At CastArab, your privacy is fundamental to how we operate. This Privacy Policy explains how we collect, use, store, and protect your personal data.
1. Data We Collect
When you register and use CastArab, we may collect the following:
- Identity data: Full name, stage name, date of birth, nationality, gender
- Contact data: Email address, phone number, social media handles
- Profile data: Photos, physical attributes, skills, experience, showreel links
- Verification data: National ID scans, passport scans, syndicate cards (stored encrypted)
- Usage data: How you interact with the platform, pages visited, search queries
- Payment data: Subscription information — note: we never store card numbers; payments are processed by Stripe
2. How We Use Your Data
We use your data to:
- Create and manage your account
- Display your profile to verified directors (actors only)
- Send notifications about matching casting calls
- Verify your identity and professional credentials
- Process subscription payments
- Improve the platform and its features
- Comply with legal obligations
3. Verification Documents
National ID scans, passport scans, and professional credentials uploaded for verification are stored in an encrypted, access-restricted storage environment. Only authorised CastArab administrators can access these documents for verification purposes. We recommend deleting these documents from our servers upon completion of verification — users may request this at any time.
4. Data Sharing
We do not sell your personal data to third parties. We may share limited data with:
- Verified directors: Your profile information and chosen contact methods, as per your privacy settings
- Stripe: For payment processing (they have their own privacy policy)
- Supabase: Our infrastructure provider, for data storage
- Law enforcement: Only when legally required to do so
5. Your Rights
You have the right to:
- Access your personal data at any time through your account settings
- Correct inaccurate information
- Request deletion of your account and all associated data
- Withdraw consent for data processing where applicable
- Data portability — request a copy of your data
6. Cookies
We use essential cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. See our Cookie Policy for full details.
7. Data Retention
We retain your account data for as long as your account is active. Verification documents are retained only as long as necessary for verification purposes. Upon account deletion, all personal data is removed within 30 days.
8. GDPR Compliance
If you are based in the European Union, you have additional rights under the GDPR. To exercise any of these rights, contact us at hello@castarab.com.