Privacy Policy

1. Introduction

Be In Overflow Inc. ("Overflow," "we," "us," or "our") operates the Overflow platform, a community-driven cinema experience available at beinoverflow.com and through our mobile applications (collectively, the "Platform").

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Platform. We are committed to being transparent about our data practices and protecting your privacy.

Our Core Commitment: We do not sell your personal data. Ever. The information we collect is used solely to operate and improve the Platform and serve our community.

2. Information We Collect

2.1 Information You Provide

Account Information: When you create an account, we collect your name, email address, and password. You may also provide a profile photo.

Community Identity Information: To help us curate content and experiences that resonate with our community, we may ask you to voluntarily share demographic information including age range, gender identity, race/ethnicity, location (city and state), and faith community involvement. This information is always optional. We primarily use this information in aggregate form to understand and serve our community; we do not publicly display your demographic details on your profile.

Payment Information: When you participate in Experiences or purchase a Council Membership, payment processing is handled by Stripe, our payment processor. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We receive only limited information from Stripe, such as the last four digits of your card and the card type, for your records and customer service purposes.

Referral Information: If you were referred by an organization, community partner, or promotional code, we collect this information to properly credit referral sources and understand how our community grows.

Communications: When you contact us for support or provide feedback, we collect the content of those communications.

2.2 Information Collected Automatically

Usage Data: We collect information about how you interact with the Platform, including pages viewed, Experiences browsed, features used, and actions taken.

Device Information: We collect information about the device you use to access the Platform, including device type, operating system, browser type, and unique device identifiers.

Location Information: With your permission, we may collect general location information (city-level) to show you relevant Experiences in your area. We do not track precise GPS location.

Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how our Platform is used. See Section 7 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

Operating the Platform: To provide, maintain, and improve the Platform; process your Participations and payments; send transaction confirmations and Experience updates; and provide customer support.

Personalization: To recommend Experiences and content based on your interests, location, and viewing history; and to customize your Platform experience.

Community Curation: To understand our community demographics and ensure we are serving diverse audiences well; to inform programming decisions; and to measure the impact of our mission.

Communications: To send you information about new Experiences, films, and features (if you've opted in); to communicate important updates about your account or the Platform; and to respond to your inquiries.

Analytics and Improvement: To analyze usage patterns and trends; to measure the effectiveness of features and content; and to develop new features and improve existing ones.

Safety and Security: To detect and prevent fraud, abuse, and security incidents; to enforce our Terms of Service; and to protect the rights and safety of our users and others.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

Service Providers: We share information with third-party service providers who perform services on our behalf, including payment processing, email delivery, hosting and infrastructure, video streaming, error monitoring, and analytics. These providers are contractually obligated to use your information only to provide services to us and to protect your information.

Destinations and Partners: When you participate in an Experience, we may share limited information (such as your name and participation count) with the Destination hosting the Experience, solely for the purpose of facilitating your attendance.

Affiliate and Community Partners: If you were referred by a community partner, we may share aggregated, anonymized information about referral performance with that partner. We do not share your individual personal information with referral partners without your consent.

Legal Requirements: We may disclose your information if required by law, such as in response to a subpoena or court order, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: If Overflow is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

With Your Consent: We may share your information in other circumstances with your explicit consent.

5. Third-Party Services

Our Platform integrates with various third-party services to provide functionality, process payments, and improve our services. The following list includes, but is not limited to, key providers:

• Stripe: Processes all payment transactions. Stripe's collection and use of your payment information is governed by their privacy policy at stripe.com/privacy.
• Supabase: Provides our database and authentication infrastructure.
• Mux: Powers video streaming and playback functionality.

We also work with other infrastructure, communication, hosting, error monitoring, and analytics providers that support our Platform. These providers may have access to your information only as necessary to perform their functions and are obligated to maintain the confidentiality and security of your data.

We encourage you to review the privacy policies of any third-party services you interact with through our Platform. We may update the specific providers we use from time to time without amending this policy, but we will always require our service providers to protect your information appropriately.

6. Your Rights and Choices

6.1 Access and Correction

You can access and update most of your account information directly through your Profile settings on the Platform. If you need assistance, contact us at hello@beinoverflow.com.

6.2 Data Portability

You may request a copy of your personal data in a portable format. Contact us to submit a data portability request.

6.3 Deletion

You may request deletion of your account and associated personal data. Note that we may retain certain information as required by law or for legitimate business purposes (such as preventing fraud or resolving disputes).

6.4 Marketing Communications

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email or updating your preferences in your account settings. Note that you may still receive transactional communications about your account and Participations.

6.5 Do Not Track

Some browsers offer a "Do Not Track" feature. Our Platform does not currently respond to Do Not Track signals.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for the Platform to function, including maintaining your login session and processing transactions.
• Preference Cookies: Remember your settings and preferences to enhance your experience.
• Analytics Cookies: Help us understand how users interact with the Platform so we can improve it.

Most browsers allow you to control cookies through their settings. Note that disabling certain cookies may affect the functionality of the Platform.

Advertising: We do not currently use advertising cookies or work with advertising partners to show you targeted ads based on your Platform activity. If this changes in the future, we will update this policy and provide appropriate notice and controls.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure authentication systems, regular security assessments, and access controls limiting who can view personal data.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information after account deletion for legitimate business purposes, including complying with legal obligations, resolving disputes, enforcing our agreements, and maintaining records for financial and audit purposes.

Participation and transaction records are retained for a minimum of seven years for tax and accounting purposes.

10. Children's Privacy

The Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

11. Additional Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Sale of Personal Information: We do not sell your personal information as defined under California law.

To exercise your California privacy rights, contact us at hello@beinoverflow.com.

12. International Users

Overflow is based in the United States and our Platform is primarily designed for users in the United States. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using the Platform, you consent to the transfer of your information to the United States. If you are located in the European Economic Area, United Kingdom, or other regions with laws governing data collection and use that differ from U.S. law, you understand that we may transfer your information to the United States and other countries where we operate.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Platform before the changes take effect. We encourage you to review this Privacy Policy periodically.

The "Effective Date" at the top of this policy indicates when it was last updated.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. A Note on Community Data

We recognize that asking for demographic information, particularly regarding race, ethnicity, and faith, requires trust. We want to be transparent about why we ask:

Overflow exists to amplify underrepresented voices in cinema. Understanding who our community is helps us curate content that resonates with you, ensure we're genuinely serving diverse audiences, measure the impact of our mission, and make programming decisions that reflect our community's interests.

When we analyze or share insights based on demographic information, we do so in aggregated or anonymized form. Your individual demographic details are not displayed publicly on your profile, shared with other users, or used to identify you personally in any reports or communications.

This information is always optional. You can use the Platform fully without providing demographic data. And again: your data is never sold.