How we handle
your data.

Open Set accounts are created with email and password, or via Google sign-in. Passwords are hashed by our authentication provider; we never store plaintext passwords.

You can reset your password from the sign-in page, and you can request deletion of your account by emailing us.

When you create a profile we collect your name, location, role, and any portfolio details you choose to publish. When you post a project we store the project information you submit, including an optional contact email used to route applications to you.

We collect minimal technical logs (timestamps, error reports) needed to keep the platform reliable. We do not sell personal information.

Public profiles, films, and projects are visible to anyone browsing the site. Private fields | such as a project's contact email | are only readable by the person who created the record.

Messages and connection requests are visible only to the people involved in the conversation. Database access is enforced server side with row-level security so the client cannot bypass these rules.

Open Set runs on Lovable Cloud, which provides our application hosting, database, authentication, and storage. Data is stored and processed by our backend provider; we rely on their platform-level encryption in transit and at rest.

Email delivery is handled through our notify.openset.co.za transactional sending pipeline. Posters and avatars are stored in private buckets and served via signed URLs.

We use cookies that are strictly necessary for sign-in to work. We do not run third-party advertising trackers.

You can edit or remove most of your profile content from your dashboard. To delete your account or request a copy of the data we hold about you, email hello@openset.co.za.

If you believe you have found a security vulnerability, please email security@openset.co.za with details and steps to reproduce. Please do not publicly disclose the issue until we have had a chance to investigate.