Privacy Policy

This Privacy Policy explains how Production Central ("Production Central," "we," "us") collects, uses, shares, and protects personal information when you use the Production Central Service and visit productioncentral.org.

Where we process personal data on behalf of a business customer as a processor, our Data Processing Addendum governs that processing.

1. Information we collect

Information you provide

• Account and profile data — name, email, password, company, role, and avatar.
• Billing data — billing contact and, via our payment processor, payment details.
• Content — files, messages, and other data you submit to the Service.
• Support and communications — messages you send us.

Information collected automatically

• Usage and device data — pages viewed, features used, IP address, browser, and device identifiers.
• Cookies and similar technologies — see our Cookie Policy.

Information from third parties

• Single sign-on and OAuth providers (for example, when you log in with a third-party account).
• Integrations you connect and analytics or fraud-prevention partners.

2. How we use information

• To provide, maintain, and secure the Service.
• To authenticate users and process transactions.
• To respond to support requests and communicate with you.
• To analyze and improve the Service and develop new features.
• To send administrative and, where permitted, marketing messages (you can opt out).
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.

3. Legal bases for processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the bases of: performance of a contract; our legitimate interests (such as securing and improving the Service); your consent (which you may withdraw); and compliance with legal obligations. See our GDPR & UK GDPR page for more.

4. How we share information

We do not sell your personal information. We share it only:

• With service providers and sub-processors who process data on our behalf — see our Sub-processors list.
• With other users when you collaborate or share content.
• For legal reasons — to comply with law, respond to lawful requests, or protect rights and safety.
• In a business transfer such as a merger, acquisition, or sale of assets.
• With your consent or at your direction.

5. International transfers

We are based in California, USA, and process personal data in the European Union (our application, database, and cache are hosted in Amsterdam, Netherlands) and in the United States (uploaded files are stored in Cloudflare R2 in Eastern North America). Because data may be transferred between these regions and your own country, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum where applicable.

6. Data retention

We retain personal data for as long as needed to provide the Service and for legitimate business or legal purposes. When data is no longer needed, we delete or anonymize it. After account closure we retain or delete Customer Content as described in our Terms of Service and Data Processing Addendum.

7. Security

We use administrative, technical, and physical safeguards to protect personal data — see our Security page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. See GDPR & UK GDPR and our California Privacy Notice. To exercise your rights, contact [email protected].

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact [email protected].

10. Changes and contact

We may update this policy from time to time and will post the new effective date. For any privacy question — including to exercise your rights or reach our data protection contact — email us at [email protected].