Privacy Policy

Last updated: June 11, 2026

This Privacy Policy explains how The Vault Studios, Inc. (“Hotset,” “we”) collects, uses, and protects information when you use the Hotset service (the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

Account information — your name, email, organization name, and password (stored hashed). Production data — the content you and your team enter or upload (scripts, schedules, crew and talent details, documents, images). Billing information — handled by our payment processor, Stripe; we receive limited details such as subscription status and the last four digits of your card, never your full card number. Usage and device data — log data, IP address, browser type, and basic analytics needed to operate and secure the Service.

2. How we use information

We use information to provide and improve the Service; authenticate users and secure accounts; process subscriptions and payments; send transactional and service messages (such as document requests you initiate, and account or billing notices); provide support; and comply with legal obligations. We do not sell your personal information.

3. Sharing & subprocessors

We share data with service providers who help us run the Service, under contracts that limit their use of it, including: Stripe (payments), Supabase (database and file storage), Vercel (hosting), and an email delivery provider for transactional email. We may disclose information if required by law or to protect rights, safety, and the integrity of the Service. If our business is acquired, data may transfer as part of that transaction.

4. Your team and recipients

Hotset is collaborative. Information you add is visible to other members of your organization according to the access you grant them. When you send documents (for example, agreements or document requests) to crew or talent, the recipient receives the information you choose to send.

5. Data retention

We retain your data for as long as your account is active and as needed to provide the Service. After account closure we may retain data for a reasonable period for backup, legal, and operational purposes, then delete or anonymize it.

6. Security

We use industry-standard measures including encryption in transit, access controls, and tenant isolation so each organization’s data is separated. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security, and you are responsible for keeping your credentials safe.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. You can update much of your information in-app; for other requests, contact us through the support form. We will respond as required by applicable law.

8. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

9. Children

The Service is not directed to children under 18 and we do not knowingly collect their personal information.

10. Changes

We may update this Policy from time to time and will post the new version here with an updated date. Material changes will be communicated as required.

11. Contact

For privacy questions or requests, reach us through the in-app support form or at The Vault Studios, Inc.