Privacy Policy

Who this covers

This policy explains how Wolfpup, Inc. (“we”) handles personal information when you visit actualsbudget.com or use the actuals service. A company that subscribes (a “workspace”) decides what goes into its budgets. For that content we act on the workspace’s behalf, and the workspace is responsible for having the right to put it there.

What we collect

Account information. Your email address, and the name, role and company you give when you sign up. We sign you in with a one-time code we email you (or the link in that email), or with a password if you choose to set one; passwords are stored only as salted hashes by our authentication provider.

Workspace content. Everything you and your team put into actuals: budgets, line items, rates, notes, purchase orders, payroll and petty cash entries, overages, snapshots, templates, company name, address and logo, and documents you upload. Payroll and purchase order entries can include the names and pay of crew and vendors; please enter only what your production needs.

Collaboration records. Who belongs to which workspace and budget, with what role, and invitations sent by email. We keep an activity history of changes to each budget so it can be shown in its history and restored.

Support messages. If you report a problem, we keep your message, an optional screenshot or PDF, the page you were on, your browser, and any error the page reported, so we can reply to your email. We delete these when your account is deleted.

Billing information. Subscriptions are paid through Stripe. Card details go directly to Stripe; we never see or store full card numbers. We keep the Stripe customer and subscription identifiers and the subscription status.

Business contact information. To tell production companies about actuals, we may get business contact details, such as name, job title, company and work email, from public sources and business data providers. You can ask us to stop contacting you at any time.

Usage and device information. Our hosting provider records standard server logs (such as IP address, browser and time of request) for security and reliability. We use Vercel Web Analytics to count page views in aggregate; it does not use cookies to track you across sites. We also use Google Analytics to understand how people find and use actuals: which pages are visited, where visits come from, and product events such as creating a budget or starting a subscription. Before anything is sent to Google, we remove share-link and invitation tokens and budget identifiers from page addresses, and we never send budget contents, names, email addresses or amounts. Signed-in visits carry your account’s internal ID so usage can be counted across devices. Google’s advertising features are turned off.

How we use it

• To run the service: store and calculate budgets, keep everyone’s view in sync, generate PDFs and send invitation and sign-in emails.
• To bill the workspace and keep its subscription status current.
• To keep the service secure, prevent abuse and fix problems.
• To answer you when you write to us, and to tell you about changes to the service.
• To let production professionals know about actuals; every such email lets you opt out.
• To meet legal obligations, enforce our Terms and protect our rights, our users and the public.

What we don’t do

• We don’t sell personal information, and we don’t share it for cross-context behavioural advertising.
• We don’t use your budgets or their contents to advertise to you or anyone else.
• We don’t look at a workspace’s budgets except to provide support you ask for, to keep the service secure, or when the law requires it.

Who processes it for us

We use a small number of service providers, each bound to use the information only to provide their service to us:

• Supabase: database, authentication, sign-in and invitation email, and file storage.
• Vercel: hosting and aggregate web analytics.
• Google: Google Analytics, for usage measurement (not advertising).
• Stripe: payments, invoices and the billing portal.
• Resend: the email we send ourselves when you report a problem, and a notice when someone new signs up.

These providers may process data in the United States and other countries where they operate.

We may also disclose information when we believe in good faith the law, a court order or a government request requires it; to investigate fraud, security issues or breaches of our Terms; to protect the rights, property or safety of us, our users or others; or to a buyer or successor in a merger, acquisition, financing or sale of all or part of our business, which will remain bound by this policy for the information it receives.

Sharing inside actuals

Budget content is visible to the people its workspace or budget owners invite, according to their role. If an owner turns on a share link, anyone with that link can view the parts of the budget the owner chose, and can pass the link on. Owners can turn a link off at any time.

Workspaces decide what personal information about crew, vendors, talent and clients goes into their budgets and who it is shared with. For that information the workspace is responsible for giving any notice and getting any consent the law requires, and we process it on the workspace’s instructions. We aren’t responsible for how workspaces, their collaborators or link recipients use information shared with them.

How long we keep it

We keep workspace content for as long as the workspace exists. If a subscription ends, the workspace becomes read-only and its content is kept so you can still export it; nothing is deleted automatically. When you ask us to delete an account or workspace, we delete it from the live service, and it leaves our providers’ backups as those backups expire. Billing records are kept as long as tax and accounting law requires.

Security

Data travels over HTTPS and is encrypted at rest by our providers. Access inside the database is restricted per workspace and per budget by row-level security, and server-only credentials never reach the browser. No method of transmission or storage is perfectly secure, so we can’t guarantee the security of your information, and you are responsible for keeping your sign-in safe and for who you share budgets with. If we learn of a breach that affects your information we will tell you as the law requires.

Your choices and rights

You can see and correct your account details in Settings, export any budget you can open, and delete your account in Settings. You can ask us to access, correct, delete or provide a copy of your personal information by writing to hello@actualsbudget.com. If your information is in a budget run by a company you work with, we may refer you to that company, because it controls that content.

California residents have the right to know what personal information we collect and how we use it, to delete it, to correct it, and not to be discriminated against for exercising these rights. We don’t sell or share personal information as the CCPA defines those terms. You can use an authorised agent to make a request; we may need to verify your identity first.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal information to perform our contract with you or your company, for our legitimate interests in running, securing and promoting a business tool (including contacting business professionals), to meet legal obligations, and with your consent where the law requires it. You also have the right to object to or restrict processing, to withdraw consent, and to complain to your local data protection authority. Your information is transferred to and processed in the United States; where required, we and our providers rely on recognised safeguards such as Standard Contractual Clauses.

We will respond to verified requests within the time the law requires. We may keep information where the law requires or allows it, for example to resolve disputes, enforce our Terms or meet tax obligations.

Cookies

We use cookies that are needed to keep you signed in and to keep the service secure.

Google Analytics sets first-party cookies on actualsbudget.com (named _ga and _ga_*) to recognise a returning browser and group its visits. They last up to two years. You can block them in your browser settings or with Google’s opt-out add-on; actuals works the same without them. We don’t use advertising cookies.

Because there is no common standard for browser “Do Not Track” signals, we don’t respond to them.

Other websites

actuals may link to websites and services we don’t run, such as Stripe’s billing pages. Their own privacy policies apply, and we aren’t responsible for them.

Children

actuals is a business tool and isn’t meant for anyone under 16. We don’t knowingly collect information from children.

Changes to this policy

If we change this policy we will update the date above, and if the change is significant we will tell workspace owners by email before it takes effect. If a translation of this policy conflicts with the English version, the English version controls.