Privacy Policy

FESTIVAL INTELLIGENCE · Operated by THE FILM CO LLC, a Florida limited liability company

1. Controller and scope

THE FILM CO LLC, a Florida limited liability company (1516 West Ave #3, Miami Beach, Florida 33139, United States), operates FESTIVAL INTELLIGENCE at https://cannesintelligence.vip and is the controller of personal data described here unless an engagement expressly provides otherwise. Contact: thefilmcochannel@gmail.com. This Policy applies to website visitors, members, clients and business contacts.

2. Data we collect

Enquiries and orders: name, email, company, project title, format, genre/sector, rights status, market objectives and optional referral. Program Match intake may include budgets, jurisdictions, estimated qualifying spend, production dates, company domicile, financing structure, crew plans and incentive applications. Membership data: name, email, plan, billing periods, account status and login activity. Transaction data: order ID, amount, currency, Stripe customer/payment identifiers and refund records; card numbers are entered directly with Stripe. We receive client documents by email and retain administrative audit trails and internal order notes. We record Terms acceptance timestamp and version. Technical data may include IP address, device/browser information and security logs processed by hosting and identity services.

3. Why we process data; legal bases

We process information to answer enquiries, form and perform contracts, deliver reports and portal access, take payments, prevent misuse, maintain records, comply with law and defend claims. For EU/UK individuals, relevant bases include contract performance, legitimate interests in secure operation and business administration, legal obligation for tax/accounting records, and consent where specifically required (for example certain marketing or optional storage technologies). Sensitive project information is treated as confidential commercial information, not necessarily special-category personal data. We do not sell personal data.

4. Providers and disclosures

Stripe handles hosted payments and subscriptions; Netlify provides hosting, serverless functions, storage and member identity; Resend sends transactional email. Airtable holds a private catalogue of incentive programs and, as currently described, no client data. Render, Zapier and Tally supported previous workflows and may retain information from those workflows while legacy records are reviewed or deleted. OpenAI API is planned for an in-portal Ask feature, but is not described as active until launched. We may also disclose data to professional advisers and authorities where lawful. A current vendor inventory and contractual protections should be maintained.

5. AI-assisted services and planned Ask feature

Some deliverables are prepared with AI assistance and are subject to analyst review where specified. If the Ask feature launches, member prompts and any content deliberately included in those prompts may be transmitted to an AI API provider to generate responses. If introduced, the feature will be accompanied by additional disclosures concerning the provider, data handling and applicable safeguards.

6. International transfers

Our operations and vendors process information in the United States. Where EU/UK personal data is transferred to countries without an applicable adequacy decision, we will use a valid transfer mechanism where required, such as EU Standard Contractual Clauses and the UK Addendum or UK International Data Transfer Agreement, together with any necessary transfer risk assessment and safeguards.

7. Retention

Proposed retention schedule, subject to legal holds and applicable accounting requirements: enquiry records without an engagement, 24 months after last meaningful contact; client deliverables and source materials, 24 months after completion unless a shorter contractual schedule is agreed; Program Match screening assumptions/results, default 365 days (minimum configurable 30 days); financial/order/refund records, 7 years; member account data, for active membership plus 24 months; security and administrative logs, 12 months unless incident-related; Terms acceptance records, life of contract plus 7 years; marketing consent records, until withdrawn plus a reasonable suppression/audit period. Some records are not yet subject to automated deletion; we review and delete them in accordance with applicable obligations and operational requirements.

8. Security and confidentiality

We use reasonable technical and organizational measures appropriate to the information, including access controls and provider-managed payment collection. No online system is completely secure. A secure client upload and expiring delivery links are planned, not current. Please do not email highly sensitive personal data unnecessarily.

9. Your rights

Depending on your location and applicable law, you may request access, correction, deletion, portability, restriction, objection or withdrawal of consent; you may also complain to a competent supervisory authority. California and other US state residents may have additional rights subject to statutory thresholds and exceptions. We do not presently describe targeted advertising, cross-context behavioral advertising or sale/sharing of personal information. Requests: thefilmcochannel@gmail.com. We may verify identity and retain records where legally required.

10. Marketing communications

We currently send transactional communications such as order confirmations, receipts, payment links, access messages and administrative alerts. If we introduce marketing, we will implement appropriate consent or other lawful basis, unsubscribe mechanisms and records of preferences, with particular attention to EU/UK electronic marketing rules and US CAN-SPAM requirements.

11. Cookies, local storage and service workers

The Platform is a progressive web application using browser local storage and a service worker for essential portal functionality and sign-in. Based on current operations, no advertising or analytics trackers are intentionally deployed; Essential storage may not require opt-in under some regimes, but clear notice is still appropriate. If nonessential analytics or tracking is added, consent controls will be deployed where required before those technologies operate.

12. Children, changes and contact

Services are directed to business users aged 18 and over, not children. We may update this Policy to reflect operational or legal changes and will post a new version and effective date. Contact thefilmcochannel@gmail.com.