Privacy Policy

This policy explains what we collect, why we collect it, who can see it, and what you can do about it. We've written it in plain English on purpose. If anything here is unclear, contact usand we'll fix the wording, not just answer the question.

Who we are

Screen Synergy provides a digital slate (a professional profile and contact card) for people working in the screen industry: film, TV, streaming, documentary, animation, VFX, games, advertising and XR. The service is operated by Screen Synergy Pty. Ltd. (ACN 700 190 067, ABN 91 700 190 067) of Gold Coast, Queensland, Australia, which is the data controller for the personal data described in this policy. For privacy matters, email admin@screensynergy.id or use the contact form (topic: Privacy).

A note for EU and UK visitors: we are in the process of appointing our EU representative (GDPR Art. 27) and UK representative. Until they are in place, new signups from the EU and UK are paused; this page will name both representatives once appointed.

Who this policy covers

It covers three groups of people, and the differences matter:

• Account holders: you signed up and built a slate. Most of this policy is about you.
• Visitors: you viewed someone's slate, scanned a QR, or saved a contact. We collect very little about you, and what we do collect is described under “Visitors and analytics” below.
• People our users tell us about: you filled in a contact form on someone's slate, wrote them a review, or were named by them. See “Other people's data” below.

What we collect from account holders, and why

What we deliberately do not collect

• We never write visitors' IP addresses to our database. When someone views a slate, we record the country and city our hosting platform derives at the edge, plus browser type and referring site. The IP address itself is used only transiently, to deliver the page and to rate-limit abuse, and is never stored by our application. (Our infrastructure providers keep short-lived operational logs to run their networks, like every host on the internet.)
• We never see or store card numbers. Payments go directly to Stripe. We hold only your plan, subscription status and a Stripe customer reference.
• No advertising or tracking cookies. The only cookies we set keep you signed in. No third-party ad tech runs on this site, and we don't use analytics trackers on visitors beyond the slate statistics described here.
• We don't sell personal data, and we don't use your content or data to train AI models.

Public by design: what the world can see

Screen Synergy is a publishing tool, and honesty about that matters more than legalese: when you publish your slate, it is a public web page. Anyone with the link can view it and search engines can index it. Specifically:

• Your slate and full profile show whatever you've added: name, role, photo, links, reels, and any availability or hiring signals you switched on. Contact fields marked connections only stay hidden until you accept someone.
• Leaderboards display published profiles with aggregate numbers (views, hype, connections, endorsements) by craft and region. They only ever include published slates.
• Reviews, endorsements and hype counts on your profile are visible to its visitors; that's their purpose.
• Unpublishing your slate takes all of it offline immediately; search engines may take time to drop their cached copies.

Visitors and analytics

When you view someone's slate, here is everything that happens, exactly:

• We record the event (page view, link click, contact saved) with country, city, referrer and browser type, and never your IP address, as described above.
• If you are signed in to Screen Synergy, your view may be associated with your account so the features you'd expect (connections, leads) work. If you'd rather browse without that, switch on Incognito browsing in Settings; your visits are then recorded anonymously, always.
• Slate owners see aggregate statistics. Detailed event rows are deleted automatically on a nightly schedule once they're older than the reporting window; only daily totals are kept long-term.
• Owners viewing their own slate are excluded from their own statistics, so the numbers describe real visitors.

Cookies

We set exactly two kinds of cookie, both first-party:

• Authentication cookies from Supabase, our auth provider. They keep you signed in.
• A referral cookie (sc_ref). If you arrive through another member's invite link, it remembers that member's code for up to 30 days so they get credit if you sign up. It holds a referral code, not your identity, never follows you to other sites, and is read once at signup.

That's the complete list. There is no cookie banner because neither requires consent: no advertising, no cross-site tracking, no third-party cookies. The Cookie Policy has the full detail.

Where your data lives, and transfers

Our database and authentication are hosted by Supabase on AWS in the United States (N. Virginia). The application runs on Vercel. Images you upload are stored in Cloudflare R2. We chose a single location deliberately: your connections, reviews and leaderboards are one graph, and splitting it across regions would break the product.

If you are in the UK, EU, Australia or anywhere outside the US, your data is transferred to and processed in the United States under appropriate safeguards: standard contractual clauses and, where our processors are certified, the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards.

Who processes data for us

A short list, each under a data processing agreement, each doing one job:

We add or change processors only with equivalent protections, and this table is updated when we do.

Wallet passes, vCards and your email signature

• Adding your slate to Apple or Google Wallet sends the pass contents you configured (name, role, chosen fields, your QR) to Apple or Google under their terms. You choose what the pass shows, field by field.
• Saving a contact (vCard) hands your chosen details to the other person's device. At that point it's in their address book, outside our systems. You can exclude your photo from vCards in Settings.
• The email signature you generate contains only what you put in it, and lives in your email client, not with us.

How long we keep things

Deleting your account

Settings → Danger zone. Here is exactly what happens, and we mean each word literally:

• Immediately: your slate and full profile go offline and return a not-found page. You disappear from leaderboards. Nobody can view your pages, including you.
• Immediately: any paid subscription is cancelled. You will not be charged again.
• For 30 days: we keep your data so you can change your mind. Sign back in, choose “Keep my account”, and everything is restored exactly as it was. We show you the exact deletion date when you confirm, and that date never moves. This window also protects you: if someone else gets into your account and deletes it, you can undo it.
• After 30 days: your account and everything in it (profile, slate, links, connections, coin history, notifications) is permanently erased and cannot be recovered by anyone, including us.
• What survives, and why: invoices at Stripe (tax law); reviews you wrote on other people's profiles stay visible under the name you typed but are unlinked from any account; encrypted database backups roll over on schedule and are never used for anything else, so data in them is beyond use until overwritten.

Your rights

These come from the GDPR (EU/UK) and the Australian Privacy Act, and we extend them to everyone, wherever you live. None of them ever costs money or requires a subscription.

• Access & portability: Settings → Your data → Download my data. An instant, machine-readable JSON file of everything we hold about you.
• Correction: edit your profile at any time; it is your data in the most literal sense.
• Erasure: the deletion flow above, self-service, no email required.
• Objection & restriction: object to analytics or ask us to restrict processing via the contact form (topic: Privacy); incognito browsing is available in-product today.
• Complaint: to your local authority, whether that's the ICO (UK), the OAIC (Australia), or your EU data protection authority. We'd appreciate the chance to fix it first, but you don't owe us that.

Other people's data

Some data on Screen Synergy is about people who never signed up. Plainly:

• Leads: when you fill in a contact form on someone's slate, your name and details go to that person so they can respond; that is the form's stated purpose. Unanswered leads expire automatically.
• Reviews: writing a review publishes your typed name and words on that person's profile. Negative reviews are held for moderation before appearing. You can delete your own review; profile owners and visitors can report abusive ones.
• To our users: contacts you save and leads you accept are other people's personal data. Use them for the purpose they were shared, and delete what you no longer need.
• If data about you appears on someone's profile and shouldn't, use the report tool on that profile or the contact form. We moderate and remove.

When we may disclose information

Beyond the processors above and what you've chosen to publish, we disclose personal data only in these situations:

• Legal requirements: if a law, regulation, court order or valid governmental request compels us. Where the law allows, we'll tell you before complying.
• Protecting people and the service: where reasonably necessary to enforce our Terms, prevent fraud or abuse, or protect the rights, property or safety of our users, the public, or Screen Synergy.
• Business transfer: if Screen Synergy is ever acquired, merged, or sells its assets, your data may transfer as part of that transaction. It would remain subject to protections at least as strong as this policy, and we'd notify you before any change took effect.

We have never sold personal data, and a business transfer clause is not a licence to start.

What we don't verify, and what isn't ours

• Profiles are authored by their owners. Names, roles, credits, availability and links are claims made by the member, not facts verified by us. We provide report and moderation tools, but you should apply the same judgement you would to any professional profile on the internet.
• Links lead off-platform. Slates link to IMDb, Vimeo, casting platforms, socials and personal sites. Those services have their own privacy practices; this policy stops at our edge.

Children

Screen Synergy is for working professionals and is not intended for anyone under 16. We don't knowingly hold children's data; if you believe we do, contact usand we'll delete it.

Security

Data is encrypted in transit and at rest. Access rules are enforced in the database itself (row-level security), not just in the app, so a bug in one screen cannot expose another person's rows. Billing tables are reachable only by the server. If a breach ever affects your personal data, we will notify the relevant regulator within 72 hours and tell you directly if you are at risk.

We should also be honest about the limit every service shares: no method of transmission or storage is absolutely secure, and no one can truthfully guarantee it. We commit to the safeguards above, to fixing weaknesses when found, and to telling you the truth quickly if something goes wrong.

Changes to this policy

If we make a material change, we tell you before it takes effect, not after. The date at the top is always the current version, and the deletion window shown on this page is read live from our systems, so it can never drift from what the product actually does.