Why This Matters on a Call Sheet
A call sheet carries home addresses, mobile numbers, unreleased locations and cast names on one page. This article covers what G-Casper Pro does to protect that. Who the sheet gets sent to is up to you.
Who Can See a Production
Access is per production. You are either the owner or you hold a membership someone granted you, and there is no path to another production's data without one. Membership carries a role and a tier. The role sets whether you can edit. The tier sets whether you see money. An AD-tier member cannot open Burn Rate, Hot Costs, or the financial columns on a production report, even if they can edit everything else.
| Level | What it controls |
|---|---|
| Viewer | Read only. Cannot change anything. |
| Editor | Can edit the production. |
| AD tier | No access to financial tabs or cost data. |
| Production tier | Full access, including financials. |
Data Protection
Underneath:
| Protection | Description |
|---|---|
| Encryption in transit | HTTPS and TLS on every connection |
| Encryption at rest | Stored data is encrypted |
| Regular backups | Data is backed up regularly |
| Password storage | Passwords are hashed with bcrypt and never stored in readable form |
| Uploads | Files are checked by their actual contents, not their filename, so a renamed script cannot be uploaded as an image |
Sessions and Logins
A signed-in session lasts 30 days, then expires whether or not you are using it. Signing out revokes the session on the server, so the token on that device stops working immediately. "Previous session detected" is tied to the specific browser you signed in on. It is never worked out from your network address, so two crew on the same unit wifi are not offered each other's account. Login attempts are rate limited and pass a captcha check, which slows down anyone guessing passwords.
The Links You Text to Crew
Each person gets their own link, showing only their call time and their information. The link carries a long random token, so it cannot realistically be guessed. Links stay valid and can be opened as often as the person needs through the day. Treat one like a printed call sheet: fine in the hands of the person it went to, not for forwarding outside the unit.
Admin Access and Audit
Support staff can reach production data when a support request needs it. Admin actions are written to an audit trail that records who did what, to which record, and from where. The app has no way to edit or delete entries in it.
Your Data Rights
You can:
- Export your production data at any time
- Request deletion of your account and data
- Remove anyone's access to a production you own