KitSlate is a production-management platform for studios, freelancers and crews, developed and operated under Mixel × Vizzcast (“KitSlate,” “we,” “us”). It runs at https://kitslate.app and covers gear and inventory management, productions, quotes, invoices, call sheets, crew and client records, and a used-gear marketplace. This policy explains what information we collect when you use the website and the app, why we collect it, and the choices you have. If anything here is unclear, email [email protected] and we will explain it plainly.
When you create a KitSlate account we collect your email address and the name you give us, and we create the account records needed to sign you in and run your workspace. You can sign up with an email address and password, with a sign-in link sent to your email, or with Google Sign-In. We use this information to operate your account — nothing in this section is used for advertising, and we do not sell personal information.
If you sign in with Google, we receive only the basic Google account information required for authentication: your name, your email address, and your Google profile picture. We use it to create and secure your KitSlate account and to show you who is signed in.
KitSlate does not access your Gmail, Google Drive, Google Calendar, or any other Google data. We only access the Google account information required for authentication. If a future feature ever needs access to other Google data, it will ask for your explicit authorization first, through Google’s own consent screen, and it will work only if you grant it. Declining such a request will never affect your ability to sign in or use KitSlate.
We use your email address to sign you in, to send account and security messages, and to deliver the working email the app sends on your behalf — for example a quote or invoice you choose to email to a client, a crew invitation, or a document handed off for signing. Invitations and some notifications contain a small image that tells us the message was opened, and links that tell us they were clicked; mail providers routinely load these images automatically, so we treat opens as a rough signal, not a fact. Every invitation carries an unsubscribe link, and using it stops us emailing you. We do not use your email address for third-party marketing, and we never make an email address a public display name.
Your KitSlate profile — your name, photo, roles, services, city and anything else you add to it — is private until you choose to publish it. A published profile page is public on the open web at your chosen handle, and appears in the crew directory; that is its purpose. You can unpublish it at any time and the public page comes down. Profile pictures you remove are deleted immediately.
KitSlate supports one or more companies per account. For each company you can store its name, branding, addresses, contact details, tax and payment particulars, and defaults used on documents. This information exists so your quotes, invoices and call sheets carry the right letterhead; it is only shown to people you send those documents to, or to teammates you invite into the workspace.
Your inventory — equipment records, categories, kits, cases, locations, serial numbers, purchase prices and values — is your business data. We store and sync it to run the service for you. It is not public unless you explicitly list an item on the marketplace (section 12) or include it in a document you send.
Productions (shoots, jobs and their schedules), the clients and crew attached to them, and the packing and return records around them are stored the same way: private working data, synced to the devices you sign into, visible only to you, your invited teammates, and the people you deliberately send documents to.
Quotes and invoices contain your company details, your client’s details, line items and amounts. We store them so you can edit, send and track them. When you email one, the recipient receives the document; when you enable online payment on an invoice, the payment itself is handled by Stripe (section 16). We do not use the contents of your financial documents for anything other than running the service.
Call sheets contain production details and the names, roles and contact details of crew and cast you add. They are shared only with the people you send them to. You are responsible for having a proper basis to share your crew’s contact details on a call sheet, the same as with any call sheet you would send by hand.
When you invite a crew member to fill in their own details, they receive a scoped link, and what they submit goes into your address book. Their submission merges into your records; it is visible to them while they fill it in and to you afterwards.
Listing gear on the KitSlate market is a choice to publish. A live listing — its title, description, photos, price, condition and general location — is public. When a listing is removed or sold it leaves the market immediately; its photos are permanently deleted 90 days later, and the listing’s basic record (title, price, condition, dates) is kept as your sales history. KitSlate does not handle marketplace payments and never sees buyer payment details.
Files you upload — equipment photos, listing photos, profile pictures, receipts, logos — are stored with our database and storage provider (Supabase) and served over encrypted connections. Receipts or documents you choose to run through an AI-assisted reader are processed by Anthropic solely to extract the details you asked for; we do not hand your files to AI services unless you invoke such a feature on that file.
KitSlate stores your workspace data and your sign-in session in your browser’s local storage — without that the app cannot work at all. We use this essential storage and nothing more: no advertising cookies, no third-party tracking cookies, no cross-site tracking. Your saved theme preference is also kept on your device. If you clear your browser’s site data you will be signed out, and locally cached work not yet synced may be lost.
We keep our own record of which pages and screens get used and which links get clicked, so we can see what is worth building and what is quietly broken. This is first-party analytics on our own servers — we are not currently running Google Analytics or any advertising tag. While you are signed in, that record is linked to your account. When you are signed out it carries a random identifier and is not linked to you, and we make no attempt to work out who you are from it. These records are deleted automatically after 180 days, and immediately if you close your account.
Subscription billing, and online invoice payments where you enable them, are processed by Stripe. Your card details go directly to Stripe and never touch our servers — we receive only what we need to run your subscription and show payment status: things like the plan you are on, whether a payment succeeded, and the last four digits of the card. Stripe’s handling of your data is governed by Stripe’s privacy policy.
Your data is stored with Supabase (database, authentication, file storage and backups) and the website is served by Cloudflare. Email is delivered by Resend. Data is encrypted in transit, and account backups are encrypted before they are stored. These providers handle your data only to run the service for us; we do not share your data with anyone else, and we do not sell it.
We protect your data with encrypted connections, encrypted backups, access controls that scope every account to its own records, and server-side checks on every write. No online service can promise perfect security, so we also make it easy to keep your own copies: you can export your entire workspace to a single backup file, or export records as CSV and PDF, at any time. If we ever become aware of a breach affecting your personal data, we will tell you what happened and what we are doing about it.
You can ask us at any time to:
Email [email protected] to exercise any of these. We will respond within 30 days. Depending on where you live, these rights may be backed by law (such as the GDPR or similar legislation); we honour them for everyone regardless.
You can request deletion of your account by emailing [email protected] from your account’s email address. Deletion removes your account, workspaces, inventory, productions, documents, uploaded files and analytics records. Published pages and listings come down. Some records may be retained where the law requires it (for example, records of payments made to us), and backups age out on their normal rotation after deletion.
KitSlate is a business tool and is not directed at children. You must be old enough to enter a contract where you live to hold an account.
If we change this policy we will update the date at the top, and if a change is material we will let you know — by email or a notice in the app — before it takes effect. We will never quietly reduce your rights over your own data.
Privacy questions: [email protected]
Website: https://kitslate.app