Privacy Policy
Last updated: May 2025 · Effective immediately

The short version: We collect only what we need to run the app. We never sell your data. You can delete your account and all your data at any time. We use Firebase (Google) to store data securely.

Contents
01
Who We Are

Backlot is a mobile application that connects indie filmmakers, actors, editors, directors, and other creative professionals to find collaborators and build careers together. Backlot is operated by Lilou Benhamou, based in San Francisco, California.

For privacy-related questions, you can reach us at hello.backlot@gmail.com.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Backlot app. By using Backlot, you agree to the practices described in this policy.

02
What Data We Collect

We only collect data that is necessary to operate the App and provide our services to you. Here is exactly what we collect:

Data Why we collect it How long we keep it
Email address Account creation and login via Firebase Auth Until you delete your account
Display name Your public profile on Backlot Until you delete your account
Profile photo Your public profile picture Until you change or delete it
Cover image Your profile banner Until you change or delete it
Bio, role, location Your public creative profile Until you edit or delete it
Style tags Creative matching and Discover filtering Until you edit or delete it
Portfolio links Your public profile Until you remove them
Project data Projects you post or apply to Until you delete them
Messages In-app communication with other users Until account deletion
Vouches Reputation system Until account deletion
Followers / Following Social features Until account deletion
Notification preferences App notification settings Until account deletion
Device type / OS version Technical support and crash reporting via Firebase 90 days

We do not collect your precise GPS location, payment information, contacts, microphone or camera data (except photos you explicitly choose to upload), or any biometric data.

03
How We Use Your Data

We use the data we collect for the following purposes only:

To operate the App — creating and managing your account, displaying your profile to other users, enabling project posting and applications
To enable collaboration features — messaging, vouching, following, and the Discover tab
To send notifications — only the notification types you have enabled in Settings
To improve the App — understanding how features are used so we can make Backlot better (using anonymized, aggregated data only)
To ensure safety — detecting and preventing abuse, spam, or violations of our Terms of Service
To respond to your requests — customer support, feedback, and account issues

We will never use your data to serve you third-party advertisements. We will never sell your data to anyone. We will never use your data for purposes beyond what is listed above without first asking for your explicit consent.

04
Who We Share Data With

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

Other Backlot users — your public profile information (name, photo, bio, role, style tags, projects, vouches) is visible to other users as intended by the App. Private profile information (email, password, notification settings) is never shared with other users.
Firebase / Google — we use Google Firebase for authentication, database storage (Firestore), and file storage. Firebase processes data on our behalf under Google's privacy terms. See firebase.google.com/support/privacy for details.
Legal requirements — we may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the safety of our users or the public.
Business transfers — if Backlot is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before this happens.

That's it. No advertising partners. No data brokers. No third-party analytics beyond Firebase.

05
Your Rights

You have the following rights regarding your personal data at all times:

Access. You can view all the data on your profile at any time within the App.
Correction. You can edit your profile information at any time via Edit Profile in the App.
Deletion. You can permanently delete your account and all associated data at any time via Settings → Delete Account. Your data will be removed within 30 days.
Portability. You can request a copy of your data by emailing us at hello.backlot@gmail.com.
Opt-out of notifications. You can disable any or all notifications at any time via Settings → Notifications.
Profile visibility. You can make your profile private or hide it from Discover at any time via Settings → Privacy.

To exercise any of these rights, you can use the App directly or contact us at hello.backlot@gmail.com. We will respond within 30 days.

06
Data Retention

We keep your data for as long as your account is active. When you delete your account:

Your profile, projects, applications, and messages are permanently deleted from Firestore within 30 days
Your photos and cover images are deleted from Firebase Storage within 30 days
Your authentication record is deleted from Firebase Auth immediately
Anonymized, aggregated usage statistics (which cannot identify you) may be retained indefinitely for product improvement purposes

Note that if other users have vouched for you or referenced your work, those references may remain visible in their own profiles after your account is deleted, but your personal identifying information will be removed.

07
Security

We take the security of your data seriously. We implement the following measures:

All data is stored on Google Firebase, which uses industry-standard encryption at rest and in transit
Passwords are hashed by Firebase Authentication and never stored in plain text
Firestore security rules restrict data access so users can only read and write their own data
We regularly review our security practices as the App evolves

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you discover a security vulnerability, please report it immediately to hello.backlot@gmail.com.

08
Children's Privacy

Backlot is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If we become aware that a user is under 13, we will immediately delete their account and all associated data.

If you are a parent or guardian and believe your child under 13 has created a Backlot account, please contact us immediately at hello.backlot@gmail.com and we will remove the account.

Users between 13 and 18 must have parental consent to use Backlot, as described in our Terms of Service.

09
California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information:

Right to Know. You have the right to request information about the categories and specific pieces of personal data we have collected about you.
Right to Delete. You have the right to request that we delete your personal information. You can do this directly in the App via Settings → Delete Account.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.
Right to Opt-Out of Sale. We do not sell personal information. There is nothing to opt out of.

To exercise your California privacy rights, contact us at hello.backlot@gmail.com with the subject line "California Privacy Request." We will respond within 45 days as required by law.

10
Third-Party Services

Backlot uses the following third-party services to operate. Each has their own privacy policy:

Google Firebase (firebase.google.com) — authentication, database, and file storage. Firebase processes your data in the United States under Google's standard privacy terms.
Apple App Store (apple.com/privacy) — app distribution. Apple may collect information about your download and usage per their own privacy policy.

The App may allow you to link to external portfolio sites (Vimeo, Instagram, personal websites). We are not responsible for the privacy practices of these external services. We do not collect any data from those links — they simply open in your browser.

11
Changes to This Policy

We may update this Privacy Policy as the App evolves or as laws change. When we make significant changes, we will notify you through the App or by email before the changes take effect.

The "Last Updated" date at the top of this page always reflects when the most recent version was published. We encourage you to review this policy periodically.

Your continued use of Backlot after changes are published constitutes your acceptance of the updated Privacy Policy.

12
Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us. We take privacy seriously and will respond to all inquiries promptly.

Privacy questions & data requests
hello.backlot@gmail.com
We respond within 5 business days · California requests within 45 days