Privacy Policy

Last updated: 2026-08-07

This Privacy Policy describes how Best Boy handles information when you use our tools.

Free and independent

Best Boy by Hessa Al Hammadi is a 100% free, independent service. Donations are welcomed to help keep it running, but they are never expected, encouraged, or required. We will never sell the work you create with our tools, share it with third parties, or use it to train machine learning models.

Information we store

Unlike our local-only tools, Best Boy saves your work so it survives across devices and browsers. That means we do store two things:

Your account. Your email address, and your name and profile picture if you sign in with Google. This identifies your account and nothing else.
Your project content. Screenplays, breakdowns, shot lists, storyboards, schedules, budgets, call sheets, locations, directories, and files you upload.

This data is held on a private server we operate, not on any third-party analytics or advertising platform. The application also keeps a copy in your browser so it stays responsive; clearing your browser data removes that local copy without affecting the copy on the server.

Google sign-in

If you sign in with Google, we receive your email address, name, and profile picture. We request no other permissions and cannot read your Gmail, Drive, Calendar, or contacts. Google’s own handling of your data is governed by the Google Privacy Policy.

Analytics

We may collect anonymous, aggregated usage statistics to improve the product, along with standard server logs retained for security and troubleshooting. No personally identifiable information is collected for analytics without your consent, and the content of your projects is never used for it.

Cookies

We use minimal cookies and local storage strictly necessary for the app to function, such as keeping you signed in and remembering your workspace layout. We do not use advertising or tracking cookies.

Third parties

We do not sell or share your information with third parties. Content stays private to your account unless you choose to share it, for example by inviting a collaborator to a project or generating a shareable call sheet link. You control those choices and can revoke them.

Your rights

You may request a copy of your data, correct it, or have your account and all associated content permanently deleted. Submit the request through the contact form and it will be actioned within 30 days. Deletion is irreversible; residual copies may persist in encrypted server backups for up to 30 days before being overwritten.

Security

All traffic is encrypted in transit. Access to project data is enforced at the database level, so one account cannot read another account’s content. No system is perfectly secure, and no guarantee of absolute security is offered.

Contact

For privacy questions, use the contact form or reach the project owner at hessa.space.