Privacy Policy

2.1 All Users (Website & Platform)

• Full name
• Email address
• Password (stored in encrypted form — we never store plain-text passwords)
• IP address and browser/device information
• Cookies and usage data (see Section 9)

2.2 Clients

• Company name and ABN (if applicable)
• Billing address
• Payment information — processed by Stripe; Cubic Content does not store card numbers
• Project brief content — written responses to our creative brief questionnaire
• Revision notes and approval records
• Communication history related to your project
• Uploaded files related to your project

2.3 Film Professionals

• Primary professional role (Director, Cinematographer/DP, or Editor)
• Location (city and state)
• Professional skills and specialisms
• Day rate (optional)
• Professional biography (optional)
• Availability status
• Bank account or payment details for invoicing purposes (if applicable)
• Uploaded work files and footage
• Project and job history on the Platform

2.4 Producers

• All information listed under 2.1 above
• Project and job history on the Platform
• Uploaded storyboards and production documents
• Communication records related to managed projects

2.5 Information We Do Not Collect

We do not collect, and have no need to collect, the following categories of sensitive information:

• Racial or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Health or medical information
• Sexual orientation or gender identity
• Criminal record information

If you believe we have inadvertently collected sensitive information, please contact us immediately at hello@cubiccontent.com so we can delete it.

5.1 Service Providers

We use trusted third-party service providers to operate the Platform. Each provider is bound by contractual obligations to protect your data:

5.2 Within the Platform

Certain information is shared between user types on the Platform as necessary to fulfil the service:

• Client brief content is shared with the assigned Film Professional and Producer
• Film Professional profiles (name, role, skills, location) are visible to Cubic Content Admin only — not to clients
• Producer names are visible to clients in the context of their project
• Client names and company names are visible to assigned Film Professionals and Producers

5.3 Legal Requirements

We may disclose personal information if required to do so by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the rights, property or safety of Cubic Content, our users or the public.

5.4 Business Transfers

If Cubic Content is involved in a merger, acquisition or sale of all or part of its assets, personal information may be transferred as part of that transaction. We will notify affected users by email prior to any such transfer.

6.1 Storage

All personal information is stored on secure servers provided by Supabase, which operates on Amazon Web Services (AWS) infrastructure. Data is stored in encrypted form at rest and in transit using industry-standard encryption (TLS 1.2 or higher).

6.2 Security Measures

• All passwords are hashed using industry-standard algorithms — plain-text passwords are never stored
• All data transmitted between your browser and our Platform is encrypted via HTTPS
• Role-based access controls ensure users can only access data relevant to their role
• Row-level security is enforced at the database level — users cannot access other users' data
• Payment information is processed exclusively by Stripe and is never stored on Cubic Content servers
• Access to production systems is restricted to authorised personnel only

6.3 Overseas Storage

Some of our service providers (listed in Section 5.1) store data in the United States. By using our Platform, you consent to your personal information being transferred to and stored in the United States, where privacy laws may differ from those in Australia. We take reasonable steps to ensure these providers maintain appropriate data protection standards.

6.4 Retention

8.1 Client Briefs

When you complete the creative brief questionnaire on the Platform, the information you provide (including your goals, target audience, shoot location and talent details) is used solely to produce your video. This information is shared with your assigned Film Professional and Producer. It is not used for marketing, shared with other clients, or disclosed to third parties outside of the production process.

8.2 Uploaded Footage and Files

Raw footage uploaded by Film Professionals and storyboard files uploaded by Producers are stored in private, encrypted Supabase Storage buckets. These files are accessible only to:

• The assigned Film Professional (for footage they uploaded)
• The assigned Producer (for all project files)
• Cubic Content admin

Raw footage is deleted 90 days after project completion. If you require footage to be retained beyond this period, contact us prior to the 90-day deadline.

8.3 Video Delivery

Final videos are delivered via Vimeo's platform using domain-restricted embeds, meaning the video can only be played within cubiccontent.com. Vimeo's own privacy policy applies to data processed through their platform (vimeo.com/privacy). Vimeo video IDs are stored in our database but the video content itself resides on Vimeo's servers.

8.4 Film Professional Profiles

Information provided in your Film Professional profile — including your role, location, skills and day rate — is visible only to Cubic Content admin for the purpose of assigning you to appropriate projects. Your profile is not displayed publicly on the website and is not shared with clients. Your name may be shared with clients in the context of projects you are assigned to.

8.5 Payment Processing

All payments are processed by Stripe. When you purchase a package, you are entering payment information directly into Stripe's secure payment interface. Cubic Content receives confirmation of payment and your billing details from Stripe but does not at any point have access to your full card number, CVV or other sensitive payment data. Stripe's privacy policy is available at stripe.com/au/privacy.

8.6 Google Sign-In

If you choose to sign in using Google OAuth, we receive your name and email address from Google. We do not receive your Google password or access to your Google account beyond what is necessary for authentication. You may disconnect Google sign-in at any time by contacting us.

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They allow the website to remember your preferences and actions over time.

9.2 Cookies We Use

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging into the Platform. Google Analytics cookies can be disabled by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

12.1 Internal Complaint Process

• Submit your complaint in writing to hello@cubiccontent.com with the subject line "Privacy Complaint"
• We will acknowledge your complaint within 5 business days
• We will investigate and respond substantively within 30 days
• If we are unable to resolve your complaint to your satisfaction, we will advise you of your further options

12.2 External Complaint — OAIC

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):