Privacy Policy

Important notice. This policy is a product and legal-position statement, not a substitute for an attorney-drafted privacy policy. An entertainment and intellectual-property attorney should review the final documents.

1. Who we are

GREENLIGHT is filmmaking software operated by FIZZYCO LLC ("FIZZYCO," "GREENLIGHT," "we," "us," or "our"), a Delaware limited liability company. GREENLIGHT helps writers and filmmakers write screenplays, develop stories, visualize scenes, plan productions, and, when creators choose, make their work discoverable to industry professionals. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices and rights available to you. It applies to our website, applications, and related services (collectively, the "Service"). GREENLIGHT users may be located anywhere in the world, and this policy is intended to address the requirements of multiple jurisdictions, including California and the European Union and United Kingdom, as described below.

For privacy questions or requests, contact us at privacy@greenlightwriting.com or through the contact form on our About page.

2. Categories of personal information we collect

We collect the following categories of personal information, described here with reference to the categories defined by the California Consumer Privacy Act (CCPA):

Identifiers. Your name, email address, account username, IP address, and device identifiers. (CCPA category: identifiers.)

Contact and account data. Information you provide when you create an account, join a waitlist, submit an industry intake form, or contact us, such as your name, email address, company, role, and genre or format interests. (CCPA categories: identifiers; customer records.)

Your creative content. Screenplays, scenes, characters, storyboards, breakdowns, budgets, schedules, and other materials you create, import, or upload to GREENLIGHT ("Your Content"). Your Content may itself contain personal information about you or about third parties (for example, names in a cast list or contact details in a production plan). You are responsible for ensuring you have the right to provide any third-party personal information you upload. (CCPA categories: customer records; user-generated content.)

Commercial and payment information. If and when GREENLIGHT offers paid features or marketplace transactions, we will collect billing and transaction information necessary to process payments, which may be handled by third-party payment processors. (CCPA category: commercial information.)

Internet, device, and usage data. Information about how you use the Service, including features used, pages visited, session activity, and diagnostic data that helps us maintain reliability and improve the Service. This may include device type, operating system, browser type, and approximate location derived from your IP address. (CCPA categories: internet activity; geolocation data.)

Cookies and similar tracking data. Information collected through cookies and similar technologies as described in Section 7. (CCPA category: internet activity.)

Inferences. Preferences or characteristics inferred from your use of the Service, such as feature interests. (CCPA category: inferences.)

Sensitive personal information. We do not intentionally collect sensitive personal information such as social security numbers, precise geolocation, or biometric data. If you include sensitive information in Your Content or communications, you do so at your own discretion and are responsible for it.

3. Sources of personal information

We collect personal information from the following sources: directly from you, when you create an account, join a waitlist, submit forms, upload content, or communicate with us; automatically, through cookies, log files, and similar technologies when you use the Service; and from our service providers, such as email delivery, analytics, and hosting providers that process information on our behalf. We do not purchase personal information from data brokers.

4. Purposes of collection and use

We use the categories of personal information described in Section 2 for the following purposes:

Providing and operating the Service. Creating and managing your account, storing and displaying Your Content, and delivering the features you use, including AI-assisted features you choose to use and industry discovery listings you choose to publish. This includes identifiers, contact and account data, Your Content, and device and usage data.

Improving and developing the Service. Understanding how the Service is used, diagnosing problems, and developing new features. This includes device and usage data, inferences, and cookie data.

Communicating with you. Responding to your requests, sending service updates, and, where permitted, informing you about features and opportunities. This includes identifiers and contact and account data.

Safety, security, and legal compliance. Protecting the security and integrity of the Service, preventing fraud and abuse, enforcing our Terms of Service, and complying with legal obligations. This may involve any category of information described above.

Legal bases under the GDPR and UK GDPR. Where the GDPR or UK GDPR applies, we process personal information on the following lawful bases: consent (Article 6(1)(a)), for example when you choose to use an AI-assisted feature or publish a discovery listing; contract (Article 6(1)(b)), to provide the Service you requested; legal obligation (Article 6(1)(c)), to comply with applicable law; and legitimate interests (Article 6(1)(f)), namely our interests in operating, securing, and improving the Service, communicating about the Service, and protecting our rights and the rights of others, balanced against your interests and fundamental rights. Where we rely on consent, you may withdraw it at any time as described in Section 14.

5. How we share and disclose information

We share personal information only as follows, and only with categories of recipients described here:

Service providers and contractors. We share information with companies that help us operate the Service, including cloud hosting providers, email delivery providers, analytics providers, customer support tools, and AI processing providers that process Your Content to deliver AI-assisted features you request. These providers act on our instructions and are bound by contractual obligations to protect the information and use it only to provide services to us.

At your direction. For industry discovery, as described in Section 9, information you choose to include in a listing becomes visible to the industry audience you select. Nothing is shared with industry audiences unless you choose to share it.

Legal compliance and protection. We may disclose information when required by law, court order, or legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud or abuse, or to enforce our Terms of Service.

Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections and continued application of this policy or a substantially similar one.

Aggregated or de-identified information. We may share aggregated or de-identified information that cannot reasonably be used to identify you, for analytics, research, or reporting purposes.

6. Sale and sharing of personal information

We do not sell your personal information. GREENLIGHT does not sell personal information as "sale" is defined under the CCPA and similar state privacy laws, and we do not share personal information for cross-context behavioral advertising. We have not sold or shared personal information for these purposes in the preceding twelve months.

If our practices change, we will update this policy and provide a clear and conspicuous method to opt out of the sale or sharing of personal information, such as a "Do Not Sell or Share My Personal Information" link, before any such sale or sharing begins. California residents and residents of other states with similar laws have the right to opt out of the sale or sharing of their personal information at any time, as described in Sections 12 and 14.

7. Cookies and tracking technologies

We use cookies and similar technologies (such as local storage and log files) to operate the Service. Cookies are small data files stored on your device. We use the following types:

Strictly necessary cookies. Required for core functionality such as keeping you signed in and remembering your preferences. The Service cannot function properly without these.

Functional cookies. Used to remember choices you make, such as display settings.

Analytics cookies. Used to understand how visitors use the Service so we can improve it. These collect aggregated usage information.

We do not currently use third-party advertising cookies or cross-site tracking for advertising purposes. You can control cookies through your browser settings, including by blocking or deleting cookies. If you disable cookies, some features of the Service may not work properly. Cookie-based information is retained as described in Section 10 and is handled according to the purposes in Section 4.

8. AI-assisted features

GREENLIGHT's AI features are designed to support the filmmaker's work. They do not generate your stories: AI cannot write your screenplay, invent your characters, or decide what your story should be. When you use AI-assisted features, such as visual storyboards generated from your scenes, AI-assisted voice table reads, script analysis, or production planning assistance, the relevant portions of Your Content are processed to deliver the feature you requested, which may involve trusted third-party service providers acting on our instructions under the safeguards described in Section 5. We process this information only to deliver the requested feature and to maintain the reliability of the Service. We do not sell your personal information, including information processed through AI-assisted features. AI outputs may contain errors and should be reviewed by you or an appropriate professional before reliance.

9. Industry discovery and sharing

GREENLIGHT may offer features that allow you to make projects discoverable to verified industry professionals such as producers, studios, distributors, and agencies. Nothing is shared with industry audiences unless you choose to share it. When you list or submit a project for discovery, the information included in that listing becomes visible to the industry audience you selected, according to your settings. You may modify or withdraw a listing through your account settings, after which the listing will no longer be presented to new industry viewers within a reasonable period, although information already viewed or independently retained by industry participants is outside our control. Review your listing carefully before publishing it.

10. Data retention

We retain personal information for as long as necessary to provide the Service and as required or permitted by applicable law. Our retention practices by category are as follows:

Account and contact data. Retained while your account is active and for a reasonable period after closure to allow reactivation, resolve disputes, and meet legal obligations.

Your Content. Retained until you delete it. You may delete Your Content at any time; deleted content is removed from our active systems within a reasonable period, although residual copies may persist in backups for a limited time before being overwritten.

Usage, device, and cookie data. Retained for a limited period sufficient for security, analytics, and service improvement, after which it is aggregated, de-identified, or deleted.

Communications. Support and contact correspondence is retained as needed to address your request and maintain service records.

Where retention is required by law, for tax, accounting, or legal proceedings, or to enforce our agreements, we retain information for the period required. When information is no longer needed, we delete or de-identify it.

11. Security measures

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls limited to personnel who need access to perform their duties, and contractual protections with service providers. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for activity under your account. If you believe your account has been compromised, contact us promptly at privacy@greenlightwriting.com.

12. Your rights under California and other US state privacy laws

If you are a California resident, the CCPA and the California Privacy Rights Act (CPRA) provide you with the following rights, and we extend comparable handling to residents of other states with similar privacy laws where applicable:

Right to know. You may request the categories of personal information we have collected about you, the categories of sources, the purposes of collection, the categories of third parties with whom we share it, and the specific pieces of personal information we hold about you.

Right to delete. You may request deletion of personal information we have collected about you, subject to exceptions permitted by law (for example, information needed to complete a transaction, ensure security, or comply with legal obligations).

Right to correct. You may request correction of inaccurate personal information we maintain about you.

Right to opt out of sale or sharing. You may opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. As stated in Section 6, we do not currently sell or share personal information for these purposes.

Right to limit use of sensitive personal information. You may request that we limit the use and disclosure of your sensitive personal information to what is necessary to perform the Service. We do not intentionally collect sensitive personal information beyond what is described in Section 2.

Right to non-discrimination. We will not discriminate against you for exercising your privacy rights, including by denying the Service, charging different prices, or providing a different quality of service.

You may designate an authorized agent to make a request on your behalf as described in Section 14.

13. Your rights under the GDPR and UK GDPR

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction applying similar data-protection law, you have the following rights, subject to applicable law and its exceptions:

Access. The right to obtain confirmation of processing and a copy of your personal data.

Rectification. The right to have inaccurate personal data corrected and incomplete data completed.

Erasure. The right to have your personal data deleted in certain circumstances, for example when it is no longer necessary for the purposes collected.

Restriction. The right to restrict processing in certain circumstances, for example while the accuracy of data is contested.

Data portability. The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where processing is based on consent or contract and carried out by automated means.

Objection. The right to object to processing based on our legitimate interests, and the absolute right to object to processing for direct marketing purposes.

Withdraw consent. Where processing is based on your consent, the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

FIZZYCO LLC is the data controller for personal information processed in connection with the Service. You also have the right to lodge a complaint with your local data protection supervisory authority, such as the authority in your EU member state of residence or the UK Information Commissioner's Office.

14. How to exercise your rights

To exercise any of the rights described in Sections 12 and 13, contact us at privacy@greenlightwriting.com or submit a request through the contact form on our About page. Include enough information for us to understand your request, such as the right you wish to exercise and the email address associated with your account.

Verification. To protect your information, we will verify your identity before fulfilling a request, typically by matching the information you provide against the information associated with your account. If we cannot verify your identity, we may ask for additional information or decline the request as permitted by law.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require written permission signed by you confirming the agent's authority, and we may need to verify your identity directly.

Response timing. We will respond to verifiable requests within 45 days of receipt, as required by the CCPA, and within one month under the GDPR, with extensions permitted by applicable law where a request is complex or numerous. If we cannot fulfill a request, we will explain why, subject to legal limits on disclosure.

We do not charge a fee to process requests unless a request is manifestly unfounded or excessive, as permitted by law.

15. International data transfers

The Service is operated in the United States, and information we collect is stored and processed in the United States. If you access the Service from outside the United States, your personal information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. By using the Service, you acknowledge this transfer. Where required by applicable law, we implement appropriate safeguards for international transfers, such as reliance on adequacy decisions where available, standard contractual clauses approved by the European Commission or the UK, and supplementary technical and organizational measures. Contact privacy@greenlightwriting.com for further information about the safeguards we apply.

16. Children's privacy

GREENLIGHT is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act (COPPA), we will delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@greenlightwriting.com so we can delete it. Where parental consent is required, we will obtain verifiable parental consent before knowingly collecting, using, or disclosing a child's personal information, and parents may review, direct deletion of, and refuse further collection of their child's information by contacting us. Users under the age of 18 may use the Service only with the permission and involvement of a parent or legal guardian where required, and we do not knowingly enter into binding commercial arrangements with minors without appropriate parental or guardian involvement.

17. Do Not Track signals

Some browsers transmit "Do Not Track" (DNT) signals. There is currently no uniform industry standard for responding to DNT signals, and we do not alter our data collection and use practices when we receive such a signal. We will update this section if a standard is adopted that we can meaningfully follow.

18. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised version on this page and update the "Last updated" date above. If changes are material, we will provide additional notice as appropriate, such as by email or an in-service notification, before the changes take effect. We review this policy at least annually. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

19. Contact us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to contact our privacy team, reach us at privacy@greenlightwriting.com or through the contact form on our About page. FIZZYCO LLC, operator of GREENLIGHT, is the entity responsible for the processing described in this policy. We aim to respond to privacy inquiries promptly.