Privacy Policy

This Privacy Policy explains how Five Day Film School Limited, trading as Video Business Mastery("VBM", "we", "us", or "our"), collects, uses, stores, and shares personal information when you use dashboard.videobusinessmastery.com (the "Platform"), our marketing site, and related services.

We are based in the United Kingdom. For UK GDPR and data protection purposes, Five Day Film School Limited is the data controller for personal data described in this policy.

1. Who this policy applies to

This policy applies to:

• Visitors to our websites and landing pages
• Members, students, and trial users of the Platform
• People who contact us by email, form, or booking tools
• People whose details members store in their own CRM (see section 6)

2. Information we collect

Account and profile

• Name, email address, and login credentials
• Profile details you choose to add (for example programme type or niche labels)
• Authentication and session data needed to keep you signed in securely

Platform usage

• Learning progress, action-step submissions, and community posts or comments you create
• CRM and pipeline records you enter or import
• AI feature inputs and outputs you generate inside the Platform (for example drafts, research summaries, or sentiment notes)
• Technical logs such as IP address, device/browser type, approximate location, and timestamps for security and reliability

Payments and administration

• Membership or billing status shared with us by our payment or admin tools
• Support messages and feedback you send us

Optional connected email (Gmail)

If you choose to connect a Gmail mailbox, we process mailbox metadata and message content only as needed to provide that feature. See section 5.

3. How we use your information

We use personal data to:

• Provide, operate, and improve the Platform and coaching programme
• Authenticate you and protect accounts against abuse
• Deliver learning content, community features, CRM tools, and AI assistants you request
• Send transactional emails (for example welcome, login, or community reply notices)
• Provide member support and respond to enquiries
• Monitor platform health, prevent fraud, and meet legal obligations
• With your consent or where otherwise allowed, send programme updates or marketing (you can opt out of marketing)

Our legal bases under UK GDPR typically include contract performance (providing the membership you signed up for), legitimate interests (securing and improving the service), consent (where we ask for it, including optional Gmail connection), and legal obligation where applicable.

4. AI features

Some Platform tools use third-party AI providers to generate content from information you submit (for example transcripts, notes, or email threads you approve for analysis). We use those outputs to show results back to you in your account. You should not submit special-category data or anyone else's confidential information unless you have a lawful basis to do so.

5. Optional Gmail / mailbox connection

Connecting Gmail is optional. If you connect a mailbox, you authorise us to access your Gmail account via Google's OAuth permissions, typically including reading mail and sending mail on your behalf when you explicitly choose to send from the Platform.

We use that access to:

• Detect contacts and threads relevant to your outreach
• Show you suggested leads for one-click confirmation before anything is added to your CRM
• Optionally analyse threads you approve to help fill CRM fields and track outbound touch points
• Send replies in a thread only when you click send

Tokens are stored encrypted and tied to your user account. Other members cannot see your mailbox, suggestions, or CRM data. You can disconnect a mailbox at any time in the CRM; you can also revoke access in your Google Account permissions.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalised AI/ML models, and we do not sell that data.

6. CRM data about your prospects

When you store prospect or client details in the CRM, you are responsible for that data and for having a lawful basis to process it. We host it as a processor/service provider so you can use the Platform. We do not use your prospect lists to market our own services to those people.

7. Sharing and processors

We use trusted service providers to operate the Platform, which may include:

• Hosting and infrastructure (for example Vercel)
• Database and authentication (for example Supabase)
• Email delivery (for example Resend)
• AI model providers (for example Anthropic) when you use AI features
• Google, if you connect Gmail
• Payment, booking, or coaching tools we use to run the programme

These providers process data on our instructions and under appropriate agreements. We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (with appropriate safeguards).

8. International transfers

Some providers may process data outside the UK. Where that happens, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms required by UK data protection law.

9. Retention

We keep account and programme data while your membership is active and for a reasonable period afterwards for support, accounting, dispute resolution, and legal requirements. You may request deletion of your account data subject to those needs. Connected mailbox tokens are removed or invalidated when you disconnect.

10. Security

We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access controls, and encryption of sensitive mailbox tokens at rest. No method of transmission or storage is completely secure.

11. Your rights

Under UK GDPR you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure or restriction in certain cases
• Object to certain processing
• Data portability where applicable
• Withdraw consent where processing is based on consent
• Complain to the UK Information Commissioner's Office (ICO)

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

12. Children

The Platform is intended for adults operating businesses. We do not knowingly collect personal data from children.

13. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Significant changes may also be notified in the Platform or by email.

14. Contact

Five Day Film School Limited (trading as Video Business Mastery)
Email: jackson@videobusinessmastery.com
Web: dashboard.videobusinessmastery.com