Privacy Policy

Information We Collect

Account Information

When you create a Filmit.io account, we collect:

• Email address
• Password (stored securely as a hash — we never see or store your plaintext password)
• Account creation date

Usage Data

When you use Filmit Studio, we may collect:

• License status and subscription tier
• List of installed plugins and their versions
• Studio application version and operating system type
• Plugin install, update, and uninstall events

Payment Information

We use LemonSqueezy as our Merchant of Record. All payment processing is handled entirely by LemonSqueezy. We never see, store, or have access to your credit card numbers, bank account details, or other payment credentials. LemonSqueezy provides us with:

• Your name and email address (to link your purchase to your account)
• Transaction ID and order status
• Subscription status (active, cancelled, expired)

Analytics Data

We may use analytics services on our website to understand how visitors find and use our site. This may include standard web analytics data such as page views, referral sources, browser type, and approximate geographic location. We do not use analytics to track individual users across the web.

How We Use Your Information

We use the information we collect to:

• Create and manage your Filmit.io account
• Validate your license and deliver the correct plugin access for your subscription tier
• Deliver plugin installations, updates, and version management through Filmit Studio
• Send transactional emails (account confirmation, password resets, important service updates)
• Provide customer support when you reach out to us
• Improve our products based on aggregate usage patterns
• Detect and prevent abuse or unauthorized access

We do not sell your personal information. We do not use your data for advertising. We do not build marketing profiles from your usage.

Data Sharing & Third Parties

We share your information only with the service providers necessary to operate Filmit.io:

LemonSqueezy (Payments)

LemonSqueezy acts as our Merchant of Record and processes all payments, subscriptions, and refunds. They handle your billing information under their own Privacy Policy.

Supabase (Authentication & Database)

We use Supabase to manage user accounts, authentication sessions, and license data. Your email, hashed password, and license information are stored in our Supabase project. Supabase operates under their own Privacy Policy.

Resend (Transactional Email)

We use Resend to deliver account-related emails (password resets, license confirmations, etc.). Resend processes your email address to deliver these messages and operates under their own Privacy Policy.

Cloudflare (CDN & Delivery)

Plugin files and updates are delivered through Cloudflare's content delivery network. Cloudflare may log standard access data (IP addresses, request metadata) as part of their infrastructure. See their Privacy Policy.

We do not share your personal information with any other third parties, and we will never sell your data to advertisers, data brokers, or anyone else.

Cookies & Local Storage

Website

Our website may use cookies for essential functionality such as remembering your login state. We may also use analytics cookies to understand site usage in aggregate. We do not use third-party advertising cookies.

Filmit Studio (Desktop Application)

Filmit Studio stores data locally on your computer using standard Electron storage mechanisms:

• Authentication session tokens (JWT) to keep you signed in
• Application preferences (theme, language, window size)
• Cached license status for offline access

This data never leaves your machine except for authentication tokens sent to our servers to verify your session.

Data Security

We take the security of your information seriously and implement appropriate measures to protect it:

• All data transmitted between Filmit Studio and our servers is encrypted using TLS/HTTPS
• Passwords are hashed and salted — we never store or have access to your plaintext password
• Authentication uses secure JWT tokens with automatic expiration and refresh
• Our database access is restricted to authorized services only
• We regularly review our security practices and update them as needed

While we work hard to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to following industry best practices.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data: Retained while your account is active. If you delete your account, we will remove your personal information within 30 days.
• License and transaction records: Retained for up to 3 years after your last transaction for legal and accounting purposes.
• Usage logs: Aggregated and anonymized usage data may be retained indefinitely for product improvement. Individual usage logs are deleted within 90 days.
• Support correspondence: Retained for up to 2 years to provide context for ongoing support.

Your Rights

You have the following rights regarding your personal information:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update or correct your account information at any time through Filmit Studio or by contacting us.
• Deletion: You can request that we delete your account and all associated personal data. We will process deletion requests within 30 days.
• Export: You can request a portable copy of your data in a standard machine-readable format.
• Objection: You can object to our processing of your personal data in certain circumstances.

To exercise any of these rights, visit your Account Settings page where you can export or delete your data directly, or contact us at hello@filmit.io. We will respond to all requests within 30 days.

Children's Privacy

Filmit.io is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@filmit.io and we will promptly delete that information.

International Users

Filmit.io is based in South Carolina, United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights under those laws, including rights under the General Data Protection Regulation (GDPR). We are committed to respecting those rights. Our legal basis for processing your data includes:

• Contract performance: Processing necessary to deliver the services you signed up for.
• Legitimate interests: Improving our products and preventing abuse.
• Consent: Where you have given explicit consent for specific processing activities.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. We never have and never will.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request, contact us at hello@filmit.io.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or through Filmit Studio for material changes
• Post the updated policy on this page

We encourage you to review this page periodically. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your information, we want to hear from you.