Detroit Picture Co.
Privacy Policy
Effective 9 September 2026
We collect what we need to quote a job, run it, deliver it and get paid. That is mostly business contact details for the people we work with, not personal information about consumers.
We do not run analytics. We do not use advertising or tracking cookies. We do not sell or share your information with anyone for their own purposes.
01 Who we are
Detroit Picture Company LLC, a Michigan limited liability company at 1250 Library St., Suite 21, Detroit, Michigan 48226. Questions about this policy, or a request to see or delete your information, go to info@detroitpictureco.com.
Library St. Studios LLC is a separate company that shares our building and some of our systems. If you are a studio member, their policy covers that relationship.
02 What we collect
Clients. The company name, industry, website, and for each contact a name, email, phone and job title. Whether a contact may sign in to the portal. Notes we keep about the working relationship.
Projects. What we are making, where and when we are shooting, the delivery date, and the deliverables themselves.
Crew. Name, contact details, role and availability, so a call sheet can be built and nobody is booked onto two jobs at once.
Billing. Quotes and invoices. Card details are entered directly with Stripe and never reach our servers; we hold Stripe's customer reference, not your card number.
Sign-in. An emailed link, or Google. If you use Google we receive your email address and name, and nothing else.
An activity log. Who did what in the admin and when. It is how a disputed change gets answered, and it is append-only.
03 Footage and stills
Work we shoot for you is yours under the terms of the project. Where a person appears in footage, a release is signed before that footage is used, and a minor's release is signed by their parent or guardian.
We keep project files as long as the project is live and for a reasonable archive period afterwards, so a client coming back a year later is not told the masters are gone. Ask us to delete yours and we will, subject to anything we are contractually required to keep.
04 Who else touches it
Four companies process information on our behalf, and none may use it for their own purposes: Supabase (the database and file storage), Vercel (hosting), Stripe (payments) and Resend (email we send you).
One third party loads without being asked, and it is the reel. Vimeo hosts the film on the home page, which means Vimeo sees your IP address when that page opens. It is loaded with do-not-track set, so there is no analytics cookie and no viewing profile built from it. We name it here rather than leave you to find it: the reel is the page, and a home page with nothing on it is not an option we have.
Everything else waits for you. Google Maps on the contact page does not load until you press the button, because it is a convenience and the address next to it is the actual information. Our fonts are served from this domain rather than from Google, so reading any other page here tells Google nothing.
We do not sell your information and we do not share it for advertising. We would disclose it if the law required it, and we would tell you unless we were prohibited from doing so.
05 Cookies
One cookie, and it is the one that keeps you signed in to the portal. It is HttpOnly and signed, it carries your email address and a role hint, and it does not follow you anywhere else. There is no analytics cookie and no advertising cookie, which is why this site has no consent banner: there is nothing to consent to.
06 What you can ask for
Write to info@detroitpictureco.com and we will tell you what we hold, correct anything wrong, or delete what we are not required to keep. We will come back to you within thirty days.
07 Security, and what happens if it fails
Portal access is limited to contacts a client has authorised, checked on every request rather than only at sign-in, so removing someone ends their session on their next click. Card details never reach us. Admin access is limited to the three partners.
If personal information were exposed in a way that put someone at risk, we would notify them, as Michigan's Identity Theft Protection Act requires. No system is perfect and we are not going to claim otherwise.
08 Changes
If we change this policy in a way that matters, the effective date at the top changes and active clients hear about it by email. We will not quietly broaden what we collect.