Privacy Policy

Showcase™ is operated by Front&Centre® Ltd, a company registered in England and Wales (company number [COMPANY NUMBER]) with its registered office at [REGISTERED OFFICE ADDRESS]. For personal data processed to run the Service - accounts, usage, security - we are the controller. For the content our customers bring (films, transcripts, the people appearing in them), the customer is the controller and we process it on their instructions.

Privacy questions and requests: david@frontandcentre.com.

Account data: name, email address, role, and the workspaces you can access. Content data: the films, transcripts, brand assets and text your organisation brings to or creates in the Service - which can include the voices, likenesses and words of people appearing in films. Usage data: actions in the Service (for example AI drafting runs, attributed to your account for fair-use reporting), and technical logs kept for security and reliability. Connection data: tokens for the third-party accounts you choose to connect (stored encrypted), used only to act on your instructions.

To provide the Service under our contract with you or your organisation; to secure and improve it, and to monitor fair use, under our legitimate interests; and to meet legal obligations. We do not sell personal data, we do not use it for third-party advertising, and we do not use your content to train our own or third parties’ foundation models.

The Service runs on carefully chosen processors: Vercel (hosting), Supabase (database and authentication), Cloudflare (video hosting and streaming), Anthropic and OpenAI (AI drafting and search, processing the content involved in each request), and Deepgram (speech-to-text for speaker-labelled transcripts). Where you connect third-party platforms - Dropbox, Vimeo, YouTube, LinkedIn, Instagram, Google or Microsoft services - data moves between Showcase and that platform on your instruction, under that platform’s own terms and privacy policy.

Some processors run infrastructure outside the UK, including in the United States. Where personal data leaves the UK we rely on appropriate safeguards, including the UK International Data Transfer Agreement or Addendum and, where applicable, adequacy decisions.

Account and content data: for the life of the account or the customer relationship, then deleted or returned as the governing agreement provides (export available on request within 30 days of termination). Security and usage logs: kept for a limited period appropriate to their purpose, then deleted or anonymised. Connection tokens: until you disconnect the integration or the account closes.

Under UK GDPR you can ask for access to your personal data, for correction or deletion, for processing to be restricted, to object to processing based on legitimate interests, and for portability of data you provided. Write to david@frontandcentre.com and we will respond within a month. If you are unhappy with how we handle personal data you can complain to the Information Commissioner’s Office (ico.org.uk). Where we process content on a customer’s behalf - for example, you appear in a client’s film - we will pass your request to the controller and help them answer it.

Showcase uses essential cookies only: session authentication and security. No advertising or cross-site tracking cookies are set.

Data is encrypted in transit; integration tokens are encrypted at rest; access within the Service is scoped by role and workspace, enforced at the database layer. No system is perfectly secure - if a breach affecting personal data occurs we will notify affected customers and, where required, the ICO without undue delay.

We will update this policy as the Service evolves; material changes will be notified to account holders. The date at the top is the version date.