Controller

Okliko generally acts as controller when it determines why and how personal information is processed for:

• account creation and administration;
• authentication;
• subscriptions and billing;
• customer support;
• communications;
• platform analytics;
• security;
• fraud prevention;
• legal compliance;
• product operations; and
• Filmadex's own marketing and business activities.

Okliko as Processor or Service Provider

When a project owner, production company, organization, or other customer submits personal information within project content and instructs Filmadex to process that information solely to provide the Service, the customer generally acts as controller or business and Okliko generally acts as processor or service provider.

The customer is responsible for:

• establishing a lawful basis;
• providing required privacy notices;
• obtaining required consent;
• ensuring the information was collected lawfully;
• responding to data-subject requests;
• ensuring instructions to Filmadex are lawful; and
• complying with applicable privacy law.

Processing performed in this capacity is governed by the Filmadex Data Processing Addendum where applicable.

If your personal information was placed in Filmadex by a production company, project owner, employer, organization, or another user, you may need to contact that party directly to exercise rights relating to that project data.

3. Personal Information We Collect

The information we collect depends on how you use Filmadex.

Account and Identity Information

We may collect:

• name;
• email address;
• username;
• account identifiers;
• login and authentication information;
• profile information;
• company or professional affiliation;
• country or general region;
• subscription status;
• user role;
• communication preferences; and
• account-verification information.

Billing and Transaction Information

We may collect:

• subscription plan;
• transaction amount;
• transaction date;
• billing status;
• billing country or region;
• promotional or access-code information;
• tax-related information;
• payment-processor identifiers;
• invoice information;
• refund and chargeback information; and
• limited payment metadata.

Payment-card information is generally processed by a third-party payment processor. Filmadex does not need to receive complete payment-card numbers to administer most payments.

Project and Creative Content

We process content you submit to Filmadex, including:

• scripts;
• treatments;
• loglines;
• synopses;
• outlines;
• character information;
• scene information;
• story materials;
• project descriptions;
• notes;
• coverage materials;
• storyboards;
• images;
• photographs;
• artwork;
• audio;
• music;
• voice recordings;
• animation;
• footage;
• video;
• trailers;
• cast and crew information;
• prompts;
• reference materials;
• instructions;
• AI inputs;
• AI outputs;
• comments;
• revisions;
• collaborator contributions; and
• associated metadata.

Project content may contain personal information about people who do not have Filmadex accounts.

Collaboration Information

We may collect:

• collaborator names;
• collaborator email addresses;
• project invitations;
• invitation status;
• project roles;
• access permissions;
• activity history;
• edits;
• comments;
• project ownership information; and
• records of who accessed or changed project materials.

Technical and Usage Information

We may automatically collect:

• IP address;
• device type;
• browser type;
• operating system;
• language;
• approximate location derived from IP address;
• device or browser identifiers;
• login activity;
• session information;
• pages viewed;
• tools and features used;
• actions performed;
• referring pages;
• timestamps;
• error reports;
• performance information;
• file and storage activity;
• generation requests;
• usage allowances;
• processing duration;
• model or feature selections;
• safety-filter events;
• fraud indicators;
• security logs; and
• audit records.

Communications and Support

We collect information you provide when you:

• contact Filmadex;
• request support;
• report a problem;
• dispute a charge;
• respond to a survey;
• submit feedback;
• participate in testing;
• submit a privacy request;
• report infringement; or
• otherwise communicate with us.

Publicly Available and Third-Party Information

We may receive information from:

• collaborators;
• project owners;
• organizations that invite you;
• payment processors;
• authentication providers;
• service providers;
• referral sources;
• social platforms;
• public databases;
• legally available public sources; and
• integrations you authorize.

4. How We Use Personal Information

We may use personal information to:

• create and administer accounts;
• authenticate users;
• provide project workspaces;
• process and store project content;
• enable collaboration;
• send and manage invitations;
• provide requested AI features;
• create requested outputs;
• process subscriptions and payments;
• measure and enforce usage limits;
• provide support;
• respond to requests;
• communicate account, billing, project, legal, and security notices;
• maintain and improve the Service;
• monitor performance;
• troubleshoot errors;
• develop new features;
• conduct testing;
• prevent fraud and abuse;
• enforce legal terms;
• protect Filmadex and its users;
• investigate prohibited activity;
• comply with law;
• respond to valid legal requests;
• establish, exercise, or defend legal claims;
• maintain business records;
• send permitted marketing communications; and
• complete a financing, merger, acquisition, sale, or restructuring.

We may use aggregated or de-identified information for:

• analytics;
• product planning;
• forecasting;
• performance measurement;
• security;
• service improvement;
• business intelligence; and
• research.

We may retain and use de-identified information without attempting to re-identify it, except where needed to confirm that de-identification measures remain effective.

5. Legal Bases for Processing

Where the European Economic Area, United Kingdom, or similar privacy laws apply, Filmadex may rely on the following legal bases.

Contract

We process information where necessary to:

• create your account;
• provide the Service;
• administer your subscription;
• provide requested features;
• process payments;
• maintain projects; or
• perform our agreement with you.

Legitimate Interests

We may process information based on legitimate interests in:

• operating and improving Filmadex;
• securing the Service;
• preventing fraud;
• understanding feature use;
• supporting customers;
• enforcing agreements;
• protecting legal rights; and
• administering the business.

We consider the effect of such processing on individual rights.

Consent

We may rely on consent for:

• non-essential cookies;
• certain marketing;
• optional data uses;
• model-training opt-ins;
• optional integrations; or
• other processing where consent is legally required.

You may withdraw consent where applicable. Withdrawal does not affect processing already performed lawfully.

Legal Obligation

We may process information to comply with:

• tax obligations;
• accounting obligations;
• legal process;
• regulatory requirements;
• court orders;
• sanctions;
• law-enforcement requests; or
• other legal duties.

Legal Claims and Protection

We may process information where necessary to:

• establish legal rights;
• exercise legal rights;
• defend claims;
• investigate violations; or
• protect Filmadex, users, and third parties.

6. Artificial Intelligence Processing

When you use an AI-assisted feature, Filmadex may transmit relevant content to one or more artificial intelligence or processing providers.

The information transmitted may include:

• prompts;
• scripts;
• project descriptions;
• images;
• storyboards;
• audio;
• voice recordings;
• video;
• reference materials;
• project metadata;
• instructions; and
• related personal information.

These providers may process or temporarily retain information to:

• complete the requested operation;
• operate and secure their systems;
• detect abuse;
• enforce safety requirements;
• troubleshoot performance;
• comply with law; or
• maintain transaction and security records.

Filmadex does not itself use non-public Project Content to train general-purpose AI models. Where commercially available, Filmadex selects business or paid-service configurations under which AI providers do not use prompts or outputs to train general-purpose models without authorization. Service and infrastructure providers may process information to provide, secure, maintain, monitor, troubleshoot, and improve their services under their applicable contracts.

This restriction does not prevent:

• processing needed to deliver the requested feature;
• temporary technical retention;
• safety screening;
• abuse detection;
• fraud prevention;
• security analysis;
• legally required retention;
• troubleshooting;
• de-identified operational analytics; or
• processing separately requested or authorized by the user.

Third-party provider practices are governed by their applicable contracts and policies.

7. Information About Other People

A project may contain information about:

• writers;
• creators;
• cast;
• crew;
• collaborators;
• rights holders;
• producers;
• advisers;
• investors;
• subjects;
• performers;
• applicants;
• employees;
• contractors; or
• other individuals.

You may provide another person's information only when you have a lawful basis and all required rights, permissions, notices, and consents.

Filmadex may remove information that it reasonably believes was submitted unlawfully.

Filmadex may refer a privacy request involving customer-controlled project data to the applicable project owner or organizational customer.

8. Sensitive Information

Filmadex is not intended to store regulated or highly sensitive personal information unless a particular feature expressly requires it and Filmadex has agreed to support it.

Do not upload:

• government identification numbers;
• complete financial-account information;
• complete payment-card information;
• passwords;
• authentication credentials;
• medical or health records;
• genetic data;
• biometric identifiers used to uniquely identify a person;
• criminal-conviction information;
• highly sensitive employment records;
• information concerning children or minors; or
• information regulated by specialized privacy regimes that Filmadex has not agreed in writing to support.

Images, footage, voices, and likenesses may be uploaded only with appropriate authorization.

Identity Verification

When you choose to verify your identity, Filmadex uses a specialized identity-verification provider. The provider processes government-identification images, selfie images, and related verification information solely to confirm your identity. Filmadex does not store your raw ID images, selfie images, or biometric templates. Filmadex retains only the verification result, the verification date, the provider inquiry reference identifier, and associated audit metadata. Verification is optional.

9. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Infrastructure and Service Providers

We use providers that assist with:

• hosting;
• databases;
• storage;
• authentication;
• artificial intelligence;
• media processing;
• payment processing;
• email delivery;
• analytics;
• customer support;
• security;
• logging;
• fraud prevention;
• error monitoring;
• identity verification; and
• infrastructure.

Providers are permitted to process information for contracted services and other legally permitted purposes.

Project Owners and Collaborators

We disclose information to:

• users who invite you;
• users you invite;
• project owners;
• project administrators;
• authorized collaborators;
• organizational customers; and
• audiences selected through sharing settings.

The information visible to another user depends on project permissions and feature functionality.

Public Audiences

When you publish a project page or share content publicly, the selected content may be available to:

• website visitors;
• social-platform users;
• search engines;
• recipients of shared links; and
• other members of the public.

Professional Advisers

We may disclose information to:

• attorneys;
• accountants;
• auditors;
• insurers;
• consultants; and
• other professional advisers.

Legal, Safety, and Enforcement Recipients

We may disclose information where reasonably necessary to:

• comply with law;
• respond to legal process;
• enforce our agreements;
• investigate fraud;
• respond to infringement complaints;
• protect safety;
• prevent harm;
• protect legal rights; or
• respond to an emergency.

Corporate Transactions

Personal information may be disclosed or transferred in connection with:

• a financing;
• merger;
• acquisition;
• sale;
• restructuring;
• insolvency;
• change of control;
• sale of assets; or
• similar corporate transaction.

Where appropriate, recipients will be subject to confidentiality or data-protection obligations.

10. Sale and Sharing of Personal Information

Filmadex does not sell personal information for money.

Filmadex does not share personal information for cross-context behavioral advertising as those terms are defined under California privacy law.

Filmadex does not knowingly sell or share the personal information of anyone under 18.

If these practices change, Filmadex will update this Policy and provide any legally required notices and choices.

Filmadex will honor legally required opt-out preference signals where applicable.

11. Cookies and Similar Technologies

Filmadex may use:

• cookies;
• local storage;
• pixels;
• software development kits;
• device identifiers; and
• similar technologies.

These technologies may be used for:

• authentication;
• session management;
• security;
• user preferences;
• fraud prevention;
• feature operation;
• performance;
• analytics; and
• permitted marketing.

Essential Technologies

Essential technologies may be used without optional consent where legally permitted because they are needed to:

• maintain login sessions;
• secure accounts;
• prevent fraud;
• remember privacy choices;
• provide requested functionality; or
• maintain the Service.

Non-Essential Technologies

Where required by law, Filmadex will request consent before activating non-essential analytics, advertising, or similar technologies.

Users must be able to withdraw or modify consent where legally required.

Browser settings may permit you to block certain technologies, but doing so may impair functionality.

12. Marketing Communications

Filmadex may send marketing communications where permitted by law.

You may unsubscribe using the method included in the message or by contacting:

[email protected]

Even after opting out of marketing, you may continue receiving:

• account notices;
• billing communications;
• security alerts;
• policy notices;
• project invitations;
• service announcements; and
• other non-promotional communications.

13. International Data Transfers

Okliko Inc. operates from the United States and may use service providers located in the United States and other countries.

Personal information may therefore be processed in jurisdictions with privacy laws different from those in your country.

Where required, Filmadex may use safeguards including:

• data-processing agreements;
• contractual commitments;
• European Commission Standard Contractual Clauses;
• the applicable United Kingdom transfer mechanism;
• adequacy decisions;
• supplementary security measures; or
• another legally recognized transfer method.

Filmadex may provide additional information concerning applicable transfer safeguards upon a valid request.

14. Data Retention

Filmadex retains personal information for as long as reasonably necessary to:

• provide the Service;
• maintain accounts;
• maintain active projects;
• administer subscriptions;
• process transactions;
• provide support;
• prevent fraud;
• protect security;
• comply with law;
• maintain business and accounting records;
• resolve disputes;
• enforce agreements; and
• establish or defend legal claims.

Retention depends on:

• the type of information;
• the account status;
• the project status;
• customer instructions;
• applicable law;
• contractual commitments;
• security requirements; and
• technical backup cycles.

After deletion or account closure, information may remain temporarily in:

• backups;
• disaster-recovery systems;
• security logs;
• fraud records;
• legal holds;
• transaction records;
• audit records; and
• provider systems.

Publicly shared, downloaded, exported, or collaborator-retained copies may remain outside Filmadex's control.

Filmadex may retain aggregated or de-identified information for longer periods.

15. Security

Filmadex uses commercially reasonable administrative, organizational, and technical safeguards designed to protect personal information.

Safeguards may include:

• authentication;
• access controls;
• role-based permissions;
• restricted administrative access;
• encryption in transit;
• infrastructure protections;
• monitoring;
• security logging;
• backups;
• incident-response procedures; and
• service-provider security obligations.

No internet service, storage system, or transmission method is completely secure.

Filmadex does not guarantee that information will never be lost, accessed, altered, disclosed, or destroyed.

You are responsible for:

• protecting credentials;
• protecting devices;
• selecting appropriate collaborators;
• managing project permissions;
• maintaining backups;
• using secure networks; and
• promptly reporting suspected unauthorized access.

16. Privacy Rights

Depending on your location and applicable law, you may have rights to:

• access personal information;
• obtain information about processing;
• correct inaccurate information;
• request deletion;
• request portability;
• restrict processing;
• object to processing;
• withdraw consent;
• opt out of certain marketing;
• opt out of legally defined sale or sharing;
• limit certain uses of sensitive information;
• appeal a denied request;
• lodge a complaint with a regulator; and
• receive equal service without unlawful discrimination.

Rights are subject to:

• identity verification;
• legal exceptions;
• security concerns;
• the rights of other people;
• technical feasibility;
• contractual roles;
• applicable retention duties; and
• whether Filmadex acts as controller or processor.

To submit a request, email:

[email protected]

Include:

• your name;
• your account email;
• the right you wish to exercise;
• the relevant account or project; and
• sufficient information to locate the applicable records.

Filmadex may request additional information to verify identity or authority.

Authorized agents may submit requests where permitted, but Filmadex may require proof of authorization and direct identity verification.

Manifestly unfounded, excessive, repetitive, fraudulent, or unverifiable requests may be denied or subject to legally permitted fees.

17. Customer-Controlled Project Data Requests

When Filmadex processes personal information solely on behalf of a project owner or organizational customer, Filmadex may:

• notify the customer of the request;
• direct the requester to the customer;
• refrain from responding except on the customer's instructions;
• assist the customer where legally required; or
• respond directly where required by law.

The project owner or organizational customer is responsible for determining whether and how the request should be fulfilled.

18. California Privacy Information

This section applies only to the extent California privacy law applies to Filmadex or the relevant processing.

California residents may have rights to request:

• categories of personal information collected;
• specific pieces of personal information;
• sources of personal information;
• purposes of processing;
• categories of recipients;
• correction;
• deletion;
• information about sale or sharing;
• opt-out of sale or sharing;
• limitation of certain sensitive-information uses;
• information regarding certain automated decision-making practices where applicable; and
• non-discriminatory treatment.

Filmadex does not currently sell personal information or share it for cross-context behavioral advertising.

A request may be sent to:

[email protected]

If Filmadex is acting solely as a service provider for another business, Filmadex may direct the request to that business.

19. European Economic Area and United Kingdom Information

Where applicable, individuals in the European Economic Area or United Kingdom may have rights under the GDPR or UK GDPR.

They may also have the right to complain to the data-protection authority in their country.

Okliko Inc. may be required to appoint:

• a European Economic Area representative; or
• a United Kingdom representative.

When legally required and appointed, the applicable representative's contact information will be added to this Policy.

Filmadex has not designated a formal data protection officer unless expressly stated in an updated version of this Policy.

Questions may be sent to:

[email protected]

20. Children and Minors

Filmadex is intended only for users who are at least 18 years old.

Filmadex does not knowingly permit minors to create accounts or knowingly collect personal information directly from children.

Users may not upload personal information concerning a child or minor unless Filmadex has expressly agreed to the processing and all legal requirements have been satisfied.

If you believe information concerning a minor has been submitted, contact:

[email protected]

21. Public and Shared Content

Information you intentionally publish or share may no longer be private.

Recipients may:

• copy it;
• save it;
• record it;
• redistribute it;
• publish it elsewhere;
• combine it with other information; or
• use it in ways Filmadex cannot control.

Search engines, social networks, caching services, and archival services may retain copies.

You should not publish personal information or project content unless you accept these risks.

22. Third-Party Services and Links

Filmadex may contain links to, display information from, or interact with third-party services.

Third parties control their own privacy practices.

Filmadex is not responsible for a third party's:

• privacy policy;
• security;
• content;
• data collection;
• tracking;
• retention;
• decisions; or
• services.

Review third-party policies before providing information or enabling an integration.

23. Google Workspace API Data

Filmadex's use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace API data is used only to provide the user-facing Google integration requested by the user and is not used to train or improve generalized artificial intelligence or machine-learning models.

24. Changes to This Policy

Filmadex may update this Policy to reflect changes in:

• the Service;
• technology;
• data practices;
• providers;
• law;
• regulation; or
• business operations.

The revised Policy will state its updated effective date.

Where legally required or reasonably appropriate, Filmadex will provide additional notice of material changes.

25. Contact

Filmadex is a product operated by Okliko Inc.

Privacy requests, legal questions, billing inquiries, and other communications may be sent to:

[email protected]