Privacy Policy

1. Introduction

Masterwork Films Ltd (“we”, “us”, “our”) operates the CLN Work platform (“cln.work”). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.

2. Data We Collect

We collect the following categories of personal data:

• Account Information: name, email address, password hash, avatar image, Google account ID (if using Google Sign-In).
• Organisation Data: organisation name, subdomain, team member details, department structures, roles, and hierarchy information.
• Usage Data: tasks, objectives, updates, comments, notes, deliverables, workspace files, and other content you create within the platform.
• Technical Data: IP address, browser type, device information, access times, and pages viewed.
• Payment Data: billing information is processed by our payment provider Stripe. We do not store full credit card details on our servers.

3. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve the CLN Work platform.
• Authenticate your identity and manage your account.
• Process payments and manage subscriptions.
• Send service-related notifications and communications.
• Monitor and ensure the security of our platform.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: hosting (Railway), payment processing (Stripe), email delivery, and analytics providers who process data on our behalf under data processing agreements.
• Within Your Organisation: data you create within the platform is accessible to other members of your organisation as defined by your role and permissions.
• Legal Requirements: when required by law, regulation, or legal process.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. When an organisation deletes their account, we delete associated data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

6. Data Security

We implement industry-standard security measures including 256-bit TLS encryption in transit, encrypted databases at rest, secure authentication with hashed passwords, and regular security audits. Access to personal data is restricted to authorised personnel only.

7. Your Rights

Under applicable data protection laws (including UK GDPR), you have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing of your data.
• Data portability (receive your data in a structured format).
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority (the ICO in the UK).

To exercise these rights, contact us at privacy@cln.work.

8. Cookies

We use essential cookies required for authentication and platform functionality. We do not use third-party advertising or tracking cookies.

9. International Transfers

Your data may be processed in countries outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-platform notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

Masterwork Films Ltd
Email: privacy@cln.work