Privacy Policy

This Privacy Policy explains what personal data T21 Film Studio LLC ("FIXER", "we", "us") collects when you use FIXER, why, who receives it, how long we keep it and what rights you have. It applies to all FIXER services: the web app at app.fixer-app.com, the website fixer-app.com, the FIXER iOS and Android apps, FIXER Premiere (premiere.fixer-app.com and fixer-premiere.com), our APIs, e-mails and support (the "Services").

Controller: T21 Film Studio LLC, 1424 Infinity Way, Mountain View, CA 94043, USA. Contact for privacy questions and requests: support@fixer-app.com (subject "Privacy").

1. Summary

• We collect what you give us (account, profile, work, messages, deals, verification documents), what your device sends us (IP address, device and app data) and what partners send us (Stripe, Google sign-in, Apple and Google stores).
• We use it to run FIXER: your profile, search and matching, messaging, deals and payments, verification, safety and moderation, and support.
• We do not sell your personal data and we do not use it for targeted advertising. There are no advertising or analytics trackers in the FIXER web app (app.fixer-app.com) or on FIXER Premiere. Our marketing website fixer-app.com is hosted by Wix, which sets its own cookies, and we use Microsoft Clarity analytics on that site (see the Cookie Policy).
• Some features use AI services from Google and OpenAI, and moderation uses Amazon Web Services. They process data for us to provide those features; Amazon Web Services may also use videos checked for moderation to improve its AI services (see section 4.2).
• You can see and edit your data in your profile, delete your account in Settings, and write to us for a copy of your data or any other request.

2. Data we collect

2.1 Data you give us

2.2 Data collected automatically

• Technical data: IP address, browser and device type, operating system, app version, language, time of requests, and server logs used for security and troubleshooting. If you sign up without confirming an e-mail code, our server log records your e-mail's domain and browser type for fraud prevention (kept 14 days).
• Location: with your permission, the app or browser sends your device location when it opens so that we can find the nearest city. We store only the city, not your coordinates. You can refuse and choose a city yourself.
• Usage: views and reactions on drops and reels, profile views counts, notifications you received and whether messages were read.
• Data we derive from your content: embeddings (numeric summaries of meaning) of profiles, deals, drops, works, BrainMatch phrases and saved Assistant searches, and AI-generated descriptions and tags of what drops and works look like, used for search, matching and the Assistant; and a perceptual fingerprint of each drop and show reel video (hashes of 8 frames; no face recognition), used to find the same clip at another member and suggest that you confirm you worked together.
• Device identifiers in the mobile apps: a push-notification ID (OneSignal), Firebase app instance ID, the device's advertising identifier (IDFA on iPhone, advertising ID on Android), which Google Analytics for Firebase collects where the phone makes it available (on Android by default; on iPhone with iOS 14.5 or later only if you allow tracking when the app asks) — we do not use it to show you ads — and crash reports (Sentry) that include device model, OS version and the error. You can reset or delete the advertising ID, and on iPhone turn off tracking, in your phone's settings.
• Browser storage: see the Cookie Policy.

2.3 Data from others

• Stripe: payment status, the last digits and brand of your card, payout account status and verification results. Stripe never gives us your full card number.
• Google (if you sign in with Google): your Google account ID, name, e-mail and profile picture link.
• Apple and Google stores: purchase receipts and subscription status for in-app purchases.
• Public sources you point us to: when you ask us to import your work, we read the public pages you give us (for example your website, YouTube, Vimeo, Behance, IMDb) and public information about those works. When you use AI fill we may look up a public Gravatar image linked to your e-mail (we send only a one-way hash of the e-mail).
• Other users: people can mention you in a deal, recommend you, add you to a network tie or a company team, report you, or send you messages.

Providing your data is voluntary, but without the data marked as required in a form (for example your e-mail to create an account, or verification documents for deals) we cannot provide that feature. We do not intentionally collect sensitive data such as health, religion or sexual orientation. Please do not put it in your profile. ID documents and selfies are reviewed by a person; we do not use automated face recognition and we do not create biometric templates.

3. How and why we use data

Automated decisions. Some decisions are made by software: automated moderation may hide or remove content (for example a photo, a video, a comment or your "About me" text) automatically, and a FIXER moderator then reviews it (Terms, section 8); spam and rate-limit checks may block an action; and the feed shows content that meets objective quality rules (for example a filled profile with a profession, or a verified business). Your content stays on your profile even if it is not in the feed. AI matches, search rankings and Assistant suggestions are only suggestions: FIXER does not use them to decide who is hired or paid, and companies make their own decisions. None of these decisions has legal effects on you; you can always ask a person to review one at support@fixer-app.com. ID document and selfie checks are decided by a person. The phone, card and business e-mail steps are checked automatically (an SMS code, the US $0.99 card check through Stripe, and a code sent to an address on the company's own domain; free and disposable e-mail providers are not accepted); you can ask a person to review a failed step at support@fixer-app.com.

Marketing. We send only service messages (for example sign-in codes, deal and contract updates, team invitations). We do not send marketing e-mails without your consent. If we start, every marketing e-mail will have an unsubscribe link.

4. Who receives your data

4.1 Other users and the public

• Your public profile (name, nickname, photo, professions, city, about text, day rate, availability and busy dates, experience, recommendations, social links, show reel, drops, works, journal, your "Verified" or "Verified business" badge and company page) is visible to FIXER users. Your public business card (app.fixer-app.com/u/your-nickname) and link previews of it can be seen by anyone, including search engines; it shows your name, nickname, photo, banner, professions, city, about text, day rate, verification badges, show reel (or smart reel), drops, works, journal, the social links you added and your company team memberships. Your account e-mail, phone number, exact location, verification documents and payment details are never shown to other users; a contact you add yourself as a link on your profile (for example an e-mail address) is public.
• Messages are seen by the people you send them to. In a company team, messages sent for the company show who sent them, and company admins see team members' names, roles and work e-mails.
• Deals you post are visible to FIXER talent members looking for work, and job alerts and the Assistant can suggest them. Applications, contracts, payments and disputes are seen by the company (including team members who act for it) and the talent involved, not by other users.

4.2 Service providers (processors)

They process data only on our instructions to provide their service to us, except where the table below says otherwise:

The AI providers receive the data described above through their business APIs.

YouTube API Services. FIXER uses YouTube API Services. With the YouTube Data API we read publicly available information about the YouTube videos, channels and playlists whose links you give us for import or AI fill: titles, descriptions, thumbnails, durations, publication dates, channel names and channel country. We use it to prepare your work cards and your profile draft, may send it to our AI providers for those features (see the table above), and keep it with your imported items and works for the periods in section 5. We also use the YouTube embedded player to play YouTube videos on FIXER (see the Cookie Policy). We do not connect to your YouTube account or read private YouTube data. How Google handles data is described in the Google Privacy Policy; YouTube's terms are at youtube.com/t/terms.

4.3 Others

• Professional advisers (lawyers, accountants) under confidentiality.
• Authorities, when the law requires it, or to protect the rights, property or safety of users, the public or FIXER.
• A buyer or successor if FIXER is involved in a merger, acquisition or sale of assets; they must respect this Policy.

5. How long we keep data

When you delete your account. Your profile is removed at once from member search and the member directory, and your public business card (and its link previews) stops working. Right after your request we e-mail you a confirmation with the deletion date and a "Cancel deletion" link. The deletion date is the third day after the day of your request, at 00:00 UTC (so you always have at least 2 full days). Until then, other signed-in members can still open your profile directly (for example from a chat or a link), your drops can still appear in the feed, and you can cancel: with that link (no sign-in needed), in Settings in the FIXER iPhone or Android app, or by writing to support@fixer-app.com (we can cancel only before the deletion date). On the deletion date your account is closed for good and can no longer be restored. If at that time you still have an unfinished contract, an unpaid deal payment, a payment started in the last 48 hours that has not gone through, or an open complaint against you, or the law requires us to preserve the data, we wait with the erasure until these are settled or the preservation ends. Then we erase or anonymise your personal data and delete your uploaded files (photos, show reel, drops, journal, works, identity documents, imported items). We keep records of contracts, deals, payments, payouts, credits and in-app purchases for tax and accounting (up to 7 years), linked to an anonymised account ("Deleted user"); deals you published and files attached to contracts stay part of those records. If your account took part in a contract or a payment, we also keep a restricted record for 7 years so that we can meet tax and accounting duties and handle disputes and legal claims: your name as on your account, e-mail, company name, account role, identity-verification status and date and the result of each verification step (no document images or files) and the ids of those contracts and payments. Only FIXER administrators can see it, and it is deleted automatically after 7 years. These steps apply to deletions you request; if FIXER closed your account for breaking our rules, fraud or abuse, we keep its data as evidence as described in the table above. Messages you sent remain in the other person's conversation as from "Deleted user". Complaint and moderation records are kept in anonymised form, and private copies of content removed after a report are kept for up to 1 year for legal claims and law enforcement. Where the law requires us to preserve data (for example the contents of a report we make to NCMEC about child sexual abuse material, or records that law enforcement asks us to preserve), we may keep that data for as long as the law requires, even after you delete your account. Copies in encrypted backups disappear when the backups expire (30 days). Our providers keep their own copies for the periods in their own policies — for example Stripe (payment and payout records), Apple and Google (purchases), OneSignal (push IDs), Twilio (SMS logs) and the AI providers (request logs).

6. Security

We protect data with measures such as encrypted connections (HTTPS), hashed passwords, encrypted backups, access limited to staff who need it, private storage for identity documents, rate limits against abuse and reviews of our code for security issues. No system is completely secure; if a data breach affects you, we will notify you and the authorities as the law requires.

7. International transfers

FIXER is operated by T21 Film Studio LLC in the United States. If you are in the EU, the UK or Switzerland, you give your data directly to us, and we and our providers (section 4.2) process it in the United States and other countries that may not offer the same level of protection as your own. When our providers process your data, we rely on the European Commission's Standard Contractual Clauses in their data processing terms (with the UK addendum and the Swiss amendments where they apply) or on the provider's certification under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions. We rely on a transfer being necessary for your contract with us only for occasional transfers, for example when the other party to your deal is in another country. You can ask for a copy of these safeguards at support@fixer-app.com (subject "Privacy").

8. Your rights

You can:

• access and edit most of your data in your profile and settings;
• delete your account: in the app, or on the web at app.fixer-app.com → Settings → Delete profile (this works for accounts created in the mobile apps too), or by writing to support@fixer-app.com from your account e-mail;
• ask us for a copy of your data (including in a portable format), or to correct, delete or restrict it;
• object to processing based on legitimate interest, and withdraw consent at any time (this does not affect earlier processing);
• ask a person to review an automated decision;
• complain to a data protection authority, for example the authority where you live or work (in the EU/UK) or the California Privacy Protection Agency.

Your right to object. Where we use your data on the basis of legitimate interest (section 3), you can object at any time, on grounds relating to your situation, by writing to support@fixer-app.com (subject "Privacy"). We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data for legal claims. You can object to any use of your data for direct marketing at any time, and we will then stop that use.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its "sale" or "sharing" — we do not sell or share personal information as those terms are defined, and we have not done so in the past 12 months; to limit the use of sensitive personal information — we use it (ID documents, account log-in details, the contents of messages between users, Social Security or tax numbers passed to Stripe for payouts, and your device's precise location if you allow it, which we use only to find your nearest city and do not store) only to provide the Services and for security, as the law permits, and not to infer characteristics about you; and not to be discriminated against for using your rights. The categories of personal information we collect are those listed in section 2 (identifiers, customer records, characteristics of protected classifications (date of birth for payout accounts; age, sex and nationality shown on ID documents), commercial information, internet activity, geolocation (your device's location if you allow it, stored only as a city), audio/visual information, professional information, and sensitive personal information as described), for the purposes in section 3, disclosed to the recipients in section 4, and kept for the periods in section 5. You may use an authorized agent: the agent writes to support@fixer-app.com (subject "Privacy") with your signed permission or a power of attorney, and, unless the agent has a power of attorney, we may ask you to confirm your identity and the request directly with us.

California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.

Other U.S. states (such as Colorado, Connecticut, Virginia, Texas, Oregon): you have similar rights to access, correct, delete and obtain a copy of your data and to appeal our decision.

How to make a request: write to support@fixer-app.com (subject "Privacy"). If you have an account, write from its e-mail; if you do not (for example you only bought a Premiere ticket or sent us a form), tell us the e-mail and details we can use to find your data. We may ask for information to confirm it is you. We confirm receipt within 10 business days and reply within one month (45 days under California and other U.S. state laws). Where the law allows (for example for complex or numerous requests), we may extend this period and will tell you why before the first period ends. If we refuse a request, we will explain why, and you can appeal by replying to our answer; we will decide the appeal within 45 days (extendable where the law allows) and, if we deny it, tell you how to contact your state Attorney General.

9. Children

FIXER is only for people 18 and older. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has an account, we will delete it. If you believe a minor uses FIXER, please tell us at support@fixer-app.com.

10. Do Not Track and Global Privacy Control

We do not track you across other websites and do not sell or share personal data, so Do Not Track and Global Privacy Control signals do not change how we treat your data.

11. Changes

We will post any update to this Policy here and change the date at the top. If a change is material, we will tell you in the Services or by e-mail before it takes effect.

12. Contact

T21 Film Studio LLC
1424 Infinity Way, Mountain View, CA 94043, USA
E-mail: support@fixer-app.com (subject "Privacy")