Privacy Policy
1. Overview
This Privacy Policy explains how Help Me In Post LLC ("we," "our," or "us") collects, uses, and protects information when you use Cuts Cal (the "Service"). We built this tool for post-production professionals who handle sensitive scheduling and crew information. We take that responsibility seriously.
Short version: We collect what we need to run the Service. We don't sell your data. We don't use production data for advertising. You can request deletion at any time.
2. Data We Collect
We collect two categories of data:
| Data type | Examples | Why collected |
|---|---|---|
| Account data | Email address, display name, encrypted password | Authentication and identification within the Service |
| Production data | Show names, episode labels, milestone dates, crew names, weekly rates, scheduling stamps, task assignments | Core Service functionality — storing and syncing your calendar data |
| Session data | Login timestamps, session tokens | Keeping you signed in securely |
| Usage data | Feature interactions, synchronization status, error logs, and diagnostic bundles you deliberately submit | Diagnosing bugs, reproducing support issues, and improving the Service |
| Team membership data | Which accounts have access to which shows | Enforcing per-show access control |
| Review-link secrets | Third-party review URLs and optional passwords entered by an Owner or Editor | Providing controlled project-level access to review resources |
The current invite-only beta has no subscription or billing and does not collect payment card information.
We do not use cookies for tracking or advertising. Session cookies are used solely to keep you signed in.
3. How We Use Your Data
We use the data we collect to:
- Authenticate you and maintain your session
- Store, retrieve, and sync your production scheduling data
- Enforce access control (show-level membership)
- Send invitations, password resets, and other transactional emails through Resend
- Diagnose and fix technical problems
- Comply with legal obligations
We do not use your production data (crew names, rates, milestone dates, scheduling stamps) for any purpose other than delivering the Service to you.
4. Data Sharing
We do not sell your personal information to any third party.
We share data only in these limited circumstances:
- Within your show team: Members you invite to a show can see that show's scheduling data, including crew names and milestone dates. Compensation rates are visible to show owners and, if your implementation exposes them, to Members. Review your access settings accordingly.
- Service providers: We use infrastructure providers to host and back up the Service and Resend to deliver transactional email. For diagnostic support notifications, Resend receives only the report identifier, never your message or diagnostic bundle. These providers may process only the data needed to provide those services and may not use production data for advertising.
- Legal requirements: We may disclose data when required by law, court order, or to protect the rights and safety of our users.
5. Data Retention
We retain account and active production data while your account or project is active. Diagnostic support reports are encrypted and retained for 30 days. Project snapshots use separate rolling limits of 30 manual, 30 daily, and 10 pre-restore checkpoints per project.
Operational database backups are retained on a rolling schedule of 14 daily, 8 weekly, and 6 monthly copies. Deleted data may remain in encrypted backups until those copies expire, after which it is removed through normal backup rotation. Encryption keyrings are backed up separately with restricted operator access.
When you make a verified deletion request, we remove active personal and production data within 30 days unless law requires longer retention. Customer-managed JSON import, download, and restore are not part of the beta; contact support for a supported account or project export.
6. Security
We take reasonable technical and organizational measures to protect your data, including:
- Passwords stored as bcrypt hashes (never in plaintext)
- HTTPS for all data in transit
- Per-show access control enforced server-side
- Session tokens rotated on login
- Review-link secrets and diagnostic reports encrypted at rest with dedicated keyrings
- Deliberately revealed review secrets automatically cleared from the browser after a short interval or access-context change
No system is completely secure. If you believe your account has been compromised, contact us immediately at security@helpmeinpost.com.
7. Your Rights
Depending on where you are located, you may have rights regarding your personal data, including the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate or incomplete data (most fields are editable in your Account Settings)
- Deletion: Request deletion of your account and associated data
- Portability: Request a supported export of your show data in a machine-readable format
- Objection: Object to certain uses of your data
To exercise any of these rights, contact us at privacy@helpmeinpost.com. We will respond within 30 days.
California residents (CCPA): We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of sale (which we do not do). Contact us to exercise these rights.
8. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly. Contact us if you believe a child has provided us data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice within the Service at least 14 days before changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
10. Contact Us
Privacy questions or requests:
Help Me In Post LLC
privacy@helpmeinpost.com