Privacy Policy

Data we collect

• Account data: name, email, handle, password hash (managed by our authentication provider), workspace role.
• Profile data you choose to publish: bio, location, skills, union status, rates, socials, credits, headshots, reels and banners.
• Activity data: castings applied to, bookings, live sessions, replays, self-tapes, rehearsal takes, chat and direct messages.
• Commerce data: wallet balances, coin purchases, gifts, subscriptions, payouts and shop orders. Card details are handled by Stripe and never touch our servers.
• Verification data: legal name and identity or portfolio documents you submit for a verification badge.
• Technical data: IP address, device and browser information, and security/rate-limit counters.

Why we use it

• To run the account, workspace and features you asked for.
• To show your public profile to the audience you chose — verified listings, casting applications, live stages.
• To process payments, escrow, payouts and tax reporting.
• To keep the platform safe: spam scoring, moderation, rate limiting, fraud prevention and audit logging.
• To send transactional notifications (booking status, verification decisions, escrow releases). Marketing email is opt-in and separately unsubscribable.

Who we share it with

• Other members, only as your settings dictate — an unverified or unpublished profile is not listed in discovery.
• Processors who run parts of the service: our cloud/database host, our live video and recording provider, Stripe for payments, our email provider, and our AI provider for AI Studio features.
• Authorities, when legally compelled — see the Law Enforcement & Data Requests policy.
• We do not sell your personal data, and we do not share it with advertisers.

Legal bases (EEA/UK)

• Contract: operating your account, bookings and purchases.
• Legitimate interests: security, fraud prevention, moderation and service improvement.
• Consent: marketing email, optional calendar sync and any optional analytics cookies.
• Legal obligation: tax, accounting and lawful requests.

Your rights

You can access, correct, export or delete your data from your dashboard, or by writing to privacy@scriptu.org. You may also object to or restrict certain processing, and withdraw consent at any time.

We respond to verified requests within 30 days. You can complain to your local data protection authority if you are unhappy with our response.

International transfers and retention

Data may be processed outside your country by the processors listed above under appropriate safeguards such as standard contractual clauses.

Retention periods are set out in full in the Data Policy & Retention page.