Privacy notice

What we keep, and why

• Your account — name, date of birth, city and contact details, to run your account. Your age on the day you apply, as a band (18–24, 25–34, 35–44, 45 and over), is also used in our fairness checks. The day (never the time) you last visited orders company search results; it goes with your account.
• Your profile — credits, training, skills, and anything you choose to add, such as a bio, pictures, a portfolio, awards and festivals, certifications and licences, and organizations and other experience. Those last three are shown to the companies that see your profile, and to our team when reviewing a report about a role you applied to; they are never scored and never sent to an AI model.
• Gender, if you give it — used for matching you to roles that state the genders they are for, and our own checks that the platform treats groups fairly; once company search opens, a company searching people can also filter by it, as by age, height and build. Companies are never shown it on your profile.
• Where you came from — if you applied by a role's shared link, where the link was posted (Instagram, WhatsApp, email and the like — never anything about you), for that company's counts. It's never used to rank you.
• Applications — what you sent each company, your answers, and a résumé file if you attach one (sent as you made it, never scored, and deleted on the same schedule as self-tapes, or when you withdraw), and what the company records about how it went: invited, declined, or — after inviting you — called back or booked, which it marks for its own records once that has happened away from the platform. You see these in your data export.
• Self-tapes, with your separate consent — the video, and technical checks on it: sound, framing, and the first 20 seconds transcribed to check you said your name and the role.
• Identity checks — your ID document and liveness clip, to confirm your name and age.
• Messages — conversations with a company about a role you were invited to, or that a company started after finding you, about one of its open roles. A conversation closes once the company has an answer — it reviewed your tape, decided, or the role closed — and stays readable; after that, a company that wants to reach you does so directly.
• Records of activity — an audit log of who did what and when, by account, including every time someone views an application or your media. When something is refused or blocked (too many attempts, a forged request), the IP address and browser it came from. Other technical logs carry account ids but not your details.
• Cookies — the sign-in cookies that keep you signed in, and one that remembers whether you chose light or dark, on that browser only.

If you are hiring

• Each person's name, email and job title, to run the company's account.
• Your company's verification documents, deleted 365 days after they are sent.
• What each person does on the platform is recorded in the audit log, by account.
• What your company asks our team, and our answers, which everyone at the company can read; kept with the company's records, and a former colleague's name stops showing once they leave.
• If you press “Suggest skills” on a role, its title and synopsis go to Claude, as described under Automation and AI.

Separate consents, and where to withdraw them

• Analysing your self-tapes, and each tape sent to a role: on your account's Privacy page. Withdrawing deletes the tapes.
• Showing your pictures and portfolio: on the Privacy page. Withdrawing deletes them.
• Each application: withdraw it from the role's page (open it from your Tracker). Your note, written answers and the credits you sent are deleted; the record that you applied, and what you chose, is kept.
• Each event sign-up: cancel it from the event's page. If you registered on a company's own page instead, what you gave went to that company directly — ask them; our deletion doesn't reach it.
• AI skill suggestions: on your profile or the Privacy page. Turning them off deletes every suggestion.
• Reading a résumé you attach into suggestions for your profile: a box you tick when applying, turned off on your profile or the Privacy page, which deletes every suggestion from it.
• Research into a better ranking: off unless you turn it on, on the Privacy page, for 2 years at a time. Stopping leaves your applications out of anything made afterwards.
• Using the platform at all: delete your account.

Automation and AI

• Face detection (OpenCV YuNet) checks whether a face is visible and in frame in your self-tape, as one of its technical checks; it finds where a face is; it doesn't recognise who you are, or read expressions or emotion. It is switched off for now, and returns only after its fairness check.
• Speech-to-text (Whisper tiny) transcribes the first seconds of your self-tape to check you said your name and the role; only those seconds; it doesn't judge your voice, accent or performance. It runs on our own servers.
• Skill suggestions (Claude, by Anthropic) only if you turn it on: reads what you typed under “what you did” on your credits and your courses’ names, with each one’s category or discipline, and suggests skills you can add; it is sent nothing else from your profile — not your name, or a credit’s production, character, company or director — nothing is added unless you add it, and it never scores you. It is switched off for now.
• Skill suggestions for roles (Claude, by Anthropic) when a company asks: reads a role’s title and synopsis, which the company wrote, and suggests skills to ask for; it is sent nothing about you or any applicant, and the company decides which skills to add. It is switched off for now.
• Filling your profile from your résumé (Claude, by Anthropic) only if you tick it when applying: reads the résumé you attached and suggests credits, training and skills to add to your profile; nothing is added unless you tap Add, and it never records contact details, dates, age, or anything about your body or gender. It is switched off for now.
• How well you fit a role is worked out by fixed rules from what the role asks for and what you sent — not by AI — and every part of it can be explained.
• None of these decide anything about you: a person at the company does. Nothing here judges your performance, your looks or your emotions.
• We check our outcomes for fairness by gender and age band, so that no group is treated worse at any step.
• Research into a better ranking, only if you opt in: a pseudonymised copy of your applications — the role's brief, the skills, experience and kinds of credits you sent, parts of your Fit, and what happened — kept to research a ranking that learns from outcomes. Never your name, picture, writing, gender, age, city, height, build or languages, and no id; because your details repeat on each application, your applications could still be matched to one another by what they contain. Nothing is trained on it during the pilot, and none of it leaves the platform until data-privacy counsel have reviewed it.

Who sees it

• A company sees your profile and what you send for its roles you apply to, or its events you sign up for. Companies can't search for people yet. When that opens, after legal review, verified companies can find you by searching profiles — they see your name, city, age, experience, kinds of credits, skills, languages and union, and can filter by those and by gender, height, build and availability — open your profile, and message you about one of their open roles. They never see a score. You'll be findable unless you turn it off on your Privacy page — you can turn it off now. Every search and profile a company opens is recorded, and we check who companies contact, by gender and age band, for bias.
• Our own team sees an application, or a conversation with a company, only when reviewing a report or a role in moderation, and every look is recorded.
• A company you applied to, signed up with or messaged can report you to our team — for example if it thinks you may be under 18. You aren't told who reported you; an open report keeps your records (see How long).
• Services that run the platform for us: Clerk (sign-in), Amazon Web Services (hosting, file storage and email). [Counsel to complete: data-processing terms, transfer safeguards.]

How long

• Self-tapes: deleted 180 days after you send them, or 30 days after the role closes if sooner.
• ID documents and liveness clips: deleted 90 days after you send them.
• Event sign-ups: cleared 90 days after the event.
• Backups: a copy of the server, including the database and its logs, is made daily and each copy is kept 7 days, so anything deleted is gone from the backups within 7 days.
• When you delete your account, your name, contact details, profile, media and messages are removed after 30 days — or, if a report involving you is open, once it is resolved, and at most 90 days after that.
• Kept after that, without your name or contact details (pseudonymised, not anonymous): your city, gender, skills, experience and the kinds of work you'd done; any suspension on record; the record of each application and its outcome; the audit log; and the record that you agreed to these documents. They let us measure fairness and keep a true history of decisions.
• Security logs: 90 days, and up to 7 days more in backups. [Counsel to confirm.]

Your choices

• Download a copy of your profile, applications, consents and other records from your account's Privacy page. It does not yet include your messages, identity checks or the analysis of your tapes; ask us for those.
• Delete your account from the same page.

[Counsel to complete]

Who is responsible for your data, your rights where you live, how to complain, and how to contact us.