PRIVACY POLICY

Showrunner is a film and television production management platform operated by Diverse AS (org.nr. 937 775 466, Friis' gate 4, 0187 Oslo, Norway). Diverse AS is the data controller for your account data and for how you use the Showrunner web app, iOS app and desktop apps (together, “Showrunner”).

Productions are run by production companies. When a production adds personal data about other people, such as cast and crew contact details, the production company is the data controller for that data and we process it on its behalf, under our Data Processing Agreement. Questions about that data are best sent to the production first.

For privacy questions, contact us at privacy@showrunner.no.

We collect only what is needed to run a production. Specifically:

• Account data — your email address, your name, and an optional profile picture. Showrunner is passwordless: we email you a six-digit sign-in code. We never store a password.
• Production content you create — scripts, scenes, schedules, call sheets, shot lists, notes, budgets, and similar production documents.
• Contact details of cast and crew — names, roles, departments, phone numbers, email addresses, and agency details that a production adds so call sheets and schedules can be distributed. This data is entered by the production, not collected from the individuals directly.
• Locations — addresses and map coordinates for shooting locations, including any photos uploaded for them.
• Media you upload — dailies and video footage, receipt photos for expense tracking, reference images, and voice recordings attached to bug reports.
• Device tokens — if you enable push notifications, we store an Apple push token so we can notify you about call sheets, schedule changes, and messages.
• Product analytics — usage events and session recordings, only if you allow them (see “Cookies and analytics” below), plus error reports that help us find and fix bugs.

We do not collect location data from your device, we do not use tracking for advertising, and we do not sell personal data to anyone, ever.

• To provide the service (contract) — signing you in, storing your production data, sending call sheets, and syncing across your devices.
• To keep the service working (legitimate interest) — diagnosing errors, preventing abuse, and improving features based on aggregate usage.
• To communicate with you (contract) — sign-in codes, invitations, and notifications you have opted into.
• Usage analytics and session recordings (consent) — only if you allow them. You can withdraw consent at any time.
• Product news by email (consent) — only if you ticked the box for it.
• To meet legal obligations — accounting records where required by Norwegian law.

Showrunner only sets the cookies it needs to sign you in and keep you signed in. It also stores app preferences on your device, such as open tabs and light or dark mode. These are strictly necessary for the service you asked for, so they don’t need consent.

We ask before we use anything else. The first time you sign in, we ask whether we may collect usage data and session recordings with PostHog (EU region). If you say yes, PostHog stores an identifier on your device and links your usage to your account. If you say no, or haven’t answered yet, nothing is stored on your device and no session is recorded. We then only count anonymous page views and errors, using a hash of your IP address and browser that changes every day and can’t be linked back to you.

You can change your answer at any time under your avatar → Account Settings → Privacy. Your answer applies to your account on every device.

We send emails you need to use Showrunner: sign-in codes, invitations, and messages from your productions, such as call sheets. You can turn off notification emails about published scripts, schedules and new productions under Account Settings. Call sheets a production sends you directly always arrive.

We only send product news if you have opted in, and every such email lets you unsubscribe.

The Showrunner iOS app asks for these permissions only when you use the feature that needs them, and you can revoke them at any time in iOS Settings:

• Camera — to photograph receipts for expense tracking.
• Photo library — to attach existing images to expenses, locations, and production boards.
• Microphone — to record voice bug reports.

Nothing is captured in the background. Media is uploaded only when you explicitly attach it to something in the app.

Your production data is visible to the other members of that production, according to the role and department permissions the production administrator sets. Beyond that, we share data only with the service providers that run Showrunner:

• Vercel — application hosting and delivery.
• Supabase — database and file storage (EU region).
• Mux — video encoding and playback for dailies.
• Resend — transactional email (sign-in codes, invitations).
• PostHog — product analytics and error tracking (EU region).
• Google Maps Platform — address autocomplete and map rendering for locations.
• OpenAI — optional AI assistance for script analysis and scene descriptions. Content sent to OpenAI is not used to train their models.
• Apple — delivery of push notifications you have opted into.

Each provider acts as a data processor under contract and may only process data on our instructions. Where a provider processes data outside the EU/EEA, transfers rely on the European Commission’s Standard Contractual Clauses.

Production data is retained for as long as the production exists in Showrunner, and is deleted when the production or the account is deleted. Analytics and error data are retained for up to 12 months. Sign-in codes expire within minutes and are then discarded. Backups are rotated out within 30 days.

Under the GDPR you have the right to access, correct, export, restrict, or delete your personal data, to object to processing based on legitimate interest, and to withdraw consent at any time (Account Settings → Privacy).

Deleting your account. You can delete your Showrunner account and all personal data associated with it at any time from your avatar → Account Settings → Delete Account in the app, or by emailing privacy@showrunner.no. Deletion is permanent and removes your profile, your personal settings, and your membership of every production. Productions that only you belong to are deleted with the account. Work you contributed to other people’s productions stays with those productions, credited to “Deleted user” — the records remain, your identity does not.

To exercise any other right, email privacy@showrunner.no. We respond within 30 days. If you are unhappy with our response you may complain to the Norwegian Data Protection Authority (Datatilsynet).

All traffic is encrypted in transit with TLS, and data is encrypted at rest. Sessions use signed, expiring tokens. Database access is restricted at the row level, and access to production systems is limited to the people who need it. No system is perfectly secure, but we treat production data — much of which is confidential and pre-release — as sensitive by default.

Showrunner is a professional tool and is not directed at children under 13. We do not knowingly collect personal data from children. Where a production adds a minor performer to a cast list, that data is entered and controlled by the production.

If we make a material change we will update the date at the top of this page and notify account holders by email before the change takes effect.