We build software that helps productions find, model, and claim film and television incentives. Doing that means we handle information about you and about your projects. This page explains what we collect, why, and what you can do about it. Plain English, no fine print.
If anything here is unclear, email privacy@goldenrod.app and a person will answer.
Things you tell us. Your name, email, phone, company, and role when you contact us, request an estimate, RSVP to an event, or sign up for our newsletter. If you become a client, we also collect project information: budgets, shooting schedules, locations, cast and crew spend, vendor invoices, cost reports, contracts, and the documents required to file an incentive application. Some of that includes personal information about people on your production.
Things we collect automatically. We use Plausible Analytics, which is cookieless. We do not set advertising or tracking cookies, we do not track you across other websites, and we do not build advertising profiles. Plausible tells us aggregate things like which pages get visited and which campaigns bring people in. If you arrive from a QR code or a campaign link, the link carries a campaign tag so we know which event or channel it came from. Our servers also log standard technical data such as IP address and browser type for security and troubleshooting.
Things we get from others. Publicly available information from film commissions, incentive program administrators, and government sources. Information from partners who introduce you to us, and from service providers who help us verify identity or maintain business records.
If you are in the EU or UK, our legal bases are: performing our contract with you, our legitimate interests in running and improving the business, your consent where we ask for it (marketing email, for example), and compliance with legal obligations.
Service providers who work on our behalf and are contractually bound to protect it: cloud hosting and database infrastructure, email delivery, customer and project management tools, analytics, e-signature, and accounting.
Jurisdictions and program administrators. Filing an incentive application means submitting your project information to the state, provincial, city, or national body that runs the program, and to the CPAs or auditors they require. That is the point of the service, and we do it on your instruction.
Professional advisors such as our lawyers, accountants, and auditors.
Legal and safety, when we are required by law, subpoena, or regulator, or to protect our rights and the rights of others.
A future buyer or investor, if we are ever part of a financing, merger, or sale. Diligence disclosures are made under confidentiality obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so.
Production budgets and financial data are competitively sensitive, and we treat them that way. We do not share your project information with other clients, and we do not use it to advantage anyone else's production. We do use aggregated and de-identified information, meaning data that cannot reasonably be linked back to you or your project, to improve our incentive models and to publish general market research.
As long as we need it for the purposes above, and then for as long as the law requires. Incentive programs have audit windows that can run for years after a project wraps, and tax rules impose their own retention periods, so records tied to a filing are generally kept for the longer of the applicable audit or statutory period. Marketing contacts are kept until you unsubscribe or ask us to remove you.
We use encryption in transit and at rest, access controls that limit project data to the people who need it, audit logging, and vetted infrastructure providers. No system is perfect, and we will not tell you otherwise. If a breach affects your information, we will notify you and any required regulator as the law directs.
Anyone can ask us to access, correct, or delete their personal information, or ask for a copy of it. Email privacy@goldenrod.app. We will respond within the time the applicable law requires, and within 30 days at the outside.
Marketing email always carries an unsubscribe link, and we honor it. Unsubscribing does not stop the operational emails we need to send about an active project.
California residents have the right to know, delete, correct, and to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights. You may use an authorized agent.
EU and UK residents have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. You may also complain to your local supervisory authority, though we would rather you came to us first.
Canadian residents: we follow CASL. We ask for express consent before adding you to our newsletter, we identify ourselves in every message, and every message has a working unsubscribe.
We are based in the United States and our infrastructure is hosted here. If you contact us from outside the US, your information will be transferred to and processed in the US, which may have different data protection rules than your home country. Where required, we use approved transfer mechanisms such as the EU Standard Contractual Clauses.
Our service is for businesses, and is not directed at anyone under 18. We do not knowingly collect information from children. If a production involves minors, any personal information about them is handled as production records under the same protections described here.
If we make a material change, we will update the date at the top and, for anything significant, tell active clients directly.
Goldenrod Technologies Inc.
2815 Manor Road, Ste 202
Austin, TX 78722
© 2026 Goldenrod Technologies Inc. All rights reserved