FILM/STATION

Privacy policy

Last updated 28 October 2026

FilmStation is a planner and production hub (calendar, tasks, mail, contacts and film-production tools) run by Andrei Kalesnikau (“we”). This page explains what information the app handles, why, how it is protected, and the choices you have. You can write to us at hello@filmstation.app.

Information we handle

  • Your account: the name, email address and picture from your Google account when you sign in, and the settings you choose (time zone, language, theme).
  • What you create in the app: tasks, notes, calendar blocks, contacts, projects, scripts, budgets, files and boards.
  • Connected services you choose to add: Gmail, Google Calendar, Google Drive, iCloud Mail, Dropbox and Frame.io. See the next section for Google.
  • Technical records: sign-in events (a coarse device description and network), and error reports with personal data removed.

Google user data: what we access and why

If you connect a Google service, we ask only for the access each feature needs, and only after you agree on Google’s own consent screen.

  • Gmail (read, modify and send): to list and open your letters inside the app, to mark them read or unread, star, archive, delete or report spam, to apply the follow-up marks you set, and to send letters and replies that you write. A copy of your newest letters (subject, sender, snippet and the bodies you open) is kept encrypted so the inbox opens quickly; it is removed when you disconnect the mailbox.
  • Google Calendar (read and write events): to show your events, and to create, move and delete the events you ask for.
  • Google Drive (read only): to search file names and show files you attach to a project. We store only the link and name of an attached file, not its content.

Limited use. FilmStation’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the user-facing features described above; we do not sell it; we do not use it for advertising; we do not let people read it (except where you ask us for support and agree, where needed for security, or where the law requires); and we do not use it to develop, improve or train generalized AI or machine-learning models.

The built-in assistant

The assistant runs with an API key that you provide for the AI company you choose. When you use it, the text of your request, and the parts of your data it needs to answer (for example a task list, or a letter you ask it to summarise), are sent to that company under your key and their terms. We do not send anything to an AI provider unless you use the assistant. Before the assistant changes anything or contacts anyone, it asks you first.

How it is stored and protected

  • Data is kept in a PostgreSQL database and file storage hosted in the European Union (Frankfurt) through Neon and Vercel.
  • Access tokens for connected services, the cached copy of your mail, and mailbox passwords are encrypted at rest with a key kept outside the database. API tokens for tools are stored only as hashes.
  • Everything travels over HTTPS. Sessions are signed, can be ended on every device, and optional two-step verification is available. Each request is checked against what that person is allowed to see; other people on a shared project see only what the owner allows.
  • We cannot read your mail from the app’s administration pages: they show counts and dates only.

Who else handles data

  • Vercel: hosting, file storage and privacy-friendly page-view statistics (no advertising cookies).
  • Neon: the database.
  • Sentry: error monitoring, with cookies, bodies, addresses and personal data removed before anything is sent.
  • The services you connect (Google, Apple, Dropbox, Adobe) and the AI company you choose for the assistant.

We do not sell personal information and do not share it for advertising.

Cookies

We use a session cookie to keep you signed in and small cookies that remember your theme, language and interface size. We use no advertising or cross-site tracking cookies.

Keeping and deleting your data

  • Disconnect a mailbox or service in the app: its tokens and cached copies are deleted at once, and for Gmail and Dropbox we also ask the provider to cancel the access. You can also remove access at any time at myaccount.google.com/permissions.
  • Export your data and delete your account yourself in Settings. Deleting the account removes your data from our systems; encrypted backups made by our database provider expire on their normal schedule.
  • Or write to hello@filmstation.app and we will do it for you.

Your rights

Depending on where you live (for example under the EU GDPR) you can ask to access, correct, export or delete your data, object to some processing, or complain to your data protection authority. The Settings page covers most of this directly; for anything else, write to us.

Children

FilmStation is not meant for people under 16 and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will say so in the app before it takes effect. The latest version is always on this page. See also our terms of use.