Privacy Policy
Entity: BLOXoffice, operated by The People's Film Cooperative (DBA BLOXoffice)
Last Updated: 2026-03-17 · Governing Law: State of Minnesota; CCPA/GDPR as noted
Draft Document — Pending Final Legal Review. This policy must be reviewed by licensed counsel, Data Processing Agreements executed with all third-party processors, and a live privacy@bloxoffice.net address activated before it is legally operative.
Summary — What We Collect and Why
| Data Type | Why We Collect It | Shared With |
|---|---|---|
| Account info (name, email) | To create and manage your account | Base44 (platform), internal only |
| Payment info (card, billing address) | To process transactions | Stripe (payment processor) |
| Film upload data (metadata, files) | To distribute your film on the platform | Stored via Base44/platform infrastructure |
| Usage data (pages viewed, films watched) | To improve the platform | Internal analytics only |
| Communications (support tickets, emails) | To respond to your requests | Internal only |
| Tax information (SSN/EIN, W-9) | IRS 1099 reporting obligations | IRS (as required by law) |
1. Who We Are
BLOXoffice ("BLOXoffice," "we," "us," or "our") is a filmmaker cooperative distribution platform operated by The People's Film Cooperative (DBA BLOXoffice), a Minnesota cooperative. BLOXoffice is accessible at bloxoffice.net.
Data Controller (for GDPR purposes): The People's Film Cooperative (DBA BLOXoffice)
Privacy Contact: privacy@bloxoffice.net
2. Scope — Who This Policy Covers
This Privacy Policy applies to all users of the BLOXoffice platform, including:
- Viewers who create accounts and purchase tickets
- Filmmakers who upload and distribute content
- Promoters/Affiliates who market BLOXoffice content
- Investors who participate as investor-class members
- Visitors who browse bloxoffice.net without creating an account
3. Information We Collect
3.1 Information You Provide Directly
Account Registration
- Full name, email address, username / display name
- Password (stored in hashed form — BLOXoffice does not have access to your plaintext password)
- User role (viewer, filmmaker, promoter, investor)
Filmmaker-Specific Information
- Production company name (if applicable)
- Film metadata (title, synopsis, genre, runtime, rating, credits, cast/crew)
- Film files (video, poster art, supplemental materials)
- Tax identification number (SSN or EIN) — required for 1099 reporting if earnings exceed $600/year
- Bank account information or Stripe Connect details for revenue disbursement
- Chain of title documentation and rights certifications
Payment Information
- Credit/debit card number, expiration date, and security code — collected directly by Stripe; BLOXoffice does not store raw card numbers
- Billing name and address
- Transaction history (amounts, dates, ticket types purchased)
3.2 Information Collected Automatically
Usage Data:
- Pages visited and time spent; films viewed and watch duration; search queries
- Device type, operating system, and browser version
- IP address; referring URL (how you arrived at the Platform)
Cookies and Tracking Technologies
| Type | Purpose | Duration |
|---|---|---|
| Essential/Session | Required for platform functionality (login state, shopping cart) | Session |
| Authentication | Keep you logged in across sessions | 30 days |
| Affiliate Attribution | Track affiliate referrals for commission calculation | 30 days |
| Analytics | Understand platform usage patterns | 12 months |
You can manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the Platform. BLOXoffice does not currently use third-party advertising cookies.
4. How We Use Your Information
4.1 Providing the Platform
Creating and managing accounts; processing ticket purchases and delivering access to films; calculating and disbursing filmmaker and promoter revenue.
Legal basis (GDPR): Performance of contract (Article 6(1)(b))
4.2 Legal and Tax Compliance
Generating 1099-NEC forms for filmmakers and promoters earning over $600/year; responding to lawful subpoenas; processing DMCA takedown notices.
Legal basis (GDPR): Legal obligation (Article 6(1)(c)); Legitimate interests (Article 6(1)(f))
4.3 Communications
Responding to support requests; sending transaction confirmations and revenue disbursement notices; notifying you of policy changes. You may opt out of marketing communications.
Legal basis (GDPR): Performance of contract (Article 6(1)(b)); Consent for marketing (Article 6(1)(a))
4.4 Platform Improvement and Analytics
Understanding how members use the Platform to improve features; diagnosing technical issues; preventing fraud.
Legal basis (GDPR): Legitimate interests (Article 6(1)(f))
4.5 What We Do NOT Do
- Sell your personal information to third parties for advertising or marketing purposes
- Use your personal information to serve third-party targeted advertising
- Share your personal information with data brokers
- Use filmmaker content for AI model training without express written consent
- Rent or lease member contact lists
5. How We Share Your Information
5.1 Service Providers (Processors)
| Provider | Data Shared | Purpose |
|---|---|---|
| Stripe, Inc. | Payment info, transaction data | Payment processing, fraud prevention, Connect disbursements |
| Base44 (BaaS) | All platform data | Database hosting, backend application services |
| Deno Deploy | Function execution logs, request data | Backend function hosting |
| TVStartup.com | Coupon/promo code data | Promotional ticket distribution sync |
| Google (Gemini AI) | Film concept descriptions (internal review only) | AI-assisted content review |
5.2 Other Members — Limited
- Filmmaker names and film titles are displayed publicly on the Platform
- Filmmaker profile information (bio, photo if provided) is visible to Platform users
- Promoter/Affiliate usernames may be associated with referral links visible in the checkout flow
- Individual viewer purchase history and personal information is NOT displayed publicly
5.3 Legal Requirements
BLOXoffice may disclose your personal information if required to do so by law or in the good faith belief that such disclosure is necessary to comply with a legal obligation, protect the rights or property of BLOXoffice, prevent or investigate wrongdoing, or protect personal safety.
6. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | Duration of account + 3 years | Legal claims limitation period |
| Payment transaction records | 7 years from transaction date | IRS record-keeping requirements |
| Tax documents (W-9, 1099 copies) | 7 years | IRS requirements |
| Film upload data and metadata | Duration of distribution agreement + 1 year | Contractual; rights verification |
| DMCA notices | 5 years | Legal record; safe harbor documentation |
| Usage/analytics (identifiable) | 12 months | Platform improvement |
7. Your Privacy Rights
7.1 Rights Available to All Users
- Access: Request a copy of the personal information BLOXoffice holds about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information, subject to exceptions noted in Section 7.4
- Opt-Out of Marketing: Opt out at any time via the unsubscribe link in any email or by emailing privacy@bloxoffice.net
- Data Portability: Receive a copy of your personal information in a structured, machine-readable format
7.2 California Consumer Privacy Act (CCPA/CPRA) Rights
If you are a California resident, you have additional rights including: Right to Know; Right to Delete; Right to Correct; Right to Opt Out of Sale or Sharing (BLOXoffice does not sell personal information); Right to Limit Use of Sensitive Personal Information; and Non-Discrimination for exercising your rights.
To submit a CCPA request: Email privacy@bloxoffice.net.
7.3 GDPR Rights (EU/EEA/UK Residents)
If you are located in the European Union, European Economic Area, or United Kingdom, you have rights under the GDPR including: Right of Access (Art. 15); Right to Rectification (Art. 16); Right to Erasure (Art. 17); Right to Restriction of Processing (Art. 18); Right to Data Portability (Art. 20); Right to Object (Art. 21); and the right to lodge a complaint with a supervisory authority in your country of residence.
7.4 How to Exercise Your Rights
Email: privacy@bloxoffice.net (preferred — fastest response)
Response timeline: CCPA — 45 days (extendable to 90); GDPR — 30 days (extendable to 60)
8. Security
BLOXoffice implements technical and organizational measures to protect your personal information, including encryption of data in transit (TLS/HTTPS), hashed and salted password storage, access controls and role-based permissions, Stripe's PCI-DSS compliant infrastructure for payment data, and secure API key management through environment secrets.
No method of transmission over the Internet is 100% secure. While BLOXoffice uses commercially reasonable security measures, we cannot guarantee absolute security.
9. Children's Privacy
The BLOXoffice Platform is not directed to children under the age of 13 (or 16 in the EU/EEA). BLOXoffice does not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided personal information to BLOXoffice, please contact us at privacy@bloxoffice.net.
10. Planned Features — Special Notice
Several features referenced in this Policy are planned future features that are not yet live, including: NFT ticket minting on the Algorand blockchain; ALGO and USDC payment options; BLOX token purchases; Pera Wallet integration; and the secondary NFT marketplace (VideoStore). When these features are activated, BLOXoffice will update this Privacy Policy and provide notice to members.
11. Changes to This Policy
BLOXoffice may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date, post a prominent notice on the Platform, and send an email notification to registered members. Your continued use of the Platform after the effective date constitutes your acceptance of the changes.
12. Contact Us
Privacy Contact: privacy@bloxoffice.net
General Legal: legal@bloxoffice.net
DMCA Agent: dmca@bloxoffice.net
BLOXoffice is operated by The People's Film Cooperative (DBA BLOXoffice), a Minnesota cooperative association (MN SOS File No. 1651992200039).