This policy explains what personal data CastMy.AI collects, why we collect it, how we use it, who we share it with, and the rights you have over it. If you have questions, write to privacy@castmy.ai.
1. WHAT WE COLLECT
- Account data — email address, hashed password, role (talent or studio), display name.
- Profile data — stage name, bio, location, age range, gender, height, categories, and the consent toggles you set.
- Media — photos, videos, and voice clips you choose to upload.
- Usage data — pages viewed, searches run, saves made. Used to improve the service.
2. HOW WE USE IT
To run the marketplace: to display your profile to eligible studios when published, to deliver messages and notifications, to keep the service secure, and to comply with legal obligations. We do not sell your data.
3. LEGAL BASIS
We process your data under the contract we have with you (to provide the service), your consent (for optional features like marketing communications), and our legitimate interests (security, fraud prevention, service improvement).
4. WHO WE SHARE DATA WITH
- Supabase (our database and storage provider).
- Vercel (hosting and content delivery).
- Studios you have chosen to publish to, strictly within the consent scope you set.
We do not transfer data to third-party advertisers or brokers. Our processors are bound by data-processing agreements.
5. RETENTION
We retain account data for as long as your account is active. When you delete your account we unpublish you immediately and hard-delete your data after 30 days (records required by law — e.g. tax or dispute — may be kept longer).
6. YOUR RIGHTS
Under UK GDPR / EU GDPR you have the right to:
- Access a copy of your data.
- Correct inaccurate data (you can do this directly in Settings).
- Delete your data (Settings → Account → Delete Account).
- Object to processing based on legitimate interests.
- Port your data to another service.
- Withdraw consent at any time.
Requests that cannot be handled in-app can be sent to privacy@castmy.ai. We respond within 30 days.
7. SECURITY
Data is encrypted in transit. Media files are stored privately and delivered by short-lived signed URLs — never by public links. Access to production data is restricted to a small number of authorised engineers.
8. CHILDREN
CastMy.AI is not directed at people under 18. If you believe a minor has registered, write to us and we will delete the account.
9. CHANGES
We may update this policy. Material changes will be notified by email or in-app at least 14 days in advance.