Privacy Policy

Last updated: —

Spotlight (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what Personal Data we collect, how we use it, and your choices.

1) Information we collect

  • Account data: name, email, display name, role (actor/casting/agency/crew), organization, and password hash (never your plain password).
  • Profile data: headshots, self-tapes, resumes, measurements, unions, credits, skills, and other fields you provide.
  • Usage & device data: IP address, browser type, pages viewed, and interactions (for security and analytics).
  • Communications: messages you send through the platform, support requests, and feedback.
  • Payment data: handled by our payment processors; we store limited billing metadata (e.g., plan, status) but not full card numbers.

2) How we use information

  • Provide, maintain, and improve the Service (including search, listings, applications, messaging).
  • Personalize features, recommend roles or talent, and operate safety/anti-abuse measures.
  • Communicate with you (service notices, security alerts, changes to terms, optional marketing).
  • Comply with law, enforce our Terms, and protect the platform and our users.

3) Legal bases (EEA/UK)

  • Contract: to provide the Service you requested.
  • Legitimate interests: to secure and improve the Service, prevent abuse, and understand usage.
  • Consent: for optional marketing or cookies where required.
  • Legal obligation: to meet applicable laws and regulations.

4) Sharing & disclosure

  • With other users: your profile, media, and applications are shared as you choose (e.g., when you apply to a listing).
  • Service providers: hosting, media storage (e.g., Cloudinary), email, analytics, payment processing.
  • Legal & safety: to comply with law, enforce terms, and protect rights and safety.
  • Business transfers: if we are involved in a merger, acquisition, or asset sale.

5) Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and analyze usage. Where required, we’ll request consent. You can manage cookies in your browser settings; some features may not work without required cookies.

6) Data retention

We keep data as long as necessary to provide the Service and for legitimate business or legal purposes. You may delete content or your account; we may retain certain records as required by law or for legitimate interests (e.g., safety, fraud prevention).

7) Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object or restrict certain processing. To make a request, contact us at privacy@yourdomain.com.

8) Children’s privacy

We do not knowingly collect personal information from children under the age required by local law without appropriate consent. If you believe a child has provided us personal data, contact us.

9) Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure.

10) International transfers

Your data may be transferred to and processed in countries other than your own. We take steps to protect your data consistent with this Policy and applicable law.

11) Changes to this Policy

We may update this Policy. If changes are material, we’ll provide notice as required by law. Your continued use after the effective date means you accept the updated Policy.

12) Contact

Questions or requests? Email privacy@yourdomain.com.

This document is provided for your convenience and does not constitute legal advice.