Privacy

We collect account email, booking briefs, scripts, and the minimum payment metadata Stripe requires. Video files live in a private storage bucket and are not publicly listed.

Roles: FAN and CORPORATE_BOOKER may self-serve. TALENT, AGENT, and ADMIN are issued. Row-level security in Postgres is the access control; anonymous visitors may read only verified, public talent and public showreels.

Auth cookies are first-party. We do not sell personal data. When Supabase, Stripe, or an optional script-polishing model is configured, those processors see only what the corresponding feature needs.

This notice is a draft for the product rebuild. It has not been reviewed by counsel.