1. Overview
MultiMediaPlug (“we,” “us,” or “our”) operates a two-sided marketplace connecting media professionals, equipment owners, and location owners with production companies and content creators. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information.
By using MultiMediaPlug, you agree to the practices described in this Policy.
2. Information We Collect
2a. Information You Provide
- Account information: name, email address, password
- Profile information: display name, phone number, profile photo, bio, city, state
- Provider information: provider type (crew/equipment/location), service area, skills, years of experience, portfolio URLs, IMDb URL, availability settings
- Listing information: title, description, pricing, images, location, availability, equipment details, property details
- Insurance information: Certificate of Insurance (COI) documents and expiry dates (providers only, where required)
- Communications: messages sent to or received from other users, booking inquiry text
- Reviews and ratings: content of reviews you write
- Payment information: billing details submitted at checkout — processed directly by Stripe; we do not store full card numbers
- Project information: project names, descriptions, collaborator emails, shoot dates, budgets
2b. Information Generated Through Use
- Booking records: dates, amounts, parties, status, cancellation details, payout records
- Conversation records: message content, timestamps, file attachments, read status, last active timestamps
- Activity data: listing views, search queries, favorites, recently viewed listings, shortlists
- Ratings: your average rating as a booker and as a provider, and the number of reviews you've received
- Notification preferences: your opt-in/opt-out choices for email notifications
2c. Information Collected Automatically
- Log data: IP address, browser type, pages visited, timestamps
- Device information: device type, operating system, browser
- Session tokens: authentication cookies set by Supabase for your login session
3. How We Use Your Information
We use your information to:
- Create and maintain your account
- Facilitate bookings, payments, and payouts between Bookers and Providers
- Display listings and profiles in search results
- Send transactional emails (booking confirmations, payment receipts, booking reminders, review prompts, password resets)
- Send message notifications when you receive a new message (you can turn this off in profile settings)
- Detect and redact contact information (phone numbers, emails) in messages before a booking is confirmed and paid
- Enforce our Terms of Service, including moderation and dispute resolution
- Prevent fraud, abuse, and unauthorized access
- Analyze usage patterns to improve the Platform (using aggregated, anonymized data)
- Comply with legal and tax obligations (e.g., retaining payment records for 7 years)
4. How We Share Your Information
We do not sell your personal information. We share information only as described below.
With Other Users
- Your public profile (name, display name, profile photo, bio, city, ratings, provider type) is visible to other users
- Your listings are visible to all visitors
- Your phone number and email address are only shared with the other party in a booking conversation after the booking is both confirmed and paid
With Service Providers
We use the following third-party services to operate the Platform:
- Supabase — database, authentication, real-time messaging, and file storage. All data is stored on Supabase's infrastructure. Supabase Privacy Policy
- Stripe — payment processing, Stripe Connect for provider payouts, and tax form generation. Your payment card details go directly to Stripe and are never stored by us. Stripe Privacy Policy
- Resend — transactional and notification email delivery. We share your email address and relevant booking or message context to send emails on our behalf. Resend Privacy Policy
- Google Maps — address geocoding (converting addresses to coordinates for location-based search). Google Privacy Policy
- Mapbox — location search autocomplete in listing creation and booking forms. Mapbox Privacy Policy
- Vercel — application hosting and infrastructure. Vercel Privacy Policy
For Legal Reasons
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of MultiMediaPlug, our users, or the public.
5. Contact Information in Messages
To protect users and the integrity of the marketplace, our system automatically detects and redacts phone numbers, email addresses, and social media handles in messages between users until a booking is confirmed and payment has been made. Once a booking is confirmed and paid, contact information is unlocked for both parties. The original unredacted message content is stored securely and is accessible only as permitted by our platform access controls.
6. File Uploads and Storage
Files you upload to MultiMediaPlug are stored on Supabase's secure infrastructure. This includes:
- Profile photos — publicly visible
- Listing images — publicly visible
- Message attachments — accessible via a direct URL shared within the conversation
- COI documents — accessible to platform administrators for verification
- Review photos — publicly visible when posted with a review
File URLs are not secret — they are accessible to anyone with the link. Do not upload sensitive documents (other than COI certificates when required) to the Platform.
7. Data Retention
We retain data for different periods based on the type and purpose:
- Account data: retained while your account is active; anonymized 30 days after a deletion request is confirmed
- Payment and booking records: retained for 7 years for tax and legal compliance
- Messages: retained for up to 3 years
- Reviews: retained indefinitely (as a public record of the transaction)
- Login and security logs: retained for 90 days
- Analytics data (raw): retained for 90 days
8. Your Rights and Choices
Depending on where you live, you may have the following rights:
- Access: request a copy of the personal information we hold about you
- Correction: update inaccurate or incomplete information via your profile settings
- Deletion: request deletion of your account and associated data (subject to legal retention obligations)
- Opt-out of marketing emails: unsubscribe at any time via the link in any marketing email or via notification preferences in your profile
- Opt-out of message notifications: toggle off in your profile settings
- Data portability: request an export of your data via the data download option in your profile settings
California residents (CCPA/CPRA): You have the right to know what personal information is collected, to opt out of data sales (we do not sell data), and to non-discrimination for exercising your rights.
EU/UK residents (GDPR): You have the right to object to processing, restrict processing, and lodge a complaint with a supervisory authority. Our lawful basis for processing is contract performance (for bookings and payments), legitimate interests (for fraud prevention and platform security), and consent (for marketing emails).
To exercise your rights, contact us at privacy@multimediaplug.com. We will respond within 30 days.
9. Cookies
We use cookies and similar technologies. For details, see our Cookie Policy.
10. Security
We implement technical and organizational safeguards to protect your information, including encrypted connections (HTTPS), HTTP-only session cookies, row-level database access controls, and input validation on all API endpoints. However, no system is completely secure. We cannot guarantee that your information will never be accessed, disclosed, or altered in breach of our security measures.
11. Children's Privacy
MultiMediaPlug is not intended for users under 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a user under 18, we will delete it promptly. Contact us at privacy@multimediaplug.com if you believe a minor has provided us with personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The “Last updated” date at the top of this page indicates when the Policy was last revised.