Privacy
Plain-language privacy.
The short version: we store what your studio puts in, we host it in Canada, we don't sell it or advertise with it, and you can have it deleted with one email.
What we store
Your account (name, email, role, studio), and what your team creates: shoots, shot lists, reference screenshots, chat messages, notifications, activity history, and your studio's branding (logo, color). Passwords are stored only as secure hashes — we can't read them.
Where it lives
Your data is stored with Supabase in the Canadian region (ca-central-1). The app is served by Netlify.
Who touches it
Three processors, each doing one job: Supabase stores the data, Netlify serves the app, Resend delivers notification emails to your team. When you use AI drafting or plan review, the relevant plan text and reference images are sent to Anthropic to generate the draft — that's the whole exchange. No analytics trackers, no ad networks, no data brokers.
The walls
Every studio's data is isolated at the database level with row-level security. Members of one studio cannot read another studio's plans, chat, references, or people — the database itself refuses, regardless of application bugs.
Cookies
No tracking cookies. Your browser keeps a session token so you stay signed in, and a couple of local preferences (like your theme). That's it.
Your controls
Studio admins can remove members and revoke invites instantly. Export your plans as PDFs anytime. For a full export or complete deletion of your studio's data, email info@shotsheet.app from an admin account and we'll confirm when it's done.
Effective August 2026. As the product grows we'll update this page — materially different practices get announced, not slipped in. Questions: info@shotsheet.app.