Privacy Policy

1. Data we collect

• Account data - name, email address, account type (hirer or talent), and password credentials managed by our authentication provider.
• Profile data (talent) - the information you choose to publish, such as photos, showreels, bio, location, skills, credits, qualifications, languages, rates, and availability.
• Optional casting attributes (talent) - physical characteristics (for example height, hair type, or skin tone) and work preferences (for example scene-comfort preferences) that you may add to help casting decisions. Providing these is entirely voluntary.
• Usage data - searches, profile views, likes, shortlists, and messages sent through the platform.
• Technical data - IP address, device and browser information, and cookies needed to keep you signed in and to protect the Service (for example rate limiting).

2. How we use your data

• To operate the Service - creating your account, displaying talent profiles to signed-in hirers, and delivering messages between users.
• To power search - your search queries and talent profile text are processed by AI models to interpret briefs and rank results.
• To keep the Service safe - authentication, rate limiting, abuse detection, and enforcing our Terms of Service.
• To communicate with you - service emails such as password resets and important account notices.
• To improve the Service - aggregated, de-identified analysis of how features are used.

We rely on the performance of our contract with you, our legitimate interests in operating and securing the Service, and - for optional casting attributes that reveal sensitive information - your explicit consent, which you can withdraw at any time by removing the information from your profile.

3. Who can see your data

• Talent profile information is visible to signed-in users of the platform. It is not published on the open web.
• Sensitive work preferences are restricted: they are stored separately and only surfaced to authenticated hirers through controlled search and profile features.
• Messages are visible only to the participants in the conversation.
• We never sell your personal data.

4. Service providers

We share data with a small number of processors who help us run the Service, under contracts that protect your data:

• Supabase - database, authentication, and file storage.
• Vercel - application hosting and content delivery.
• OpenAI - processing of search queries and profile text to power AI search. This data is not used by OpenAI to train its models.

Some providers process data outside the UK. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.

5. Cookies

We use strictly necessary cookies to keep you signed in and to protect the Service. We do not use third-party advertising cookies.

6. Retention

We keep your data for as long as your account is active. When you delete your account, your profile, messages, and associated data are deleted, except for limited records we must keep to comply with legal obligations or resolve disputes. Backups are purged on a rolling schedule.

7. Your rights

Under UK data protection law you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data - most profile data you can edit directly in your account.
• Delete your data ("right to erasure").
• Restrict or object to certain processing.
• Data portability - receive your data in a machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We protect your data with industry-standard measures including encryption in transit, row-level access controls in our database, role-checked APIs, and rate limiting. No system is completely secure, so please use a strong, unique password for your account.

9. Children

The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

10. Changes to this policy

We may update this policy as the Service evolves. If a change is material, we will notify you by email or an in-product notice before it takes effect. The "Last updated" date at the top shows the current version.

11. Contact

Privacy questions and rights requests can be sent to hello@atlas.select.