Privacy Policy

Showcase™ is operated by Front&Centre®, a trading name of Neuro Spicy Ltd, a company registered in England and Wales (company number 15218263) with its registered office at 42 Winchester Way, Croxley Green, Rickmansworth, Hertfordshire, WD3 3QF, United Kingdom. Neuro Spicy Ltd is registered with the Information Commissioner’s Office, registration number ZC200663. For personal data processed to run the Service - accounts, usage, security - we are the controller. For the content our customers bring (films, transcripts, the people appearing in them), the customer is the controller and we process it on their instructions, under our Data Processing Agreement.

Privacy questions and requests: david@frontandcentre.com.

Account data: name, email address, role, and the workspaces you can access. Content data: the films, transcripts, brand assets and text your organisation brings to or creates in the Service - which can include the voices, likenesses and words of people appearing in films. Usage data: actions in the Service (for example AI drafting runs, attributed to your account for fair-use reporting), and technical logs kept for security and reliability. Connection data: tokens for the third-party accounts you choose to connect (stored encrypted), used only to act on your instructions. Acceptance: when you accepted our terms, and which version. Billing data, where your organisation pays for its plan through the Service: the plan, its invoices, and the billing name, address and VAT number given at checkout. Card details go to our payment provider and never reach us.

To provide the Service under our contract with you or your organisation; to secure and improve it, and to monitor fair use, under our legitimate interests; and to meet legal obligations. We do not sell personal data, we do not use it for third-party advertising, and we do not use your content to train our own or third parties’ foundation models.

The Service runs on carefully chosen processors: Vercel (hosting), Supabase (database and authentication), Cloudflare (video hosting and streaming), Anthropic and OpenAI (AI drafting and search, processing the content involved in each request), Resend (sending the emails the Service sends, such as sign-in links), Deepgram (speech-to-text for speaker-labelled transcripts), and Stripe (taking payment where a customer pays its subscription through the Service: Stripe holds the card, we never see or store it). If you choose to sign in with a Microsoft or Google account, that provider confirms who you are to us; we receive your name and email address and nothing else. Notifications sent to the mobile app pass through Apple’s and Expo’s push services. Where you connect third-party platforms - Dropbox, Vimeo, YouTube, LinkedIn, Instagram, Google or Microsoft services - data moves between Showcase and that platform on your instruction, under that platform’s own terms and privacy policy.

Some processors run infrastructure outside the UK, including in the United States. Where personal data leaves the UK we rely on appropriate safeguards, including the UK International Data Transfer Agreement or Addendum and, where applicable, adequacy decisions.

Account and content data: for the life of the account or the customer relationship, then deleted or returned as the governing agreement provides (export available on request within 30 days of termination). Security and usage logs: kept for a limited period appropriate to their purpose, then deleted or anonymised. Connection tokens: until you disconnect the integration or the account closes. Invoices and billing records: six years, as tax law requires, without your name once your account is closed.

Under UK GDPR you can ask for access to your personal data, for correction or deletion, for processing to be restricted, to object to processing based on legitimate interests, and for portability of data you provided. You can download everything we hold that is yours, and delete your account or ask for it to be deleted, from Your settings in the Service. For anything else, write to david@frontandcentre.com and we will respond within a month. If you are unhappy with how we handle personal data you can complain to the Information Commissioner’s Office (ico.org.uk). Where we process content on a customer’s behalf - for example, you appear in a client’s film - we will pass your request to the controller and help them answer it.

Showcase uses essential cookies only: session authentication and security. No advertising or cross-site tracking cookies are set.

Data is encrypted in transit; integration tokens are encrypted at rest; access within the Service is scoped by role and workspace, enforced at the database layer. No system is perfectly secure - if a breach affecting personal data occurs we will notify affected customers and, where required, the ICO without undue delay.

We will update this policy as the Service evolves; material changes will be notified to account holders. The date at the top is the version date.