Privacy Policy

The principle

We collect what casting requires and nothing else. There is no mandatory phone number, no postal address and no advertising identifier. We do not sell personal data, and we do not share it with advertisers.

A casting profile is, by design, information you want producers to see. This policy is mostly about everything else: the data you don't publish.

What we collect

Account data: email address, password (stored hashed by our authentication provider, never visible to us), language preference, and two-factor authentication settings.

Profile data you publish: name or stage name, city and travel radius, languages and accents, playable age range, physical description, experience, day rate, social links and showreels.

Activity data: applications, messages, bookings, availability, and profile view counts.

Payment data: we do not store card numbers or bank details. Those go directly to our payment provider. We store the identifiers that let us reconcile a payment with a booking.

Technical data: truncated IP address, user agent, and session and device records so you can see and revoke your own sessions.

Why we process it

To operate the marketplace: showing your profile to productions, matching searches, delivering messages and running bookings.

To process payments and meet the accounting obligations that come with holding funds.

To keep the platform safe: verification, moderation, fraud and scam detection, and the audit record of sensitive actions.

To communicate with you about your account, including security notifications you cannot opt out of, such as a sign-in from an unrecognised device or a change to your payout details.

Who processes data on our behalf

Our database, authentication and file storage provider hosts your account and profile data.

Our payment provider processes bookings, payouts and subscriptions, and holds the payment details we never see.

Our video provider encodes and serves showreels.

Our email provider sends transactional email.

Our infrastructure providers handle rate limiting and bot protection.

We also maintain an operational mirror of a subset of data in a spreadsheet-style tool used by our moderation team. That mirror never contains passwords, authentication secrets, identity documents or the content of private messages — only records and moderation statuses. This is described in more detail in our internal data-flow documentation and summarised here because it involves a third party.

What never leaves our systems

Passwords and two-factor secrets, the content of private messages, identity verification documents, and full IP addresses. These are not mirrored to operational tools and are not accessible to anyone outside the systems that need them.

How long we keep it

Account and profile data: while your account is open, then deleted after a 30-day grace period following closure.

Booking and payment records: retained for the period required by accounting and tax obligations, even after an account is closed.

Messages: for the life of the account.

Audit and security records: retained on a limited schedule, with IP addresses truncated.

Your rights

You can export your data as a structured file and delete your account from your settings, without contacting support.

Deletion is a real deletion, cascading through your profile, showreels, availability and applications. Booking and payment records are retained where the law requires, with your identifying details reduced to what those obligations need.

You also have the right to correct your data, to object to certain processing, and to complain to your local data protection authority.

International transfers

The platform serves actors and productions across several countries, and some of our providers operate outside your region. Where data is transferred internationally, it is done under the safeguards those transfers require. The specific mechanisms will be listed here once the operating entity and its primary establishment are confirmed.

Cookies

We use a small number of cookies, described in the Cookie Policy. No non-essential cookie is set before you consent to it, and there is no tracker on the site before that consent.

Who is responsible

The data controller will be the operating entity, which is not yet incorporated. This section will name it, and give a contact point for privacy requests, before the platform opens to users.