Trust Center
Trust, Security
& Privacy
This page is maintained by Camera Rolling Studios to answer common security and privacy questions about our website and the client engagements we run. It describes the controls and practices currently in place. It is editable project content, not an independent certification or third-party audit.
What we do
Camera Rolling Studios is a film and content production studio. We design and deliver cinematic video, social media management, and SEO engagements for brands. This site is a marketing website; client production files are handled directly with each client under a separate engagement.
Website data we collect
Our public website is primarily informational. We do not require visitors to create an account to browse the site. When you contact us by email, phone, WhatsApp, or through a form, we receive the details you choose to share so we can reply.
We may use privacy-respecting analytics to understand which pages perform well. We do not sell visitor data.
Hosting & platform
Our website is built and hosted on the Lovable platform, which provides the underlying application hosting, SSL/TLS encryption in transit, and backend infrastructure. Lovable's platform capabilities support our security posture, but this page is not a statement of Lovable certification.
Access control
Access to our website's content management, backend, and connected accounts is restricted to authorized members of Camera Rolling Studios. Administrative actions require authentication, and we use strong, unique credentials for production accounts.
Client project data
Footage, scripts, brand assets, and other materials you share with us for a project are used only to deliver that project. We store working files in access-controlled storage and share previews and deliverables through links scoped to the people involved in your engagement.
Retention, deletion, and any rights to reuse footage for our own portfolio are agreed with you in writing as part of each engagement.
Subprocessors & integrations
We rely on reputable third-party services for hosting, email, analytics, file storage, and post-production tooling. We choose providers that offer industry-standard security controls. A current list of subprocessors used on your specific engagement is available on request.
Privacy requests
If you would like to access, correct, or delete personal information you have shared with us, email thecamerarolling@gmail.com. We will respond within a reasonable timeframe and verify your identity before acting on the request.
Reporting a security concern
If you believe you have found a security issue with our website or with a deliverable we produced, please contact us directly at thecamerarolling@gmail.com. Please include enough detail for us to reproduce the issue, and give us reasonable time to investigate before disclosing it publicly.
Compliance
We do not currently claim certification under SOC 2, ISO 27001, HIPAA, PCI DSS, or similar frameworks. If your engagement requires specific compliance commitments or a data processing agreement, contact us and we will discuss what we can support in writing.