My Casting Suite Privacy Policy

My Casting Suite provides casting CRM tools used by casting companies, studios, networks, production houses, and their teams. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Who This Policy Covers

This Policy applies to visitors of our website, account users (including admins and staff), and applicants/end users whose information is submitted through forms managed by our customers.

2. Data We Collect

Depending on how you use the platform, we may collect: contact and account data (name, email, phone), authentication data (password hash, login session data), organization profile data (company details, logo, settings), and applicant data entered by customers or applicants (profile details, notes, statuses, media such as photos/videos).

3. Usage, Device, and Log Data

We collect technical and usage data needed to operate and secure the service, such as IP address, browser/device info, request logs, and interaction events. We use this for reliability, security, troubleshooting, and product improvements.

4. Cookies and Session Technologies

We use essential cookies/session tokens to keep users authenticated and maintain secure app functionality. Disabling essential cookies may prevent parts of the service from functioning correctly.

5. How We Use Personal Information

We use information to provide and maintain the service, create and manage accounts, process customer requests, support collaboration workflows, deliver transactional communications, prevent fraud and abuse, and comply with legal obligations.

6. Customer Data and Roles

For applicant and casting data submitted by customers, customers generally act as data controllers/businesses and My Casting Suite acts as a processor/service provider. Customers are responsible for their own legal basis, notices, and consent collection where required.

Customers own Customer Data. My Casting Suite does not sell Customer Data and does not claim ownership of Customer Data.

7. Sharing and Disclosure

We do not sell personal information. We may share data with service providers and infrastructure partners that help us deliver the service (for example hosting, storage, authentication, and email delivery), and when required by law, legal process, or to protect rights, safety, and platform integrity.

8. Data Retention and Deletion

We retain data while accounts are active and as needed for legitimate business and legal purposes. If a customer organization deletes its account, we delete Customer Data from active systems within 30 days, subject to legal, security, fraud-prevention, and dispute-resolution requirements.

Backup copies may persist for up to 90 days before automatic purge. We may retain de-identified and aggregated analytics that cannot reasonably identify an individual or organization.

9. Security

We implement administrative, technical, and organizational safeguards designed to protect data, including access controls, encryption in transit, and least-privilege access practices. No method of transmission or storage is completely secure.

10. International Data Transfers

Your data may be processed in countries where our service providers operate. Where required, we use contractual and organizational safeguards for cross-border data transfers.

11. Your Rights (CCPA/CPRA, GDPR, and Similar Laws)

Depending on your location, you may have rights to access, correct, delete, restrict, object to certain processing, and data portability. You may also have rights related to non-discrimination for exercising privacy rights.

12. End User Requests

If you submitted data through a customer’s casting form, that customer is usually the primary point of contact for your data rights request. We will assist our customers in responding to valid requests where required.

13. Minors

Our services are not intended for children under 16. If you believe personal data of a child under 16 was submitted without proper authorization, contact us and we will investigate and take appropriate action.

14. Third-Party Links and Customer Tools

Our services may include links to third-party websites, and customers may implement their own third-party tracking or analytics on customer-managed pages/forms. Their policies govern those tools.

15. Do Not Sell or Share

We do not sell personal information and do not share personal information for cross-context behavioral advertising. To make a privacy request (including deletion/access), contact us at privacy@mycastingsuite.com.

16. Policy Updates

We may update this Policy from time to time. We will post the updated version here and revise the “Updated” date.

17. Contact

Privacy questions and requests: privacy@mycastingsuite.com.