Legal

Privacy Policy

Effective October 21, 2026 · Last updated October 26, 2026

What ProProduction collects, why, who helps us run it, and the choices you have. We don’t sell your information, and the app itself uses no analytics or advertising cookies.

Who we are

ProProduction is a pre-production and on-set tool for film and video productions, at proproduction.app and app.proproduction.app. It is run by ProProduction (“we”, “us”), in Tennessee, United States.

For anything about this policy or your information, email hello@proproduction.app.

What we collect

Your account. Your name, email address, and, if you add them, your phone number, photo and time zone. Your password is stored only as a secure hash. If you use passkeys or two-step sign-in, we store what those need (public keys and an encrypted two-step secret).

Sign-in and security records. The devices and sessions signed in to your account, with the browser, approximate device type and IP address used, so you can see and end them and so we can protect accounts from misuse.

What you put in your projects. Storyboard frames and images, setups and lighting plans, set pieces, scripts, schedules, shot details, comments, call sheets, project archives and the files you upload. You choose what goes in, and it belongs to you (see our Terms).

Information about other people that you add. Projects often hold details about crew and cast: names, roles, email addresses, phone numbers, call times and, for contacts, addresses. If you add someone’s details, please make sure you’re allowed to and that they know their details are used to run the production.

Call sheets and check-in. When a call sheet is sent, we record whether it was delivered, opened and confirmed. When someone checks in on set, we record the time.

On-set information. Take logs, clip names, notes, frame grabs and camera status when you use camera control. Live video between cameras and viewers is relayed in real time and is not recorded by us; frames you capture are saved with the project.

The Camera Agent and the Mac app. When you run the Camera Agent on a computer on set, or use “Find cameras” in the Mac app, it looks for cameras on that computer’s local network and nearby over Bluetooth. Cameras it finds are listed for you; only the ones you add are connected. For each connected camera we receive its model, the name you give it, its address on your local network and its status, so your crew can see and control it. Camera logins (for example, a Canon XC Protocol user name and password) are saved only on that computer, in the agent’s own settings, and are never sent to us. Camera control can change settings on the camera when someone with permission uses it, and starting and stopping recording is logged with the take.

Paperwork and signatures. Contracts a producer uploads, the copies filled in with your details, and the signed PDFs. When you sign in ProProduction we record your name as signed, your email, the time, your IP address and browser, and a fingerprint of the document, so the signature can be checked later.

Job emails (Needs Crew). Only if you ask for them: your name, email, phone, the markets you work in, the roles you do, and whether you travel. We use them to email you about open jobs that match, from any team on ProProduction. Producers don’t see this list. Separately, a team you’ve worked with in a role (say, as a 2nd AC on one of its productions) can email you about its own jobs in that role, through ProProduction. Your job roles and rates are never shown to producers. When you apply for a job, the team that posted it sees the name, email, phone and note you give with the application. Every job email has a link to stop them.

Your crew details (My schedule). If you’re crew or cast on a production, you can sign in to My schedule with a link we email you, with no password, or create a free job account with a password. If you choose to save your details there or on a producer’s form (phone, pronouns, emergency contact, food needs, allergies and parking), we keep them once and share them only with teams that book you: a team that puts you on one of its productions gets them, and sees your changes. A team that only has you in its contacts gets your phone number. Your rates are never shared. We email you the first time a new team gets your details, and you can see every team that has them and stop sharing with any of them, or turn sharing off altogether. A team keeps what it already had; your later changes stop reaching it. Teams never see each other’s records about you.

Billing. Your plan, its renewal date, Remote Stream hours and invoices. Payments are handled by Stripe: we never see or store your full card number.

AI features. If you add your own Anthropic API key, we store it encrypted. When you use an AI feature (reading a floor plan from a PDF, or suggesting an order for a day’s shots), only what that feature needs, such as the file, the text or that day’s shots, is sent to Anthropic under your key. Without your key, nothing is sent to an AI provider. See How we use AI.

Error reports. When something breaks in the app, it sends us a short technical report (the error, the page and the browser) so we can fix it.

Usage counts. For each project, we count each month how many requests it made, how much server time it used, how many emails it sent and how much storage it holds. These are numbers, not what you did or saw, and we use them to keep the service running, plan capacity and set prices.

The demo. The demo at demo.proproduction.app runs entirely in your browser, with a sample production. What you do there stays in your browser’s own storage: it isn’t sent to us, it doesn’t make an account, and nothing in it is sent to anyone. It ends after a day, or when you end it. If you connect a phone to it with a code, the two screens pass messages through our servers, which keep none of them.

How we use it

  • To provide ProProduction: to store and sync your projects, show them to the people you share them with, send call sheets and check people in.
  • To keep accounts safe: sign-in, two-step checks, bot checks and spotting misuse.
  • To bill you, and to send the emails that go with an account: confirmations, password resets, receipts, payment problems, plan changes and call sheets you send.
  • To email you about jobs that match your markets and roles, only if you asked for that.
  • To answer you when you contact us.
  • To fix problems and improve the product, using error reports and how the service performs.

We don’t sell or rent your information, we don’t show ads, and we don’t send marketing email without asking you first.

Who can see it, and who helps us run ProProduction

People you work with. What you put in a project is visible to the people you invite, according to their role, to anyone you send a share link to, and, for organization projects, to that organization’s admins. Call sheet recipients see their own call sheet.

Our own access. ProProduction is run by a very small team. We look at an account or project only when we need to: to help when you ask us, to fix a problem, to keep the service and its users safe, or when the law requires it. Our administrators’ access lets them open any account or project, so we limit it to the people who run ProProduction and use it only for those reasons.

Services we use. These companies process information only to provide their service to us:

  • Cloudflare: hosting, our database and file storage, the live video relay for Remote Stream, the bot check on sign-in and sign-up, and sending email.
  • Stripe: payments, subscriptions and invoices.
  • Anthropic: only when you use an AI feature with your own API key.
  • OpenFreeMap and OpenStreetMap: map images. They receive your IP address and the area of the map you view.
  • Komoot (Photon), OpenStreetMap (Nominatim), MapTiler and OpenRouteService: address search, satellite images and driving times, where each is turned on. They receive the addresses and places you look up.
  • jsDelivr and cdnjs: some screens load map and document-viewing code from these public code libraries, which receive your IP address when they load.
  • The US National Weather Service: forecasts for a location. It receives that location.
  • Google Fonts: some screens load their typefaces from Google, which receives your IP address when they load.
  • Google Tag Manager and Google Analytics: on our public website only, and only if you allow it, to measure visits. Google then receives your IP address, browser details and the pages you view there.

When the law requires it. We may disclose information if we must by law, or to protect people, our users or ProProduction from harm or fraud.

If ProProduction changes hands. If the service is sold or transferred, your information would move with it, under this policy, and we would tell you first.

Cookies and storage in your browser

We use two cookies, both needed for the service: one keeps you signed in, and one recognizes a device you’ve signed in on before. When someone checks in on set, their phone also gets a check-in cookie for that shoot day, which lasts two days. The app also keeps small preferences in your browser (for example, which view you last used). Cloudflare’s bot check may set its own cookie to tell people from bots. The app at app.proproduction.app has no analytics or advertising cookies.

Our website. On proproduction.app (the public site, not the app) we ask before using Google Tag Manager to understand how people find and use the site, such as which pages are visited and where visitors came from. Only if you choose “Allow” does it load; the tools it loads, such as Google Analytics, then set cookies and receive your IP address and browser details. If you choose “Decline”, nothing loads and the site works the same. You can change your choice at any time with “Cookie settings” at the bottom of every page.

The free templates. The call sheet and shot list templates on the site keep your draft in your own browser. It isn’t sent to us, and clearing the template or your browser’s site data deletes it.

How long we keep it

We keep your account and projects while your account is open. When you delete your account, your sign-in, profile and personal projects are removed from ProProduction at once. We keep them, with your email address, for 30 days, so an account deleted by mistake can be restored if you ask us. After that they and their files are deleted for good. A project you delete on its own is kept the same 30 days. Comments you made on productions shared with others stay there, under your name, because they are part of that production’s record. Organization projects belong to the organization and stay with it.

Copies in our backups are deleted on a rolling basis, within 90 days. Payments and invoices are kept as long as tax law requires. Usage counts are kept for up to three years, for planning and pricing.

How we protect it

Everything travels over encrypted connections. Passwords are hashed, sensitive keys are encrypted, and sign-in supports passkeys and two-step checks. Access to projects follows the roles you set. No system is perfectly secure, so please use a strong password or a passkey, and tell us right away if you think your account has been misused.

Your choices and rights

  • See and correct your account details in Account at any time.
  • Take your work with you: download project archives, PDFs and frames.
  • Delete your account in Account → Profile, or ask us to.
  • Ask us for a copy of the information we hold about you, or to correct or delete it, by emailing hello@proproduction.app. We may need to confirm it’s you first.

Depending on where you live (for example, California, the UK or the European Economic Area), you may have further rights, such as to object to some uses or to complain to a data protection authority. We will honor them. If your details are in someone else’s project, we may pass your request to the project’s owner, who controls that information.

Where your information is processed

ProProduction is run from the United States, and our service providers may process information in other countries. Where the law requires it, these transfers are covered by appropriate safeguards.

Children

ProProduction is not meant for children under 16, and we don’t knowingly collect information from them. If you think a child has given us information, contact us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top. If a change matters, we’ll tell you by email or in the app before it takes effect.

Contact

ProProduction, Tennessee, United States · hello@proproduction.app