Privacy Policy

01Who we are

Pinion Partners LLC (“PRFlix”, “we”, “us”), 7901 4th St N, Ste 300, St Petersburg, FL 33702, United States, is the data controller for personal information collected through prflix.co and the studio.prflix.co client portal. This policy explains what we collect, why, who we share it with, and what you can do about it.

Questions or requests: hello@prflix.co, or write to us at the address above.

02Information we collect

Information you give us.

• Account details: name, email address, password (stored hashed), company name, role.
• Contact and enquiry details: anything you type into our contact, quote, or brief forms, including phone number and project description.
• Project content: scripts, briefs, feedback, logos, brand assets, footage, and any other material you upload for production.
• Billing details: billing name and address, plan chosen, invoice history. Card details go straight to our payment processor; we never see or store the full card number.
• Support conversations: messages you send us by email or live chat.

Information we collect automatically.

• Technical data: IP address, browser and device type, operating system, referring page, and the pages you view.
• Usage data: how you move through the site and portal, which features you use, and when.
• Cookies and similar technologies: see our Cookie Policy for the detail and your choices.

Information from third parties. If you connect a third-party account to the portal (for example YouTube, so we can publish on your behalf), we receive the account or channel identifier and the access tokens needed to perform the actions you authorised. Tokens are stored encrypted and used only for that purpose. We also receive limited payment status information from our payment processor, and aggregate performance data from the platforms your videos are published to.

We do not intentionally collect special-category data (health, biometrics, political or religious beliefs) and ask that you do not send it to us. Our service is not directed at children under 18 and we do not knowingly collect their data.

03How we use it

• To create and run your account, and to authenticate you.
• To produce, revise, deliver and, where you have asked us to, publish your videos.
• To take payment, issue invoices, and keep the financial records we are legally required to keep.
• To respond to enquiries, quotes and support requests.
• To send service messages you cannot opt out of while you hold an account: delivery notifications, revision updates, billing and security notices.
• To send marketing emails, where you have opted in or are an existing client. You can unsubscribe from any of these at any time.
• To measure and improve the site and portal, diagnose faults, and keep our systems secure.
• To showcase completed work in our portfolio and marketing, unless you have asked us in writing not to.
• To detect and prevent fraud and abuse, and to comply with legal obligations or enforce our terms.

04Legal bases

Where the GDPR or UK GDPR applies to you, we rely on the following legal bases for the uses above:

• Contract: running your account, producing and delivering your videos, and taking payment.
• Legitimate interests: securing our systems, preventing fraud, improving the service, and marketing to existing clients (balanced against your interests).
• Consent: non-essential cookies and analytics, marketing emails to people who are not yet clients, and publishing to third-party accounts you connect. You can withdraw consent at any time.
• Legal obligation: tax, accounting, and responding to lawful requests.

05Who we share it with

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do share it with service providers who process it on our behalf, under contract and only for the purposes we set:

• Payment processing: to take payment and manage subscriptions.
• Cloud hosting, storage, and email delivery: to run the site, the portal, and our notifications.
• AI and production tooling: to generate and edit video assets from the material you provide.
• Social and video platforms: where you have connected an account and asked us to publish for you.
• Analytics and customer-support tools: to understand usage and answer your messages.
• Professional advisers, and authorities where the law requires it.
• A buyer or successor, if we are ever involved in a merger, acquisition, or sale of assets, and we will tell you if that changes how your data is handled.

Our in-house team and vetted contractors access your project content only as needed to produce your work.

06International transfers

We and our providers operate in several countries, so your information may be transferred to and processed outside the country where you live, including in the United States. Where we transfer personal information out of the UK, EEA, or Switzerland, we rely on an adequacy decision or on Standard Contractual Clauses together with additional safeguards as appropriate.

07How long we keep it

• Account and project data: for as long as your account is active, then up to 24 months after closure so you can return and we can resolve any dispute.
• Delivered videos and source assets: up to 12 months after delivery, after which we may delete them. Download and archive your finished work; do not rely on us as your only copy.
• Invoices and financial records: for as long as tax and accounting law requires, typically 7 years.
• Enquiries that do not become projects: up to 24 months.
• Third-party access tokens: until you disconnect the account or revoke access, whichever is first.
• Server and security logs: typically up to 12 months.

08Security

We protect your information with encryption in transit (HTTPS), encryption of stored third-party access tokens, hashed passwords, httpOnly session cookies, role-based access controls, and audit logging of sensitive actions. No system is perfectly secure, so we cannot guarantee absolute security, but if a breach affects your personal information we will notify you and any regulator as the law requires.

09Your rights & choices

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your information, where we have no overriding legal reason to keep it.
• Object to or restrict certain processing, including direct marketing.
• Receive your information in a portable format, or ask us to transfer it.
• Withdraw consent at any time, where consent is our legal basis.
• Not be discriminated against for exercising any of these rights.

You can update most account details yourself in the portal, disconnect linked platforms there, and unsubscribe from marketing using the link in any marketing email. For anything else, email hello@prflix.co. We will respond within 30 days and may need to verify your identity first. If you are in the UK or EEA you can also complain to your local data protection authority.

10Changes to this policy

We may update this policy as our service changes. We will revise the “last updated” date and, where the change is material, notify you by email or in the portal. This policy is governed by the laws of the State of Florida, United States. See also our Terms of Service and Cookie Policy.