Privacy Policy
Goldenrod Technologies Inc. · Effective
We build software that helps productions find, model, and claim film and television incentives, and financial services that track a production's money from the first dollar in to the last dollar out. Doing that means we handle information about you and about your projects. This page explains what we collect, why, and what you can do about it. Plain English, no fine print.
If anything here is unclear, email privacy@goldenrod.app and a person will answer.
What we collect
Things you tell us. Your name, email, phone, company, and role when you contact us, request an estimate, RSVP to an event, or sign up for our newsletter. If you become a client, we also collect project information: budgets, shooting schedules, locations, cast and crew spend, vendor invoices, cost reports, contracts, and the documents required to file an incentive application. Some of that includes personal information about people on your production.
Payment and financial information. If you use our financial services, we and the regulated financial institutions we work with collect the account and verification information required to set up and operate them, including information needed for identity verification and anti-money-laundering checks.
Things we collect automatically. We use Google Analytics, and may use Plausible Analytics, to understand how the site is used — aggregate things like which pages get visited, roughly where visitors are, and which campaigns bring people in. Google Analytics sets first-party cookies (for example _ga) to tell one visit from another; we have Google's advertising features, cross-site "signals", and ad personalization switched off, IP addresses are truncated, and we do not build advertising profiles or sell this data. Plausible, when used, is cookieless. You can block analytics with a browser setting or extension and the site works the same. If you arrive from a QR code or a campaign link, the link carries a campaign tag so we know which event or channel it came from. Our servers also log standard technical data such as IP address and browser type for security and troubleshooting.
Things we get from others. Publicly available information from film commissions, incentive program administrators, and government sources. Information from partners who introduce you to us, and from service providers who help us verify identity or maintain business records.
Why we use it
- To give you what you asked for: an estimate, a demo, a proposal, a newsletter
- To deliver the service: model incentives, prepare and file applications, track compliance, produce reports
- To operate our financial services and run the payment flows you authorize
- To communicate with you about your projects and our service
- To improve our product and our incentive data
- To keep accounts secure and prevent fraud
- To meet our legal, tax, audit, and record-keeping obligations
If you are in the EU or UK, our legal bases are: performing our contract with you, our legitimate interests in running and improving the business, your consent where we ask for it (marketing email, for example), and compliance with legal obligations.
Who we share it with
Service providers who work on our behalf and are contractually bound to protect it: cloud hosting and database infrastructure, email delivery, customer and project management tools, analytics, e-signature, and accounting.
Financial institutions and payment partners, where you have asked us to set up or operate a financial service for your production.
Jurisdictions and program administrators. Filing an incentive application means submitting your project information to the state, provincial, city, or national body that runs the program, and to the CPAs or auditors they require. That is the point of the service, and we do it on your instruction.
Professional advisors such as our lawyers, accountants, and auditors.
Legal and safety, when we are required by law, subpoena, or regulator, or to protect our rights and the rights of others.
A future buyer or investor, if we are ever part of a financing, merger, or sale. Diligence disclosures are made under confidentiality obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so.
Your project data stays yours
Production budgets and financial data are competitively sensitive, and we treat them that way. We do not share your project information with other clients, and we do not use it to advantage anyone else's production. We do use aggregated and de-identified information, meaning data that cannot reasonably be linked back to you or your project, to improve our incentive models and to publish general market research.
How long we keep it
As long as we need it for the purposes above, and then for as long as the law requires. Incentive programs have audit windows that can run for years after a project wraps, and tax and financial-services rules impose their own retention periods, so records tied to a filing are generally kept for the longer of the applicable audit or statutory period. Marketing contacts are kept until you unsubscribe or ask us to remove you.
Security
We use encryption in transit and at rest, access controls that limit project data to the people who need it, audit logging, and vetted infrastructure providers. No system is perfect, and we will not tell you otherwise. If a breach affects your information, we will notify you and any required regulator as the law directs.
Your choices and rights
Anyone can ask us to access, correct, or delete their personal information, or ask for a copy of it. Email privacy@goldenrod.app. We will respond within the time the applicable law requires, and within 30 days at the outside.
Marketing email always carries an unsubscribe link, and we honor it. Unsubscribing does not stop the operational emails we need to send about an active project.
California residents have the right to know, delete, correct, and to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights. You may use an authorized agent.
EU and UK residents have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You may also complain to your local supervisory authority, though we would rather you came to us first.
Canadian residents: we follow CASL. We ask for express consent before adding you to our newsletter, we identify ourselves in every message, and every message has a working unsubscribe.
Where your information goes
We are based in the United States and our infrastructure is hosted here. If you contact us from outside the US, your information will be transferred to and processed in the US, which may have different data protection rules than your home country. Where required, we use approved transfer mechanisms such as the EU Standard Contractual Clauses.
Children
Our service is for businesses, and is not directed at anyone under 18. We do not knowingly collect information from children. If a production involves minors, any personal information about them is handled as production records under the same protections described here.
Changes
If we make a material change, we will update the date at the top and, for anything significant, tell active clients directly.
Contact us
Goldenrod Technologies Inc.
2815 Manor Road, Ste 202
Austin, TX 78722