Privacy

What happens to your scripts, your cuts and your music in Onspott, in a few words.

Where your data lives

Your data is hosted in Europe: the database in Ireland, your files and their backups in Western Europe.

For each member and each tab (Script, Playlist, Spotting, Review, Transfers, Files, Cue Sheet): no access, view, comment or edit.
A guest only sees the tabs opened to them; a closed tab does not exist for them, and the server refuses its data too.
Only the project’s admins manage the team and the access; the owner keeps every right.
A comment can stay between the members of your group.

Files are kept in private storage: none has a permanent public address.
The script (PDF) and the Review cuts open through links valid for 15 minutes; other media (images, audio), 1 hour.
A transfer gives each recipient their own link, which expires after 1, 7 or 30 days; you can revoke it at any time, and its files are then deleted.

You sign in with a passkey — Touch ID, Face ID, your device’s passcode, or your phone next to a computer —, otherwise with a link sent by e-mail, valid for 15 minutes and usable once: no password to remember, or to steal.
The secret part of a passkey stays on your device; we keep only its public part. Every passkey sign-in must be confirmed on the device (fingerprint, face or passcode), and the server refuses one that is not.
Adding or removing a passkey is reported to you by e-mail.
On a shared computer (screening room, mixing stage, editing suite), tick “Shared computer”: nothing is kept in the browser, and the session closes by itself at 11 pm, when the browser is closed or after 2 hours of inactivity — the server enforces it too.
My account › Security lists your open sessions, device by device; you can close one, or all the others: that device is signed out within seconds.
A sign-in from a new device is reported to you by e-mail, with a “This wasn’t me” link that closes all your other sessions.
Onspott’s admin console also asks for a second factor (an authenticator app, or a passkey).

The database is backed up every night, encrypted, and each backup is kept for 14 days.
In Files, a deleted item stays in the trash for 30 days and can be put back.

Your content trains no AI. The AI script analysis is optional: it only runs when you start it, sent to Anthropic for that analysis only.
We sell no data. The site loads no advertising tracker and no audience-measurement tool.
The services that run Onspott: Vercel (hosting), Supabase (database and sign-in), Cloudflare R2 (file storage), Resend (e-mail), Anthropic (optional AI analysis).
A YouTube, Spotify or other link added to the Playlist loads that service’s player when you open it: its own rules then apply.

Deleting a project deletes its files: audio, videos, scripts, images, Playlist, Files and transfers.
Deleting your account deletes the projects only you use, with their files; a shared project passes to another member.

A question about your data? contact@onspott.app