Greenlight Film B.V. ("we", "us") is the data controller for greenlight.film. We are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Account data: Name, email address, and authentication credentials when you sign up.

Payment data: Processed by Stripe. We store your Stripe customer ID and subscription status but never your card details.

Usage data: Pages visited, projects viewed, bookmarks, ratings, and activity timestamps to improve the Platform.

Uploaded content: Screenplays and related files you submit for development.

Device data: Browser type, IP address, and device identifiers collected automatically.

• Provide and maintain the Platform and your account
• Process subscriptions, options, and purchases
• Run the AI script development pipeline on your uploaded content
• Improve our services, content quality, and recommendations
• Send transactional emails (receipts, option approvals, account changes)
• Comply with legal obligations

Contract: Processing necessary to provide our services to you (account management, subscriptions, marketplace transactions).

Legitimate interest: Analytics, service improvement, and fraud prevention.

Consent: Marketing communications (you can withdraw consent at any time).

Legal obligation: Tax records, fraud prevention, and law enforcement requests.

Account data is retained for as long as your account is active. After account deletion, we retain anonymized usage data for analytics and delete personal data within 30 days, except where required by law (e.g., financial records retained for 7 years).

Uploaded screenplays are retained until you delete them or close your account. Blockchain provenance records are permanent and immutable by design, but contain only cryptographic hashes — not personal data.

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Port your data to another service
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise any of these rights, email hello@greenlight.film. We respond within 30 days.

Your data may be processed in the United States (Convex, Anthropic, Vercel) and globally (Solana network). We ensure adequate safeguards through Standard Contractual Clauses and processor agreements compliant with GDPR Chapter V.

We implement appropriate technical and organizational measures including encryption in transit (TLS), access controls, and secure authentication. However, no system is 100% secure. If you discover a vulnerability, please report it to hello@greenlight.film.

The Platform is not intended for users under 18. We do not knowingly collect personal data from minors.

We may update this policy periodically. Material changes will be communicated via email or Platform notification. The "last updated" date at the top reflects the most recent revision.

Data controller: Greenlight Film B.V., Amsterdam, the Netherlands.

Email: hello@greenlight.film

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).