Privacy Policy

United Production Services, Inc. ("BOLD Cine," "we," "our") is the controller of your personal information for purposes of this policy.

We collect information in three main ways: directly from you when you interact with us, automatically when you use our site, and from a small number of trusted business partners.

Information you give us

• Account information — name, business name, email address, phone number, password (stored as a salted hash, never in clear text).
• Order information — shipping address, billing address, the products you order, special instructions, and the dealer (if any) associated with the order.
• Payment information — your card number, expiration, and CVV are transmitted directly from your browser to our payment processor (Stripe) and never touch our servers in clear form. We retain only what Stripe returns to us: a token, the last 4 digits, the card brand, and the expiration month/year.
• Communications — anything you send us by email, the contact form, the dealer portal's built-in messaging, or via the AI advisor.

Information we collect automatically

• Device and browser data — IP address, browser type, operating system, screen size, referrer URL, and the pages you visit.
• Cookies and similar technologies — small files stored by your browser that let us keep you signed in, remember items in your cart, and understand how the site is used. See Section 7 for detail.

Information we receive from partners

• Stripe sends us payment outcome (approved, declined, refunded, etc.) and dispute notifications.
• Carriers (UPS, FedEx) send us tracking events when your shipment moves.
• Manufacturers we partner with may provide warranty registration or product information that helps us serve your account.

We use the information we collect to:

• Process and ship your orders, charge your payment method, and resolve returns or refunds.
• Operate dealer accounts, including credit limits, invoicing, and payment terms.
• Send order confirmations, shipping notifications, password resets, and other transactional emails.
• Send marketing emails (only with your consent and only about products and brands we represent). You can unsubscribe at any time.
• Improve the site, debug problems, and prevent fraud or abuse.
• Comply with tax, accounting, and other legal obligations.

We do not sell your personal information. We share it only with the following categories of recipients, and only as needed to operate our business:

• Stripe — payment processing. Stripe's privacy policy is at stripe.com/privacy.
• UPS and FedEx — shipping. We share your name, shipping address, and the items being shipped. Their privacy policies govern how they handle that data.
• Resend — transactional and marketing email delivery.
• Supabase — database and authentication infrastructure (data stored encrypted at rest in the United States).
• Vercel — web hosting and content delivery.
• Anthropic — when you use the BOLD Cine AI Advisor or any of our AI-assisted features (lighting selector, product chatbot), the prompt and any context we send (product specifications, conversation history) go to Anthropic's Claude model. Anthropic does not train models on this data per our service agreement. We do not send your name, email, payment information, or shipping address to Anthropic.
• Fishbowl — our inventory and order-management back office. Order and dealer records are mirrored there.
• Tax and accounting professionals — when required to prepare returns, file sales tax, or audit our books.
• Legal and regulatory authorities — when compelled by subpoena, court order, or applicable law, or when we believe disclosure is necessary to protect rights, safety, or property.
• An acquirer — if BOLD Cine is sold, merged, or reorganized, your information would transfer to the acquiring entity under terms substantially similar to this policy.

• Account data — as long as your account is active, and for a reasonable period after deactivation to handle returns, warranty claims, and tax records.
• Order and invoice records — at least seven years to comply with U.S. tax and accounting rules.
• Marketing-list membership — until you unsubscribe, after which we keep a minimal "do not contact" record so we don't re-add you accidentally.
• Webhook and tracking events — typically up to two years for operational and dispute resolution purposes.
• Server logs — typically 30 to 90 days unless retained longer for a specific investigation.

You have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to fix anything that's wrong.
• Delete — ask us to delete your account and personal information, subject to records we're required to keep by law (e.g., tax records).
• Opt out of marketing — unsubscribe from any marketing email at any time using the link in the message footer. Transactional messages (order confirmations, shipping notifications) continue regardless.
• Object or restrict — ask us to limit certain processing of your information.

To exercise any of these rights, email privacy@boldcine.com from the address associated with your account. We'll respond within 30 days.

California residents (CCPA / CPRA)

Under California law, you have the additional rights to know what categories of personal information we've collected, sold, or shared in the past 12 months; to opt out of any sale or share; and to limit our use of sensitive personal information. We don't sell personal information. To exercise these rights, contact us at the address above.

We use cookies for three purposes:

• Essential cookies — keep you signed in, remember items in your cart, and protect against cross-site request forgery. These are required for the site to function; you can't opt out without losing core functionality.
• Analytics cookies — measure aggregate usage so we can improve the site (which pages get visited, how long visits last, what device sizes are common). We do not use these to identify individual users.
• Partner cookies — Stripe drops a cookie when you enter payment information so it can detect fraud across its network; this is a Stripe behavior we don't control.

We do not use advertising trackers, retargeting pixels, or third-party marketing cookies. Most browsers let you reject cookies in their settings; if you do, some site features (including the dealer portal) won't work.

We take reasonable measures to protect your information:

• All traffic between your browser and our servers is encrypted with TLS (HTTPS).
• Account passwords are hashed with industry-standard algorithms; we never store them in clear text.
• Card data is tokenized by Stripe and never stored on our servers.
• Internal access to customer records is gated by per-role permissions and audited.
• Backups are encrypted at rest.

No system is perfectly secure, and we cannot guarantee that unauthorized access will never happen. If we become aware of a breach that affects your information, we'll notify you in accordance with applicable law.

BOLD Cine's site and services are intended for adults running businesses or making purchasing decisions on behalf of businesses. We do not knowingly collect personal information from children under 13. If you believe we've collected information from a child under 13, contact us and we'll delete it.

Our servers are located in the United States. If you visit from outside the U.S., your information will be transferred to and processed in the U.S. By using the site, you consent to that transfer. We don't actively market to or solicit business from residents of the European Union, the United Kingdom, or other jurisdictions whose laws would otherwise apply.

We may update this policy from time to time. When we do, we'll update the effective date at the top of the page. For material changes that affect how we use information you've already given us, we will notify you by email or through a banner on the site before the change takes effect.

Questions, requests, or concerns about this policy or our handling of your information: