PRIVACY POLICY

Showrunner is a film and television production management platform operated by Diverse AS, a company registered in Norway. Diverse AS is the data controller for personal data processed through the Showrunner web app, the Showrunner iOS app, and the Showrunner desktop apps (together, “Showrunner”).

For privacy questions, contact us at privacy@showrunner.no.

We collect only what is needed to run a production. Specifically:

• Account data — your email address, your name, and an optional profile picture. Showrunner is passwordless: we email you a six-digit sign-in code. We never store a password.
• Production content you create — scripts, scenes, schedules, call sheets, shot lists, notes, budgets, and similar production documents.
• Contact details of cast and crew — names, roles, departments, phone numbers, email addresses, and agency details that a production adds so call sheets and schedules can be distributed. This data is entered by the production, not collected from the individuals directly.
• Locations — addresses and map coordinates for shooting locations, including any photos uploaded for them.
• Media you upload — dailies and video footage, receipt photos for expense tracking, reference images, and voice recordings attached to bug reports.
• Device tokens — if you enable push notifications, we store an Apple push token so we can notify you about call sheets, schedule changes, and messages.
• Product analytics — anonymised usage events, error reports, and session recordings that help us find and fix bugs.

We do not collect location data from your device, we do not use tracking for advertising, and we do not sell personal data to anyone, ever.

• To provide the service (contract) — signing you in, storing your production data, sending call sheets, and syncing across your devices.
• To keep the service working (legitimate interest) — diagnosing errors, preventing abuse, and improving features based on aggregate usage.
• To communicate with you (contract) — sign-in codes, invitations, and notifications you have opted into.
• To meet legal obligations — accounting records where required by Norwegian law.

The Showrunner iOS app asks for these permissions only when you use the feature that needs them, and you can revoke them at any time in iOS Settings:

• Camera — to photograph receipts for expense tracking.
• Photo library — to attach existing images to expenses, locations, and production boards.
• Microphone — to record voice bug reports.

Nothing is captured in the background. Media is uploaded only when you explicitly attach it to something in the app.

Your production data is visible to the other members of that production, according to the role and department permissions the production administrator sets. Beyond that, we share data only with the service providers that run Showrunner:

• Vercel — application hosting and delivery.
• Supabase — database and file storage (EU region).
• Mux — video encoding and playback for dailies.
• Resend — transactional email (sign-in codes, invitations).
• PostHog — product analytics and error tracking (EU region).
• Google Maps Platform — address autocomplete and map rendering for locations.
• OpenAI — optional AI assistance for script analysis and scene descriptions. Content sent to OpenAI is not used to train their models.
• Apple — delivery of push notifications you have opted into.

Each provider acts as a data processor under contract and may only process data on our instructions. Where a provider processes data outside the EU/EEA, transfers rely on the European Commission’s Standard Contractual Clauses.

Production data is retained for as long as the production exists in Showrunner, and is deleted when the production or the account is deleted. Analytics and error data are retained for up to 12 months. Sign-in codes expire within minutes and are then discarded. Backups are rotated out within 30 days.

Under the GDPR you have the right to access, correct, export, restrict, or delete your personal data, and to object to processing based on legitimate interest.

Deleting your account. You can delete your Showrunner account and all personal data associated with it at any time from your avatar → Account Settings → Delete Account in the app, or by emailing privacy@showrunner.no. Deletion is permanent and removes your profile, your personal settings, and your membership of every production. Productions that only you belong to are deleted with the account. Work you contributed to other people’s productions stays with those productions, credited to “Deleted user” — the records remain, your identity does not.

To exercise any other right, email privacy@showrunner.no. We respond within 30 days. If you are unhappy with our response you may complain to the Norwegian Data Protection Authority (Datatilsynet).

All traffic is encrypted in transit with TLS, and data is encrypted at rest. Sessions use signed, expiring tokens. Database access is restricted at the row level, and access to production systems is limited to the people who need it. No system is perfectly secure, but we treat production data — much of which is confidential and pre-release — as sensitive by default.

Showrunner is a professional tool and is not directed at children under 13. We do not knowingly collect personal data from children. Where a production adds a minor performer to a cast list, that data is entered and controlled by the production.

If we make a material change we will update the date at the top of this page and notify account holders by email before the change takes effect.