Data Processing Agreement (DPA)
Effective Date: March 12, 2026
This Data Processing Agreement ("DPA") forms part of the Terms of Service between FilmPilot.ai ("Processor") and the user or entity ("Controller") using our services. This DPA reflects our commitment to protecting personal data in accordance with applicable data protection laws, including the GDPR and CCPA.
1. Scope and Applicability
This DPA applies when FilmPilot.ai processes Personal Data on behalf of the Controller as part of providing the Services. It ensures that such processing is conducted securely and in compliance with legal requirements.
2. Roles and Responsibilities
The Controller determines the purposes and means of processing Personal Data, while FilmPilot.ai processes Personal Data only on behalf of and according to the instructions of the Controller, as described in this DPA and the Terms of Service.
3. Data Processing Instructions
FilmPilot.ai shall process Personal Data only for the purposes of providing the Services, including screenplay analysis and pre-production insights. We will not process Personal Data for any other purpose unless required by law.
4. Technical and Organizational Measures
We implement appropriate technical and organizational measures to protect Personal Data against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.
5. Sub-processors
The Controller acknowledges and agrees that FilmPilot.ai may engage third-party sub-processors (such as cloud hosting and AI service providers) to assist in providing the Services. We ensure that all sub-processors are bound by data protection obligations consistent with those in this DPA.
6. Data Subject Rights
We will assist the Controller in fulfilling their obligations to respond to requests from individuals exercising their rights under data protection laws, such as requests for access, correction, or deletion of Personal Data.
7. Data Breach Notification
In the event of a personal data breach, FilmPilot.ai will notify the Controller without undue delay after becoming aware of the breach, providing relevant information to help the Controller meet their notification obligations.
8. Data Deletion
Upon termination of the Services or at the Controller's request, FilmPilot.ai will delete or return Personal Data, unless retention is required by law. As noted in our Privacy Policy, we typically remove uploaded screenplay files once processing is complete.
9. Contact Information
For any questions regarding this DPA, please contact us through our Contact page.
Last updated: March 23, 2026