Privacy Policy

ShowPost is operated by Devak Chowdary Charapalle. For privacy questions, email webapps@annapurnastudios.com.

1. What we collect

• Account details: your name, email address and optional profile photo.
• Authentication data: a hashed password and short-lived one-time sign-in codes.
• Production data: project and crew details, professional contact names, phone numbers and links, work logs, billing rates and amounts, messages, reports, uploaded images, audio, scripts and other files you and your team provide.
• Support and safety data: the contact details, request text, reports, replies and review records you submit, plus private receipt and verification records needed to manage a request.
• Technical and sign-in records, including session IP address, user-agent information and the country derived from your sign-in IP address. We retain that country with your sign-in events. When configured, we also collect crash, error and performance diagnostics to run and secure ShowPost and provide support.
• Chat settings and read positions; if you enable phone alerts, a device notification token, installation and registration identifiers, platform, session association and delivery records.

2. How we use it

We use this data to provide production workflows, support and safety review, sign you in securely (password plus an emailed one-time code), show you the productions you belong to, and keep the service working. We do not sell your data or use it for advertising.

3. Authentication and security

Passwords are stored only as salted hashes, never in plain text. Every sign-in requires a one-time code emailed to you, so a password alone is not enough to access an account.

4. Where data is stored

Account and production records are held in a PostgreSQL database on Amazon Web Services. Uploaded photos and production files may be held in private object storage. Access controls and encrypted backups protect this infrastructure.

5. Sharing

Production content is shared according to your project access and permissions. Private or pending material and support, safety and deletion records have additional access controls. Authorized platform operators may review the records needed to investigate requests and operate the service. We do not share your data with third parties except as needed to run the platform, including providers for email delivery, hosting, private file storage and technical error monitoring when configured.

When phone alerts are available and you enable them, notification services operated by Expo and Apple or Google receive the device token and delivery information. The alert contains a generic new-message notice and routing identifiers, not chat text, names or attachments. Phone alert settings are separate from email preferences. You can choose all messages, mentions only or off, with a separate choice for each chat.

Support receipts are private access credentials: anyone who holds a valid receipt may be able to read and reply to that request. Do not share them publicly.

6. Retention

We keep account data while you use ShowPost. One-time verification codes expire. You can delete your ShowPost account from account settings by verifying your email and confirming deletion. The app confirms completion after your account and associated ShowPost data are removed. If cleanup cannot finish, it shows an error and lets you retry. A private status record is retained for up to 30 days so an interrupted response can be checked without repeating a completed deletion.

If you also use BD, deleting ShowPost does not delete your BD account or its data. Shared identity, credentials, sessions and profile details needed to continue BD remain with that account. Older copies may remain in restricted backups until their retention ends; completed deletions must be reapplied before restored data returns to service. Minimal pseudonymous erasure and account-closure records are kept to prevent deleted data or closed ShowPost access from being restored. These records are not anonymous and are not used for advertising.

Phone registrations are removed on confirmed sign-out or registration removal, and invalid registrations are removed when reported by the notification provider. Chat settings and read positions remain until changed or erased with your ShowPost data. Settled delivery records are eligible for cleanup after seven days while the push worker is operating; unresolved delivery outcomes are kept for investigation rather than automatically sent again. Turning alerts off does not delete your chat history.

7. Your choices

Use Account settings to manage your profile and security. To delete your ShowPost account, choose Delete ShowPost account or open the account-deletion page, verify your email and confirm deletion. If the result is interrupted, use Retry to check and finish the same operation. Keep your email secure because it receives sign-in and verification codes.

8. Contact

Contact Devak Chowdary Charapalle at webapps@annapurnastudios.com or through ShowPost support. Your production administrator can also help with account access.