This policy explains what personal data we collect through the Silverlines marketing website and application, why, and what rights you have over it. We've written it to reflect what the product actually does, not boilerplate — if something here stops matching reality, tell us at support@silverlines.app and we'll fix it.
01Who we are
Silverlines is operated by Korner Studio Sàrl, a Swiss limited liability company (Sàrl) registered at Impasse des Amandiers 4, 1585 Salavaux, Switzerland (registered seat: Vully-les-Lacs, Canton of Vaud), UID CHE-216.483.007. Company details are set out in full in our Legal Notice.
For the purposes of Swiss data protection law (the Federal Act on Data Protection, FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), we are the controller of personal data processed via silverlines.app and prod.silverlines.app, except for production data your organization enters into the app about third parties (see §3), where you act as controller and we act as processor.
02Scope of this policy
This policy covers four things that work differently and are described separately throughout:
- silverlines.app — the public marketing website. It has no login or account system. Across its product pages it offers early-access, contact, and launch-notification forms. Submitting one of these forms sends the fields directly through our Swiss-hosted website to our support email address; it does not open your own mail application.
- prod.silverlines.app — the Silverlines application itself, where you create an account, build productions, and invite crew. This is where account data, billing data, and production content live.
- SL-Frames — our standalone iOS scouting application for cinematographers, directors, and location teams. Captures and projects stay on your device unless you explicitly share them or link a project to a Silverlines production; it is described in §3.
- SL-Files — our standalone macOS application for Digital Imaging Technicians, available from the Mac App Store. SL-Files is offline-first and requires no account for its core workflow; it is described in §3.
It does not cover third-party sites we link to (for example, Instagram, or a mapping service opened in a new tab), which have their own privacy practices.
03Data we collect
On the marketing site
Just by visiting silverlines.app, standard web request data is generated (IP address, approximate location derived from it, browser and device type, pages viewed, referring page, and timestamps) and is processed by our analytics tools as described in §5, once you have accepted analytics. If you use an early-access, contact, or launch-notification form, we receive the email address, name, interest, and message fields you choose to submit. The form is processed on our Infomaniak-hosted website and delivered to our support email address. We use the submitted fields only to reply or send the launch information you requested.
In the application
When you create a Silverlines account and use the product, we collect:
- Account data — name, email address, and password (stored as a salted hash, never in plain text), plus workspace/company name if provided.
- Billing data — if paid Silverlines billing is enabled and you subscribe, plan tier, billing address, and transaction history. Card details are handled directly by our payment processor; we do not store full card numbers on our own servers.
- Production content you create — everything you build inside a production: script breakdowns, budgets, schedules, call sheets, location notes, production notes, and files you upload. This is your content — see §8 of the Terms of Service.
- Personal data about third parties you add — cast and crew names, phone numbers, emails, roles, day rates, and similar details that you or your team enter to run a production, plus contact details invited participants enter through a scoped shared link where that workflow is available. For this category of data, you are the controller and we are the processor: you're responsible for having a lawful basis to enter someone else's contact details into the system, and we process it only to provide the service to you, under the instructions in our Terms of Service. A separate data processing addendum is available on request at support@silverlines.app.
- Usage data — feature usage, log-in activity, and diagnostic/error logs, used to run and improve the product.
- Location data you choose to enter — addresses you type in for locations, catering, or crew logistics get sent to a mapping/geocoding provider so we can show them on a map or calculate distances (see §6). We do not access device GPS location without a separate, explicit prompt.
In SL-Frames (the iOS app)
SL-Frames works without a Silverlines account. It contains no advertising or cross-app tracking, and we do not add first-party marketing analytics to the app. Its embedded Google Maps and Google Places components do, however, declare limited operational analytics and diagnostics as described below and in §6. Local projects, camera settings, stills, motion clips, Scout Cards, Light Plans, and RoomPlan captures are stored in the app's local document folders under your control.
- Device permissions — camera access powers FRAME, SUN Live, still and motion capture, and RoomPlan scanning; location and motion/compass access place the sun, moon, bearing, and scouting position; microphone access adds sound to motion clips; notifications provide optional reminders for Light Plans. iOS asks separately for each permission, and you can change it in Settings.
- Maps and remote planning — when you use place search, maps, or Street View, the selected search text, precise or approximate coordinates, device identifiers, product interactions, diagnostics, and standard network request data may be processed by Google Maps Platform for app functionality and operational analytics. The embedded SDK privacy manifests also declare search history, crash data, performance data, and other diagnostic data. Google may link a device identifier and some other operational data to you, but these components declare that they do not use this data for tracking. Saved Light Plans store the selected site and geometry, not a copy of Google map or Street View imagery.
- Optional My SL Suite sign-in — local work never requires an account. If you choose to sign in, SL-Frames sends the email address and password you enter to prod.silverlines.app over an encrypted connection for authentication. The app does not save your password. It stores the returned personal session token in the iOS Keychain, separately from production-invitation credentials, and uses that token to retrieve your profile (including name, email, company, plan, and verification status) and the productions available to your account. Signing out removes that personal session token from the Keychain; it does not delete local projects or separately accepted production invitations.
- Optional Silverlines link — a production-issued code or QR can link one local project to a scoped production inbox. If you choose to send, SL-Frames uploads the selected capture package or RoomPlan artifact and its production metadata to prod.silverlines.app. The link credential is stored securely on the device; no Silverlines account is required inside SL-Frames.
- App Store purchases — SL-Frames is planned to offer monthly and annual auto-renewing subscriptions and a one-time non-consumable lifetime unlock through Apple. Apple processes the payment and holds your payment-card details. SL-Frames may read the product, transaction, entitlement, renewal, and revocation information Apple makes available through StoreKit so it can unlock or restore the purchase. We may receive aggregated sales and transaction reports from Apple, but not your full payment-card number.
- Your exports and sharing — when you export a Scout Set, PDF, media file, or structured manifest through the iOS share sheet or Files app, you choose the destination. The privacy practices of that destination then apply.
In SL-Files (the macOS app)
SL-Files is different by design: its core backup and verification workflow runs entirely on your Mac, offline, with no analytics or tracking of any kind. It reads camera cards and writes verified backups to your own drives; that footage never leaves your machine. Personal data is transmitted only when you deliberately use the optional Silverlines sign-in or production-link functions described below.
- Optional Silverlines sign-in — you may sign in with your Silverlines account only if you choose to link seal metadata or confirm a completed backup to one of your productions. When you do, SL-Files sends your email and password to prod.silverlines.app to authenticate — handled exactly as the account data in the section above. No account is required to use SL-Files, and signing in does not include or unlock its standalone license.
- Seal confirmations — if you link SL-Files to one of your Silverlines productions, it sends that production the metadata of a completed backup (seal id, time, byte and file counts, source/destination names, checksum method, operator and machine name). This goes only to your own production, and never includes the footage itself.
- In-app purchases — SL-Files is a free download with optional one-time or subscription unlocks. These are processed entirely by Apple through the App Store; we never receive or store your payment card details.
04Why we process your data
Where GDPR applies, we rely on the following legal bases; under the Swiss FADP, the equivalent principle is that processing must be justified and proportionate to a legitimate purpose:
- Performance of a contract — creating your account, running the application, processing payment, and providing support.
- Legitimate interest — keeping the service secure and reliable, understanding aggregate usage to improve it, and marketing-site analytics, balanced against your right to privacy.
- Consent — for non-essential cookies/analytics on the marketing site where required by law (see §5), and for any optional communications you opt into.
- Legal obligation — for example, retaining invoices for the periods Swiss commercial and tax law require.
06Third parties we work with
We use a small number of specialist providers rather than building everything ourselves. Each only receives the data it needs to do its job:
| Provider | What for | What they receive |
|---|---|---|
| Google Analytics | Consent-gated website analytics | IP address, device/browser info, pages viewed, and on-site behavior after acceptance |
| Google (Fonts) | Typefaces used across the site | IP address, browser info (standard for any font/CDN request) |
| cdnjs and UNPKG content-delivery networks | Serving the interface, animation, and 3D JavaScript libraries used by the marketing pages | IP address, browser information, requested asset, referring page, and standard request timestamps |
| Google (Maps Platform), and/or OpenStreetMap-based mapping services | Showing locations, place search, geocoding, and SL-Frames remote scouting/Street View tools | The search or address text and precise or approximate coordinates you choose, plus standard network request data. The embedded Google SDK privacy manifests additionally declare device identifiers, search history, product interactions, crash and performance diagnostics, and other operational data for app functionality and analytics; they declare no tracking. |
| Apple (App Store and iOS services) | Distributing SL-Frames and SL-Files, processing their App Store purchases, and providing StoreKit, permission, notification, Keychain, Files/share, and RoomPlan system services | App distribution, product, transaction, entitlement, renewal, revocation, or purchase data held by Apple; device content is shared only when you invoke the relevant system feature |
| Stripe (planned) | Processing Silverlines subscription payments once paid billing is enabled | Billing details and payment card data — handled directly by Stripe, not stored on our servers |
| Infomaniak (Switzerland) | Hosting the website, processing its contact forms, delivering support email, and running the Silverlines application & database | Website requests and logs; the name, email, interest, and message fields you submit; account data; and the production content you store in the app |
We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
07International data transfers
We are based in Switzerland. Some providers listed in §6 are based in, or may process data from, countries outside Switzerland or the EEA. Where a transfer requires an additional legal mechanism, we use an applicable safeguard recognized under Swiss and, where relevant, EU law, which may include an adequacy framework or contractual clauses. Contact us if you need details about the mechanism used for a particular provider.
08How long we keep data
- Account & production data — for as long as your account is active, and for a limited window after closure to allow export/recovery, after which it is deleted or anonymized unless we're legally required to keep it longer.
- Billing records — retained for the period required by Swiss commercial and tax law (generally 10 years for accounting records).
- Analytics data — retained per Google Analytics' standard retention settings for our account, after which it is aggregated or deleted.
- Support correspondence — kept as long as reasonably needed to resolve your request and for a limited period afterward for quality/reference purposes.
- SL-Frames local projects — remain on your device until you delete them. Capture packages explicitly sent into Silverlines follow the account and production-data retention rules above.
- SL-Frames personal session — the optional My SL Suite session token remains in the iOS Keychain until you sign out or the session expires or is invalidated. Profile and production-list data are refreshed from prod.silverlines.app when the session is used.
- App Store purchase records — are retained by Apple under Apple's own legal, accounting, fraud-prevention, and service rules. We retain only the purchase or entitlement information we need to provide and support the product, subject to legal requirements.
09Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, subject to legal retention obligations.
- Restrict or object to certain processing.
- Port your data to another service in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.
Deleting your account. If you created a Silverlines account (including one you optionally sign into from SL-Frames or SL-Files), you can request its deletion — together with the personal data associated with it — at any time from your account settings in the Silverlines application at prod.silverlines.app, or by emailing support@silverlines.app. Signing out of a companion app removes its local session but does not delete the account. We action deletion requests promptly, subject only to data we are legally required to retain (such as billing records).
To exercise any other right, email support@silverlines.app. We'll respond within the timeframe required by applicable law. If you're not satisfied with our response, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB) at edoeb.admin.ch, or, if GDPR applies to you, with your local EU data protection authority.
10Children's privacy
Silverlines is a business tool for film and video production professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
11Data security
We use industry-standard technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), access controls, and password hashing. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by applicable law.
12Changes to this policy
We may update this policy as the product, our providers, or the law change. Material changes will be reflected by an updated "Last updated" date at the top of this page; for significant changes, we'll make a reasonable effort to notify account holders directly.
13Contact
- Controller
- Korner Studio Sàrl
- Address
- Impasse des Amandiers 4, 1585 Salavaux, Switzerland
- support@silverlines.app