FILMYLOG PRIVACY POLICY
Effective date: 06/08/2026 Version: 1.0.0

1. About this policy
This policy explains what personal data Filmylog collects, why we collect it, what we do with it, how long we keep it, and the rights you have over it.
Filmylog is operated by Filmylog Private Limited, a company incorporated in India, with its registered office at 1171, Solitaire Corporate Park, near Technopolis Knowledge Park, Andheri, Chakala MIDC, Mumbai 400093, Maharashtra, India. CIN: [FILL: CIN]. In this policy, "Filmylog", "we", "us" and "our" mean Filmylog Private Limited.
For the personal data described here, Filmylog is the Data Fiduciary. That means we decide why and how your personal data is processed, and we are accountable for it.
If anything here is unclear, write to us at team@filmylog.com and we will explain it.

2. Filmylog is for adults
Filmylog is only for people aged 18 and over. We do not knowingly collect the personal data of anyone under 18.
We do not permit accounts for or on behalf of a person under 18, including an account registered in an adult's name that functions as a minor's profile. If we learn that an account belongs to or represents a person under 18, we will remove it and delete the data.
If you believe we hold a minor's personal data, tell our Grievance Officer and we will act on it.

3. What we collect, and why
We collect only what the Platform needs to work. This section lists it in full.
3.1 Information you give us when you create an account
Account Type

What we collect: Individual or Company
Why: To set up the correct account and provide the right features.
Contact Information

What we collect: Phone number, email address, or Google account
Why: To create your account, verify your identity, sign you in, and contact you about your account and security.
Password

What we collect: Password
Why: To keep your account secure.
Username

What we collect: Username
Why: To identify your account on Filmylog.
Personal Information

What we collect: Full name, date of birth, gender
Why: To identify you, verify your age, complete your profile, and personalize your experience.
Profile Information

What we collect: Location, professional role, profile photo
Why: To help other professionals discover you and recommend relevant jobs, people, and opportunities.
For a company account we collect the company name, company type, location, date of incorporation, the account handler's full name, and the account handler's date of birth. The date of incorporation is a company record. Only the account handler's date of birth is used for the age check.
3.2 Information you add to your profile
Cover photo, headline, About text, credits (project or event name, year, role, type, and any description or media you attach), portfolio items (photo, video, audio, document), education entries, and your Get Found fields.
We use these to display your profile and to make you findable in search. Your Get Found fields feed Advanced Search even where you have hidden a field from display on your profile. Hiding a field controls what visitors see; it does not remove the field from search matching. This is explained where you set it.
3.3 Information created as you use Filmylog
Posts and comments, applause, spotlights, and shares. Messages you send and receive, and their attachments. Jobs you post, save, apply to, offer, accept, decline, withdraw from, or mark complete. Requirement responses you submit, including text, media you attach or record in the app, and portfolio items you share. Bookmarks, including the projects and roles you organise them into. Follows and connections. Saved searches and their alert settings. Reports you make. Your notification settings.
We use these to provide the features they belong to, to show your activity to the people it is meant for, and to decide what to show you on the Floor and in Recommended.
3.4 Information about your device and use
Device model, operating system and version, app version, IP address, general location derived from IP at city level, crash reports, and logs of actions taken on your account such as sign-ins, sign-in method changes, and consent given.
We use these to keep the Platform working and secure, to investigate problems, to detect and prevent fraud and abuse, and to keep the records we are required by law to keep.
3.5 Device permissions
We ask for a device permission only when a feature needs it, and only at the point you use that feature.
Camera and microphone, when you take a photo, record video, or record audio in the app. Photos, when you attach media. Where the system photo picker is used, you choose individual items and we do not receive access to your photo library. Contacts, when you sync contacts, as described in section 4.
You can change any of these in your device settings at any time. In the app, Privacy & Terms shows the current state of each and links you to those settings.

4. Contacts, invitations, and how those work
This section describes exactly what happens, because we want you to be able to check it against what we do.
4.1 Syncing contacts
When you tap Sync on the Sync Contacts screen, your device sends your contacts to our server so that we can compare them against Filmylog accounts and show you which of your contacts are already here.
We do not store your contacts. The comparison happens in memory on our server, we return the matches to your screen, and your contact data is discarded. We do not keep a copy, we do not build a record of who is in your address book, and we do not use your contacts to map your relationships.
Because we do not keep them, there is nothing to refresh in the background. Contacts are matched only when you tap Sync, and you tap Sync each time you want an updated view. We do not read your contacts at any other time.
To be accurate with you: your contacts do reach our server for the moment of matching, because the list of Filmylog accounts is held there and the comparison cannot happen on your device alone. What we are telling you is that we process them and discard them, not that they never leave your phone.
People from your contacts who are already on Filmylog may be added to your suggestions to follow. Those suggestions do not record that they came from your contacts.
4.2 Inviting someone who is not on Filmylog
Every Filmylog user has one invitation link. It is the same link every time, it belongs to you, it does not expire, and it is not created for or tied to any particular recipient. You can copy it from the Sidebar and share it yourself anywhere, or you can tap Invite on a contact from the Sync Contacts screen.
When you tap Invite, we send your invitation link to that contact by SMS or email on your behalf. The message names you as the inviter.
To send that message we use the contact's phone number or email address. We use it for that one message and nothing else. We do not add it to any list, we do not advertise to it, and we do not sell or share it.
We keep a record that an invitation was sent, when it was sent, and at whose request. That record holds the number or address it went to in encrypted form. We keep it because we are required to keep records of the messages we send, and because it protects both you and the recipient if a question arises later. We do not use it to build a picture of who knows whom, and we do not use it to contact anyone.
4.3 If you received an invitation and are not a Filmylog user
The invitation page shows the name and profile photo of the person who invited you. That is information they have already made public on their Filmylog profile.
You do not have to do anything, and we hold nothing about you beyond the record of the message we sent.
If you would rather we did not send you another invitation, use the option on that page or in the message itself. We then store that phone number or email address in a scrambled form that cannot be turned back into a number or an address, and we check every invitation against it before sending. It exists only to stop messages reaching you.
If you would rather write to us, use the request form at team@filmylog.com or contact our Grievance Officer at team@filmylog.com.
4.4 Invitation attribution
If you join Filmylog through someone's invitation link, we record that you joined through their link. We use this to show the person who invited you at the top of your suggestions, and to suggest you to each other. We do not use it for anything else.

5. What we do not do
We do not sell your personal data.
We do not share your personal data with third parties for their own advertising or marketing.
We do not show advertising on Filmylog, and we do not build advertising profiles about you.
We do not use your content, your portfolio, or your requirement submissions to train machine learning models.
We do not read your private messages except where we are required to act on a report or a lawful order.

6. On what basis we process your data
We process your personal data:
With your consent, which you give before we collect it, and which you can withdraw at any time. This covers, among other things, syncing your contacts and sending invitations on your behalf.
Because it is necessary to provide the service you asked for, such as creating and running your account, showing your profile to the people you chose to show it to, delivering your messages, and processing your job applications.
To meet our legal obligations, including our obligations as an intermediary under the Information Technology Act, 2000 and the rules made under it, our record-keeping obligations, and our obligations under telecom rules for the messages we send.
Where we rely on your consent, withdrawing it is as easy as giving it. You can do this from Privacy & Terms in the app. Withdrawing consent does not affect processing that already happened lawfully, and it may mean a feature stops working.

7. Who can see your information
Other users. Your profile, name, username, photo, cover photo, headline, location, About, credits, portfolio, education, and the Get Found fields you have not hidden are visible to other users. Your posts, comments, applause, and spotlights are visible according to where you posted them. Company profiles show a public follower count.
Your bookmark count shows how many unique users have bookmarked you. The people who bookmarked you are never named to you or to anyone else.
Hirers. When you apply to a job, the hirer sees your profile and your requirement responses. When you are offered a job, the person offering sees your profile.
People you message. The person you message sees what you send.
Service providers who work for us. We use third parties to run the Platform. They process data on our instructions only, under contract, and may not use it for their own purposes.
[CONFIRM: complete this list from the actual dependency list before launch, including every SDK in the app. It must match the Google Play Data safety declaration and the Apple privacy labels exactly.]
  • Cloud hosting and storage: Amazon Web Services [CONFIRM: region]
  • Media storage and delivery: [CONFIRM]
  • SMS delivery, for OTPs and invitations: [CONFIRM]
  • Email delivery: [CONFIRM]
  • Crash reporting and diagnostics: [CONFIRM]
  • Analytics: [CONFIRM]
  • [CONFIRM: any other SDK or service, including push notifications, support tools, session recording]
Authorities, where we are required to disclose by law, by a court order, or by a lawful request from a government agency, and where we need to establish, exercise, or defend a legal claim, or to protect the safety of any person.
A successor, if Filmylog is involved in a merger, acquisition, or sale of assets, in which case we will tell you and this policy will continue to apply until it is replaced.

8. Where your data is held
Your personal data is stored on Amazon Web Services infrastructure located in India. [CONFIRM: that every service sits in an Indian region, checked separately for the database, media storage, content delivery, backups, crash reporting, analytics, and email. If any of these sit outside India, name those countries here.]
Where personal data is transferred outside India, we do so in accordance with Indian law, and not to any country restricted by the Central Government. We put contractual protections in place with the providers who hold it.

9. How long we keep it
We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires.

Deleting your account. You can delete your account from within the app. When you ask us to delete it, we keep it deactivated for five months so that a deletion made by mistake can be undone by signing in. During that period we remind you on day 60, on day 90 and on day 120, and once more 24 hours before the account goes. At the end of five months your account and its data are permanently deleted and we confirm by email.
If you want your account removed sooner than five months, write to our Grievance Officer.

What deletion does not reach. Messages you sent that sit in another person's thread. Content of yours that another user independently saved or reposted. Records we are required by law to keep. Anonymised information that no longer identifies you. Credits on other people's profiles that name a project you also worked on.

10. How we protect your data
We use reasonable security safeguards appropriate to the data we hold, including encryption of data in transit, encryption of passwords, access controls limiting who on our team can reach personal data, logging of administrative access, and regular review of our providers.
No system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India in the manner and within the timeframes required by law.
Keep your own account secure: use a strong password, do not share it, and tell us at team@filmylog.com if you think someone has accessed your account.

11. Your rights
You have the following rights over your personal data. You can exercise all of them from Privacy & Terms in the app, under Your Data, or by writing to our Grievance Officer.
Right to access. Ask for a summary of the personal data we hold about you and what we do with it. Use Download Your Data.
Right to correction and completion. Ask us to correct data that is wrong, complete data that is incomplete, or update data that is out of date. Most profile information you can edit directly. For anything you cannot, use Correct Your Data.
Right to erasure. Ask us to delete your personal data. Use Delete Account, or write to us for anything narrower.
Right to withdraw consent. Withdraw any consent you gave, at any time, as easily as you gave it. Where a feature runs on consent you give at the moment you use it, such as syncing your contacts, choosing not to use it is the withdrawal. Nothing is kept between uses, so there is nothing left to switch off afterwards.
Right to nominate. Name a person who may exercise your rights on your behalf if you die or become unable to do so yourself. Use Nominate Someone.
Right to grievance redressal. Complain to us about anything in this policy or about how we have handled your data. See section 12.
We will respond to a request within [CONFIRM: 90 days, or the period your lawyer confirms]. We may ask you to confirm your identity before we act, so that we do not act on someone else's request about your data.

12. Complaints, and the Grievance Officer
If you have a complaint about your personal data, about content on Filmylog, or about anything in this policy, contact our Grievance Officer:
Grievance Officer: Filmylog Co-founders Email: i@filmylog.com Address: 1171, Solitaire Corporate Park, near Technopolis Knowledge Park, Andheri, Chakala MIDC, Mumbai 400093, Maharashtra, India
For complaints about content or conduct on Filmylog, we will acknowledge within 24 hours and resolve within 15 days. [CONFIRM: both figures with your lawyer.]
For complaints about personal data, we will respond within [CONFIRM: 90 days, or the period your lawyer confirms].
If you are not satisfied with our response, you may complain to the Data Protection Board of India at [FILL: Board complaint details]. You are entitled to complain to the Board about how we handle your personal data.

13. Changes to this policy
We may update this policy. Where a change is material, we will tell you in the app or by email before it takes effect.
Every version carries a version number and an effective date, shown at the top of the document in the app. Under Privacy & Terms, Your Agreements shows you which version of our documents you accepted and when.

14. Contact us
Questions about this policy: team@filmylog.com General: i@filmylog.com Filmylog Private Limited, 1171, Solitaire Corporate Park, near Technopolis Knowledge Park, Andheri, Chakala MIDC, Mumbai 400093, Maharashtra, Indi