Privacy policy

Who we are

SetSnitch is made by SetSnitch Oy (business ID 3662364-8), Jokikatu 36c, 06100 Porvoo, Finland. We are responsible for the personal data described here, except where we handle it for a production, as explained under Productions and their crew. Write to support@setsnitch.com with any question about your data.

What we collect

• Your account. Your name, email address and profile photo, and how you sign in: email, Google or Apple. If you sign in with Apple and hide your email, we only receive Apple's relay address.
• What productions put into SetSnitch. Call sheets, schedules, scripts, shot lists, camera maps, photos, documents and notices. Call sheets usually list the crew and cast by name, with their job, call time and contact details.
• What happens on the shooting day. The running order, when each scene and each phase started and ended, who marked it, and when the day wrapped.
• Your device. The tokens that let us send notifications and keep the lock-screen card up to date, the app version, and the technical logs every web service keeps, such as your IP address.
• Voice. Spoken commands are recognised on your phone, so SetSnitch receives what you said as text, never the audio. If you allow it, the words of a spoken call also go to one of our AI providers to understand what you meant, never with the audio or the name of anyone on your crew or cast. SetSnitch doesn't keep the words, except when a spoken call adds a shot, which is described with them.
• Location. The app reads your location only when you tap “Use my location” to set a shooting day's sunrise and sunset, and saves that place with the day. It never follows where you go.
• A record of sensitive actions. When someone opens or downloads a document, changes who is on a production, or deletes a production or an account, we keep a short record of who did it and when, never the document's contents or anyone's contact details.
• Visits to the website. When you open the home page or the Nest's page on setsnitch.com, we count the visit: the page, the site or link that brought you there, the country and city your connection comes from, and the browser, operating system and kind of device you use. Counting uses no cookies and keeps nothing that says who you are. It happens only on the website, never in the app.

How we use it

• To run the service: show each person their day, keep everyone on the production in sync, send notifications, and keep the production's records.
• To read documents and photos and draw storyboards for you, when you ask (see AI in SetSnitch).
• To answer support requests, keep the service secure and fix problems.
• To see how many people visit the website and which sites and links bring them there.

We don't sell personal data, we don't show ads, and we don't track you across other apps or websites.

Productions and their crew

When a production company or its team puts crew and cast details into SetSnitch, the production decides what goes in and why. For that data the production is the controller and we process it on the production's behalf. If you appear on a production's call sheet and have questions about your details, ask the production, or write to us and we will pass the question on.

AI in SetSnitch

Some features use AI: reading call sheets, scripts, shot lists and photos into a working day, drawing storyboard sketches, answering questions you ask the Snitch, and understanding floor calls said in your own words. When you use one of them, the content it needs is sent to one of our AI providers, Anthropic, OpenAI or TypeSafe AI, which use it only to give the result back to us.

None of them uses what we send to train its models. Anthropic and OpenAI keep it for at most 30 days to check for misuse, and longer only if it is flagged as misuse or the law requires it. TypeSafe AI keeps it only as long as it needs to provide its service. A storyboard sketch is drawn from a short description of the shot, and SetSnitch takes the names of real people and characters out of it first.

The app asks for your permission before it first sends anything to an AI provider, and you can say no: building a day by hand and everything on the shooting day work without it. Understanding floor calls in your own words asks for its own permission.

Who else handles data for us

• Lauri Laukkanen Oy (Finland, business ID 3142621-5): holds our accounts with the providers below until they move to SetSnitch Oy.
• Vercel (United States): hosting for the website and the app, and counting visits to the website.
• Supabase (Frankfurt, Germany): the database and stored files.
• Clerk (United States): sign-in and accounts.
• Anthropic, OpenAI and TypeSafe AI (United States): the AI features, when you use them.
• Resend (United States): email.
• Apple: notifications, the lock-screen card, Sign in with Apple and speech recognition.
• Google: sign-in, if you choose to sign in with Google.
• Map, place and weather services: Geoapify (EU), komoot (Germany), the OpenStreetMap Foundation (United Kingdom), FOSSGIS (Germany), Private.coffee (Austria), OpenFreeMap and Open-Meteo (Switzerland). They receive place names and coordinates to find places, draw maps and give sunrise, sunset and weather, and nothing else from SetSnitch.

Each of them handles the data only to provide their part of the service. When data leaves the EU and EEA, the transfer relies on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.

How we protect it

• Everything travels encrypted, and the database and stored files are encrypted where they are kept.
• Every request is checked on our servers against the production it is about: who you are, whether you are on that production, and what your role there lets you see.
• Documents and photos are private. They open through links that stop working within an hour, and a PDF carries the reader's name unless the production turns that off. The one public picture is a production's cover, which is shown like a poster.
• Opening and downloading documents, and changes to who is on a production, are recorded as described above.

How long we keep it

• Your account stays until you delete it.
• A production's data stays until its owner deletes the production. Deleting it removes everything in it: its days, crew list, documents, stored files and messages.
• Deleting your account removes your personal data straight away. Copies in our backups disappear as those backups expire, within 30 days.
• Records that belong to a production, such as when a scene was shot or a notice you sent, stay with the production, which decides how long to keep them.
• Working copies made while reading a call sheet are deleted 30 days after the import is finished.
• The record of sensitive actions is kept for 12 months.
• Website visit counts say nothing about who you are, and what tells one visit from the next is forgotten within 24 hours.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it. You can download your data and delete your account yourself: in the app, tap your profile photo on Your productions, then Your account; on the website, go to Your account. For anything else, write to support@setsnitch.com.

You can also complain to the Office of the Data Protection Ombudsman in Finland, tietosuoja.fi.

Children

SetSnitch accounts are for people aged 16 and over. Productions may record details about child actors, such as call times and working hours, so they can follow the rules on children's work. That data is handled for the production, as described under Productions and their crew.

Changes

When this policy changes, the date at the top changes with it, and when a change matters to you, the app tells you.