This policy explains what personal data Actorsy collects, why we collect it, how we use it, who we share it with, and the rights you have over it. If you have questions, write to [email protected].
1. WHAT WE COLLECT
- Account data — email address, hashed password, role (talent or studio), display name.
- Profile data — stage name, bio, location, age range, gender, height, categories, and the consent toggles you set (including a separate marketing opt-in for homepage featuring).
- Media — photos, videos, and voice clips you choose to upload.
- Usage data — pages viewed, searches run, saves made. Used to improve the service.
2. HOW WE USE IT
To run the marketplace: to display published talent profiles to signed-in studio and enterprise members, to deliver messages and notifications, to keep the service secure, and to comply with legal obligations. If you opt in, we may also use your stage name, primary photo and categories in public homepage marketing placements. We do not sell your data.
3. LEGAL BASIS
We process your data under the contract we have with you (to provide the service), your consent (for optional features like marketing communications), and our legitimate interests (security, fraud prevention, service improvement).
4. WHO WE SHARE DATA WITH
- Supabase (our database and storage provider).
- Vercel (hosting and content delivery).
- Google (optional services): Google Analytics (only after cookie consent) and Google GenAI/Gemini for character-sheet generation where enabled.
- Payments and contracting providers(for example Stripe and Dropbox Sign where those features are used).
- Studios and enterprise members with signed-in accounts, where your profile is published and within the consent scope you set.
We do not transfer data to third-party advertisers or brokers. Our processors are bound by data-processing agreements.
Where personal data is transferred outside the UK or EEA, we use an appropriate transfer safeguard (for example the UK IDTA, UK Addendum to SCCs, or EU SCCs, depending on the transfer route).
5. RETENTION
We retain account data for as long as your account is active. When you delete your account we unpublish you immediately and hard-delete your data after 30 days (records required by law — e.g. tax or dispute — may be kept longer).
6. YOUR RIGHTS
Under UK GDPR / EU GDPR you have the right to:
- Access a copy of your data.
- Correct inaccurate data (you can do this directly in Settings).
- Delete your data (Settings → Account → Delete Account).
- Object to processing based on legitimate interests.
- Port your data to another service.
- Withdraw consent at any time.
Requests that cannot be handled in-app can be sent to [email protected]. We respond within 30 days.
You also have the right to complain to your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).
7. SECURITY
Data is encrypted in transit. Media files are stored privately and delivered by short-lived signed URLs — never by public links. Access to production data is restricted to a small number of authorised engineers.
8. CHILDREN
Actorsy is not directed at people under 18. If you believe a minor has registered, write to us and we will delete the account.
9. CHANGES
We may update this policy. Material changes will be notified by email or in-app at least 14 days in advance.