Privacy Policy
Last updated 27 August 2026 · Tall Order Film Services Inc. · [email protected]
Short version: we collect what we need to run your workspace and nothing we can sell. Production content belongs to the production. We do not sell personal information, and we do not train public models on your scripts. This is a template for a creative-software early-access programme and should be reviewed by counsel before launch.
Who we are
SetNet is production management software operated by Tall Order Film Services Inc. ("we", "us"). This policy explains what personal information we handle, why, and what choices you have. It covers the SetNet web application, agent interfaces, portal links, and our marketing site.
For production content inside a workspace, the production or company that controls the workspace decides what is collected and who can see it; we process that content on their behalf and under their instructions.
What we collect
We collect three kinds of information: what you give us, what your workspace creates, and what our systems record to keep the Service running.
| Category | What it is | Why we have it |
|---|---|---|
| Account | Name, work email, role, workspace membership, authentication credentials. | To create and secure accounts and scope access by role. |
| Production content | Scripts and parsed breakdowns, scenes and elements, locations and addresses, schedules and events, agreements and documents, messages and notices. | To provide the Service to your production. |
| Contacts | Names, emails, phone numbers and roles of people your production works with — owners, payees, signers, vendors, crew. | To run appointment and document flows and to deliver portal links. |
| Calendar | Events and busy/free windows from calendars you connect, plus sync status. | To show real availability and avoid double-booking. |
| Technical | IP address, device and browser, timestamps, pages and actions, error diagnostics. | Security, abuse prevention, debugging and reliability. |
| Waitlist | Email, production name, role, prep start date, anything you write to us. | To respond about early access. |
How we use information
To operate the Service — hosting your workspace, parsing scripts, generating breakdowns and conflict analysis, running document and appointment flows, syncing calendars and delivering portal links.
To secure the Service — authentication, access control, fraud and abuse prevention, and incident investigation.
To support you — answering requests, debugging problems you report, and during early access, working with you on what breaks.
To improve the Service — aggregate, de-identified usage patterns tell us where the product is slow or confusing.
To communicate — service notices, and (if you asked) early-access updates. You can unsubscribe from non-essential email at any time.
AI processing
Script parsing, breakdown, conflict analysis and conversational features process your production content to produce results for your workspace. Where a third-party model provider is used, content is sent only as needed to return that result, under contract terms that prohibit using it to train their general models.
We do not use your scripts, production data or contact records to train publicly available models. Agent interfaces operate under the same role-based access as a user, and outbound communications require human review before sending.
Legal bases
Where the GDPR or similar law applies, we rely on: performance of a contract (running the Service), legitimate interests (security, product improvement, business communication), consent (marketing email, optional integrations), and legal obligation (records we are required to keep). Where we act as a processor for a production, the production is the controller.
Sharing
Within your workspace, according to the roles its administrators set. With portal recipients you choose, limited to the records you send them.
With service providers who host, transmit, secure and support the Service — cloud hosting, email delivery, error monitoring, model providers — under contracts limiting them to our instructions.
For legal reasons where we are required by law, or to protect rights, safety and the security of the Service. And with a successor in a merger or acquisition, subject to this policy.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Retention
Production content is retained while the workspace is active and for a reasonable export window after termination, then deleted. Technical logs are retained for a limited period for security and debugging. Waitlist entries are kept until you ask us to remove them or the programme closes.
Security
Encryption in transit, role-scoped access, credential hashing, least-privilege internal access and audit logging of administrative actions. Portal links are single-purpose tokens. No system is perfectly secure — if a breach affects your data we will notify affected workspaces and regulators as required.
Your choices and rights
Depending on where you live you may have the right to access, correct, delete, port or restrict use of your personal information, to object to certain processing, and to withdraw consent. You can also disconnect an integration or ask us to close your account.
Email [email protected] and we will respond within the time your law requires. If your information sits inside a production workspace, we may direct your request to that workspace administrator and help them action it. We will not discriminate against you for exercising a privacy right.
International transfers
We are based in Canada and may process information in Canada, the United States and the European Economic Area. Where transfers require a safeguard, we use approved mechanisms such as standard contractual clauses.
Cookies
The application uses strictly necessary cookies and local storage for sign-in, session security and interface preferences such as theme. Our marketing site uses privacy-respecting, aggregate analytics only. We do not run third-party advertising trackers.
Children
The Service is for professional use and not directed to children under 16. Where a production must hold information about a minor performer, that content is production content controlled by the production, and it should be limited to what coordination requires.
Changes and contact
We will post updates here and, for material changes, notify you in the Service or by email before they take effect. Tall Order Film Services Inc. — [email protected].
Privacy requests and questions: [email protected].