Privacy Policy

bi2MEDIA LLC
30 N Gould St, Ste N
Sheridan, Wyoming 82801
United States of America

A public contact email will be added before launch.

This policy covers the website bi2filmworks.com and bi2media.com, the BI² Concept Studio, our career portal and the handling of personal data in the course of enquiries, offers and productions. BI² FILMWORKS is a brand of bi2MEDIA LLC, which is the controller for the processing described here.

We process personal data only where a legal basis exists: to perform a contract or pre-contractual steps (Art. 6(1)(b) GDPR), on the basis of your consent (Art. 6(1)(a) GDPR), to comply with legal obligations (Art. 6(1)(c) GDPR) or to protect our legitimate interests (Art. 6(1)(f) GDPR), such as operating this website securely and responding to enquiries.

This website is built and hosted on the Lovable platform with a cloud backend (database and file storage). When pages are accessed, the host processes technically necessary server log data (including IP address, time of access, resource requested, referrer and browser type) to deliver the site and to detect misuse. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log data is deleted or anonymised after a short period unless it is required to investigate a security incident.

If you contact us by email or through a form on this site, we process the data you provide (name, company, contact details, the content of your message and any attachments) solely to handle your enquiry, to prepare an offer and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Enquiry data is deleted once the matter is closed and no statutory retention periods apply. If an enquiry leads to a contract, the data becomes part of the client file (see 'Clients and productions').

Your input in the BI² Concept Studio — the text of the briefing chat, any voice notes you record and the resulting concept — is processed to produce a scene plan, scene stills, an AI-generated concept film and a cost estimate. Processing takes place on the basis of your input in order to deliver the feature you requested (Art. 6(1)(b) GDPR).

For the generation of text, images, transcriptions and video we use AI services provided by Google (Gemini and Veo models). Your briefing and voice recordings are transmitted to Google for this purpose and may be processed on servers in the United States. We do not use your input to train models of our own. Please do not enter special categories of personal data or confidential trade secrets into the Concept Studio; a briefing under a non-disclosure agreement can be arranged with us directly at any time.

Voice input may use your browser's speech recognition or our own transcription service; in either case audio data may be processed by the respective provider. Microphone access requires your explicit permission and can be withdrawn at any time in your browser settings.

Concept films, scene plans and estimates are stored so that you can return to them during your session and so that we can pick up a briefing you choose to submit to us. Generated material that is not linked to an enquiry is deleted after a reasonable period. To prevent misuse and to control costs, we apply rate limits; for this purpose a hashed (pseudonymised) form of your IP address is stored for a short time.

Application data and uploaded documents (CV, portfolio links, answers to position-specific questions) are processed solely for the purpose of the application process and to decide on the establishment of a working relationship (Art. 6(1)(b) GDPR and applicable national employment law). CVs are stored in restricted, non-public cloud storage and are only accessible to the persons involved in the selection process.

When an application is submitted we store a hashed IP address and browser type for abuse prevention, and we send an internal notification email containing the application details. Application data is deleted no later than six months after the process has been completed, unless you consent to a longer retention in our talent pool or statutory retention obligations apply.

In the course of an offer or a production we process the business contact data of our clients and their staff (names, roles, contact details, correspondence, invoicing data) to perform the contract and to comply with commercial and tax retention obligations. Contract and invoicing data is retained for the statutory retention periods.

Productions may involve personal data of the people who appear on camera or on audio (protagonists, interviewees, employees at a location): image, voice, name, position and the statements they make. We process this material on the basis of the production contract and the consents or release forms obtained for the production. Where our client obtains these consents, the client is responsible for their validity; we will provide a suitable release template on request.

We treat all information we receive about a client's business, products, figures and people as confidential. We sign non-disclosure agreements on request and bind our crew and post-production partners to confidentiality. Confidential material is stored on access-restricted systems and is not disclosed to third parties except to the extent required for the agreed production and distribution.

We share personal data only with service providers who process it on our behalf and under our instructions: the hosting and backend platform (Lovable / Supabase), AI providers for the Concept Studio (Google), email and communication providers, and, in productions, crew members, post-production and dubbing partners, and the broadcasters or publishers with whom a film is placed. We select these providers carefully and conclude data processing agreements where required.

bi2MEDIA LLC is established in the United States, and some of our providers process data in the United States or other countries outside the European Economic Area. Where the GDPR applies, we rely on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework where a provider is certified), on the EU Standard Contractual Clauses or on your explicit consent as safeguards for such transfers.

We use technically necessary cookies and comparable browser storage where this is required to operate the website and the studio features, for example to remember your language and to keep a Concept Studio session running. Non-essential cookies, analytics or marketing tools are set only with your consent. We use privacy-friendly, aggregated usage statistics provided by our hosting platform that do not build personal profiles.

If a technical error occurs while you are using this site, error information (error message, page, browser type, timestamp) may be transmitted to our development tooling so that we can fix the problem. This data does not include the content of your briefing and is retained only for as long as needed to resolve the error (Art. 6(1)(f) GDPR).

We keep personal data only for as long as necessary for the purposes described here or as required by law. Enquiry data is deleted once the enquiry is closed; application data no later than six months after the process ends; contract, correspondence and invoicing data for the statutory commercial and tax retention periods; production material (footage, audio, project files) for as long as needed to fulfil the contract and to secure the usage rights granted, unless a longer or shorter period has been agreed with the client.

We protect personal data with appropriate technical and organisational measures: encrypted transmission (TLS), access-restricted storage with role-based permissions, database-level access rules, hashed IP addresses where identification is not required, and the principle of processing only the data we need.

You have the right to information about the personal data we hold about you, to rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work.

To exercise your rights, contact us using the details in the legal notice. We may ask you to verify your identity before responding.

This website and our services are directed at business clients and adult professionals. We do not knowingly collect personal data from persons under 16 years of age. If you believe a minor has provided us with data, please contact us so that we can delete it.

We update this policy when our services, our providers or the legal framework change. The version published on this page applies. Material changes that affect an ongoing contract will be communicated to the client directly.

Data processed: email address and password hash, organisation details (name, website, countries, languages, industry, description), memberships and roles, projects, offers, requests and orders, project messages with attachments, assistant conversations and technical logs.

Purpose and legal basis: providing the account and the marketplace, arranging and handling bookings between advertisers and media houses (performance of a contract, Art. 6(1)(b) GDPR), and security and abuse prevention (legitimate interest, Art. 6(1)(f) GDPR).

Retention: account data until the account is deleted. Orders and business records are kept without personal reference after deletion where statutory retention duties apply. You can export or delete your data at any time under “Account”.

Recipients and processors: providers for hosting and database, email delivery and AI processing; in future also a payment provider. Details of a booking are shared with the media house or advertiser involved.