Privacy Policy

Account Information

When you create an account, we collect your name, email address, and password. Depending on your role:

• Festival Organizers: Organization name, event details, venue information, and payout details
• Filmmakers: Bio, filmography, film metadata (title, synopsis, cast, crew, runtime, format), and promotional materials
• Attendees: Ticket purchase history, event preferences, and ratings/reviews

Payment Information

All payment processing is handled by Stripe. We never see, store, or have access to your full credit card number. Stripe provides us with limited transaction data (last four digits, card brand, billing address) to display in your account.

Usage & Device Information

• Pages visited, features used, and actions taken on the platform
• Browser type, operating system, and device information
• IP address and approximate geographic location
• Referring URLs and search terms that led you to Festaiv

Film & Festival Data

When filmmakers submit to festivals or organizers create events, we collect the associated metadata — titles, descriptions, schedules, screening details, and media assets — to power the platform.

• Platform Operation: Matching filmmakers with festivals, processing tickets, managing check-ins, and enabling ratings and reviews
• AI-Powered Recommendations: Suggesting relevant festivals for filmmakers, recommending films to attendees, and helping organizers discover content that fits their programming
• Festival Analytics: Providing organizers with aggregated, anonymized data about attendance, engagement, and audience demographics
• Communications: Sending transactional emails (confirmations, tickets, updates), and — with your consent — promotional content about festivals and features
• Platform Improvement: Analyzing usage patterns to improve features, fix bugs, and develop new functionality
• Safety & Security: Detecting fraud, preventing abuse, and enforcing our Terms of Service

We do not sell your personal data. We do not share it with advertisers. We share data only with the following service providers, strictly to operate the platform:

• Stripe — Payment processing
• Resend — Transactional and marketing emails
• Vercel — Application hosting and edge delivery
• Neon — Database hosting

We may also share data when required by law, to protect our rights, or in connection with a business transfer (merger, acquisition, or sale of assets).

Between users:Certain information is shared by design — filmmakers see festival details, organizers see submission info, and attendees see published reviews. We only share what's necessary for the platform to function.

You have the right to:

• Access your personal data and request a copy
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Port your data to another service in a machine-readable format
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at support@festaiv.com. We will respond within 30 days.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., financial records for tax compliance, which we retain for up to 7 years).

Anonymized, aggregated data (e.g., overall attendance trends) may be retained indefinitely as it cannot be linked back to any individual.

Festaiv requires all users to be at least 18 years old (or the age of legal majority in their jurisdiction). We do not knowingly collect personal information from anyone under 18. If we discover that a minor has created an account or provided us with personal information, we will delete the account and associated data promptly.

If you believe someone under 18 has created an account on Festaiv, please contact us at support@festaiv.com.

If you are a California resident, you have additional rights under the CCPA:

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so this right is satisfied by default
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To make a CCPA request, email support@festaiv.comwith the subject line “CCPA Request.”

Festaiv is based in the United States. If you access the platform from outside the US, your data may be transferred to and processed in the United States. We use service providers that comply with applicable data protection frameworks, including Standard Contractual Clauses for EU/EEA transfers. See our GDPR page for more details.

We implement industry-standard security measures including encryption in transit (TLS), secure authentication, and regular access reviews. No system is 100% secure, but we work to protect your data and will notify affected users promptly in the event of a breach.

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you via email or a prominent notice on the platform. Your continued use of Festaiv after changes take effect constitutes acceptance of the revised policy.