Privacy Policy & Data Protection Architecture

This Privacy Policy describes how AUDITIONY Inc. ("AUDITIONY," "we," "us," or "our"), as the designated Data Controller, collects, processes, encrypts, and safeguards personal information across our creative social network, casting management platform, and production workspaces.

We adhere to the highest international data protection frameworks, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and regional digital personal data protection enactments across our operating territories.

This policy governs all registered users—including Screenwriters, Actors, Performers, Casting Directors, Talent Agents, Studio Executives, and verified production teams—as well as unauthenticated visitors browsing public areas of the platform.

Because AUDITIONY serves a specialized ecosystem, the data we collect is strictly tailored to the professional requirements of your creative discipline:

A. TALENTS & ACTORS: We collect your professional name, stage moniker, verified contact email/phone, agency representation details, headshots, showreels, self-tapes, voice reels, performance credits, training history, union memberships (e.g., SAG-AFTRA, Equity, local guilds), and physical specifications (height, weight range, body build, eye color, hair color, and wardrobe sizing for costumes).

B. SCREENWRITERS & AUTHORS: We collect your registered legal identity, guild affiliation numbers, screenwriting credits, project metadata, loglines, pitch bibles, registered treatments, copyrighted screenplay drafts, and read-approval preferences.

C. CASTING DIRECTORS, PRODUCERS & AGENCIES: We collect official business email addresses, company registration numbers, tax identification details, office locations, verified casting filmography, agency roster rosters, and electronic deal memo signatures.

In the entertainment industry, casting teams require physical specifications (e.g., height, build, shoe size, jacket measurements) to assess visual continuity and prepare wardrobe fitting. AUDITIONY recognizes that these measurements represent highly sensitive personal information.

NO PUBLIC SEARCH ENGINE EXPOSURE: Physical measurements, sizing charts, and personal phone numbers are NEVER indexed by search engines (e.g., Google, Bing) and are never exposed in public profile previews.

ROLE-BASED ACCESS CONTROL (RBAC): Sensitive measurements are accessible exclusively to verified, human-vetted Casting Directors and Producers attached to an active project to which the actor has explicitly submitted an application or accepted an invitation. Once an application is archived or closed, temporary access tokens expire automatically.

TALENT PRIVACY TOGGLES: Talents retain granular controls in their account settings: they may set physical spec visibility to "Public," "Verified Industry Only," or "Strictly Private (Accessible only upon project submission)."

AUDITIONY’s patent-pending Script Guardian™ protocol protects screenwriters from intellectual property theft and unauthorized leaks. To achieve this, our reading viewer collects and logs specific forensic metadata during reading sessions.

DYNAMIC FORENSIC WATERMARKING: When a verified producer or director opens a screenplay with author approval, our rendering engine overlays a dynamic diagonal forensic watermark across every page. This watermark embeds the reader’s full legal name, production company, IP address, exact UTC timestamp, and a unique cryptographic audit hash (#AUD-TOKEN).

IMMUTABLE READING AUDIT LOGS: To ensure transparency, AUDITIONY logs the reader’s identity, session start and end times, page-turn timestamps, and total reading duration. These audit logs are accessible to the screenplay author so they maintain complete oversight of who reviewed their original IP.

ENTERPRISE POSTGRESQL & ROW LEVEL SECURITY (RLS): All application data is stored in enterprise PostgreSQL databases configured with Row Level Security (RLS) policies. Every database query enforces strict tenant and user boundaries, preventing cross-tenant data leaks at the database kernel level.

ENCRYPTION IN TRANSIT & AT REST: All communications between your browser, our API endpoints, and our storage nodes are encrypted using modern Transport Layer Security (TLS 1.3). Media assets, self-tapes, showreels, and screenplay PDFs are stored on encrypted volumes utilizing AES-256 standards.

EPHEMERAL SIGNED MEDIA URLS: Video showreels and self-tapes are never served via public, static web links. Playback streams utilize cryptographically signed, short-lived URLs (expiring within minutes) to prevent hotlinking, automated ripping, or unauthorized downloading.

AUDITIONY enforces heightened privacy protections for child performers and young artists under the legal age of majority (under 18 years of age or the applicable statutory age in the user’s jurisdiction), in strict compliance with the Children’s Online Privacy Protection Act (COPPA), GDPR Article 8, and international child welfare standards.

PARENTAL OR GUARDIAN CO-ADMINISTRATION: Minor profiles must be created, verified, and administered by a parent or legal guardian. The parent’s contact information serves as the primary communication channel for all audition notifications and callback invitations.

NO DIRECT MARKETING OR BEHAVIORAL PROFILING: We never sell, profile, or deliver targeted behavioral advertising to minor accounts. Contact details of minor talents are shielded from adult users unless explicitly authorized by the parent in the context of a confirmed, verified casting engagement.

AUDITIONY utilizes minimal, purpose-specific cookies and local storage tokens strictly necessary to maintain your security session and deliver our services:

A. STRICTLY NECESSARY COOKIES: Secure authentication session tokens, cross-site request forgery (CSRF) defense tokens, and load balancer affinity cookies. These cookies are essential for you to log in and navigate the platform safely.

B. FUNCTIONAL PREFERENCE COOKIES: Locale selection (storing your language choice between English and Arabic) and theme preferences.

C. NO THIRD-PARTY AD TRACKERS: We do NOT inject third-party behavioral advertising trackers, data brokers, or advertising pixel cookies into our casting rooms or portfolio pages.

CASTING WORKFLOW SHARING: When you submit to an audition, your Comp Card, headshots, showreel links, and submitted self-tapes are shared securely and exclusively with the verified casting director, director, and approved producers attached to that specific project breakdown.

AGENCY ROSTER SHARING: When represented by a verified talent agency on AUDITIONY, your agent has authorization to submit your profile package to casting notices on your behalf, with complete audit visibility in your submission radar.

INFRASTRUCTURE SUB-PROCESSORS: We engage reputable, SOC 2 / ISO 27001 certified technology providers strictly to host and deliver our platform infrastructure (including Supabase for PostgreSQL RLS databases, Cloudflare for DDoS protection and encrypted edge delivery, and AWS for encrypted media storage). All sub-processors are bound by strict Data Processing Agreements (DPAs).

Regardless of where you reside, AUDITIONY guarantees you comprehensive data sovereignty and the ability to exercise your statutory privacy rights:

A. RIGHT OF ACCESS: You have the right to request a complete copy of all personal credentials, media submissions, and casting history stored on our systems.

B. RIGHT TO RECTIFICATION: You may update or correct your resume, credits, headshots, contact info, or physical measurements at any time directly through your profile settings.

C. RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN"): You may request the permanent deletion of your account and all associated media files. Upon account closure, all active database records are scrubbed within 30 days, except where retention is strictly required by statutory tax or legal compliance mandates.

D. RIGHT TO DATA PORTABILITY: You may request an export of your portfolio and submission logs in a structured, commonly used, and machine-readable format (JSON).

E. RIGHT TO RESTRICT OR OBJECT: You may object to specific processing activities or restrict visibility settings via in-app privacy toggles.

DATA RETENTION PERIODS: We retain personal information for as long as your account remains active and in good standing. Audition submissions and self-tapes associated with closed production calls are archived according to the project’s retention rules. Inactive audit logs and security session records are retained for a maximum of twelve (12) months before automated purging.

MODIFICATIONS TO THIS POLICY: We may update this Privacy Policy from time to time to reflect technological advancements, enhanced security protocols, or legislative updates. In the event of material modifications, we will notify you at least fourteen (14) days in advance via your registered email address or a prominent banner within your platform dashboard.

CONTINUED USE: Your continued use of AUDITIONY following the effective date of an updated Privacy Policy constitutes your acceptance of the revised practices.