Privacy Policy

Effective and last updated: October 22, 2026

Your work stays yours. We use account, project and billing information to run Indie Production Suite. We do not sell your personal information or use your production content for advertising. Send privacy questions or account-deletion requests to support@cobblewright.com.

1. Who is responsible

Indie Production Suite (“IPS”) is provided by Cobblewright LLC, trading as Cobblewright (“we”, “us”). This policy covers indieproductionsuite.com, IPS accounts, subscription services and related support. Cobblewright is a Wyoming company operated from Winnipeg, Manitoba, Canada. Our registered business mailing address is 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact our privacy contact at support@cobblewright.com.

2. Information we process

Account information: email address, account identifier, sign-in and verification information, and settings. Authentication is handled through Supabase; passwords are not available to our support staff in readable form.
Your workspace: projects, scripts, breakdowns, schedules, call sheets, budgets, documents, contacts, images and other content you choose to enter, import or save. This can include personal information about cast, crew or other people.
Billing information: the plan and currency selected, billing name and address, subscription status, payment history and identifiers from Stripe. You enter card details directly with Stripe. IPS does not store your full card number or security code.
Support and communications: your name, email, selected subject, message and any information you send us; transactional email delivery information; and call-sheet distribution and response information when those features are used.
Technical information: IP addresses and request logs processed by our service providers, browser and device information, timestamps, error messages, stack traces, the app view and limited diagnostic details used to find failures.

3. Why we use it

We process information to create and secure accounts, save and retrieve your work, deliver features you request, process subscriptions, provide receipts and account messages, respond to support, prevent abuse and trial misuse, troubleshoot errors, keep required business records and comply with legal obligations. Billing and fraud-prevention records may include hashed identifiers and payment-method fingerprints. We do not use your project content to train an AI model as part of this service.

We rely on your consent where required, on performing the service you request, and on other grounds permitted by applicable law. If we introduce an optional new use that requires consent, we will explain it and request that consent before applying it.

4. Providers and sharing

We use Hostinger for website hosting, Supabase for authentication, database and backend services, Stripe for payments and subscriptions, and Resend for transactional email. They process information needed to provide their services. Stripe also processes payment information under its own privacy policy.

The app loads some fonts and software libraries from Google Fonts, jsDelivr and cdnjs. Requests to those providers expose ordinary request information such as IP address and browser headers. If you open a Google Maps link, the location in that link is sent to Google. We do not run third-party advertising pixels or advertising analytics in this build.

If you send or share a call sheet, the information included in it is available to its recipients. Anyone with a shareable link may be able to view it, so share links only with the intended people. We may also disclose information when required by law, to protect people and the service, or in a business transfer subject to applicable privacy protections. We do not sell or rent personal information.

5. Browser storage

IPS uses browser storage to maintain sign-in sessions, remember choices such as currency and billing period, and support workspace operation. Some preferences and working data may remain on your device. The configured cloud workspace saves project data in Supabase. Signing out or clearing browser storage is especially important on a shared device. Clearing local storage does not by itself delete your cloud account or cancel a subscription.

6. International processing

Our current Supabase project is hosted in the United States. Cobblewright administers the service from Canada, and our providers may process information in the United States and other countries where they operate. Information may therefore be subject to the laws and lawful access requirements of those countries. This service does not promise Canada-only data residency.

7. Retention and deletion

We retain account and workspace information while it is needed to provide the service. You can remove supported project content within the app. For account closure, access, correction or deletion requests, email support from the address associated with your account. We may verify your identity before acting. We review and fulfill requests under the law that applies to them; some financial, security, dispute and legal records must be retained after an account closes. Copies in provider backups may remain until those backups expire. Canceling billing stops future renewals but does not automatically delete your account or work.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, obtain a copy of, delete or restrict the use of your personal information, or withdraw consent. Contact support@cobblewright.com with your request. Withdrawing permission needed to operate an account may mean we cannot continue providing that part of the service. You can also raise a concern with the privacy regulator where you live, including the Office of the Privacy Commissioner of Canada.

9. Information about other people

If you upload cast, crew or client information, you are responsible for having permission or another lawful basis to use and share it. Use only what your production needs. Do not enter payment-card numbers, government identifiers or highly sensitive personal information into project notes or support messages. For information contained in another subscriber’s production, contact that production first; you may also contact us for help identifying the appropriate route.

10. Security and children

We use access controls and encrypted connections, and limit administrative access to operating and supporting the service. No online service can guarantee perfect security. Protect your password, devices, exports and shared links, and keep your own copies of important production work. Account creation is intended for adults aged 18 or older. Production content may refer to minors; the subscriber is responsible for appropriate permissions and safeguards.

11. Updates

We will update the date above when this policy changes and provide notice of material changes through the site or account communications as appropriate. Where a new use requires consent, a policy update alone will not replace that consent.