Privacy policy

This policy explains what personal information Festro collects when you use festro.app, what we use it for, who helps us handle it, and the choices you have. We process personal information in line with South Africa's Protection of Personal Information Act (POPIA).

Who we are

Festro is operated by SKRRSKRR (PTY) LTD, registration number 2019/368961/07, 43 Grasvoel Crescent, Mulbarton, Johannesburg South, Gauteng, 2058 ("we", "us"). Our Information Officer is Nhlakanipho Mashinini. You can reach us at support@festro.app.

What we collect

• Account details: your name, email address and password. Your password is stored by our authentication provider in a hashed form. We can't read it.
• Film details you enter: title, format, categories, genres, runtime, countries, languages, completion and premiere dates, your submission budget and currency, target countries and career goals. We don't collect your film files.
• Campaign information: the campaigns you save, and the status, amounts paid and notes you record against festivals.
• Payment records: the plan you buy, the amount, dates, and reference numbers from our payment provider. Your card details go directly to the payment provider. We never see or store them.
• Technical information: basic request details such as IP address and browser type, kept in our hosting provider's server logs for security and troubleshooting.

We don't use advertising trackers on festro.app. We use Vercel Web Analytics to count page views and see how the site is used. It doesn't use cookies, and it isn't used to identify you or follow you across other sites.

Why we use it

• To provide Festro: create your account, show festivals that fit your film, and keep your campaigns and calendar.
• To take payment, give you access to the plan you bought, and handle cancellations and refunds.
• To email you about your account: confirming your email address, resetting your password, and receipts or billing notices.
• To understand how the website is used, using page-view analytics that don't rely on cookies.
• To keep the service secure, prevent abuse, and meet our legal and accounting obligations.

We don't sell your personal information, and we don't use it to build profiles for advertisers.

Who helps us handle it

We use these service providers, who process information on our behalf:

• Supabase, for our database and sign-in. Data region: Europe.
• Vercel, to host the website and measure page views.
• Paystack, to take payments. They receive your email address and the payment amount, and handle your card details under their own privacy terms.
• Resend, to send account emails.
• ImprovMX, to forward the emails you send to our support address.

International data transfers

Festro may use third-party service providers that process or store personal information outside South Africa, including providers of hosting, database, payment processing, email delivery and artificial intelligence services. We do not use advertising trackers.

Where personal information is transferred to, or processed by, recipients outside South Africa, we will take reasonable steps to ensure that the transfer is permitted under applicable data protection laws, including Section 72 of POPIA, where applicable. This may include ensuring that the recipient is subject to appropriate legal protections or binding contractual safeguards, or that another lawful basis for the transfer applies.

Depending on the service provider and the services used, your information may be processed in countries other than South Africa. The countries involved, the categories of information transferred and the relevant service providers will be described in our applicable privacy disclosures, as appropriate.

We take reasonable steps to assess our service providers, protect personal information and require appropriate confidentiality and security safeguards, including through contractual arrangements where applicable.

We may also disclose personal information where required or authorised by applicable law, regulation, court order or lawful request, subject to applicable legal requirements.

Cookies

Festro uses only the cookies needed to keep you signed in. We don't use advertising or analytics cookies.

How long we keep it

We keep your account and film information while your account is open. Payment records are kept for as long as the law requires us to keep financial records. When you ask us to delete your account, we delete your films, campaigns and profile, except for records we must keep by law.

Your rights

You can ask to see the personal information we hold about you, to correct it, or to have it deleted. To do so, email support@festro.app from the address on your account. We'll reply as soon as we can and within the time the law allows. If you're unhappy with how we've handled your information, you can complain to South Africa's Information Regulator.

Security

Your data is stored with access controls so that each account can only see its own films and campaigns, and payment details are handled by our payment provider. No online service can promise perfect security. If we learn of a breach affecting your information, we'll tell you and the Information Regulator as the law requires.

Changes

If we change this policy in a way that matters, we'll update the date above and, where appropriate, email you.