What this policy covers
This notice explains the account, verification, casting and security information processed by CastVero. It covers the platform, not a company’s later production or advertising activities, which require their own notices and agreements.
Information and purposes
Account information includes your name, email, password hash and language. Model and company profiles contain information you submit, including location, portfolio and business details. Identity documents and verification videos support account review. Requests, messages, attachments, contracts and signatures support the working relationship. Security logs and sampled performance measurements help investigate misuse and service failures.
Who can access information
Private verification files are restricted to authorized review workflows. Verified companies may access eligible model portfolios. Participants and authorized administrators may access their casting conversations and agreements. Hosting and other service providers may process information needed to operate the service. A booking does not authorize unrestricted publication of personal information.
Your choices and rights
You can correct profile information in your account and request access, correction or deletion through the reporting page. Where applicable law provides them, you may also request portability, restriction or objection and withdraw consent for consent-based processing. Identity checks may be needed to protect your account. A request does not automatically erase records required by law or an unresolved contractual dispute; reasons for any limitation should be explained.
Retention and safeguards
Retention depends on the record’s purpose. Reviewed identity files are subject to the separate identity-retention policy. Operational analytics are retained for up to 730 days before scheduled archiving; technical summaries for up to 365 days; compressed event archives for up to 90 additional days. Actual removal depends on scheduled maintenance. Access controls, password hashing and file validation reduce risk but cannot guarantee absolute security.
Questions and complaints
Use the existing reporting page for privacy requests and include an account reference and the action requested, not a password or identity document. You may also contact a competent supervisory authority where applicable law gives that right. The platform operator must assess the lawful basis, service-provider arrangements and any international transfers for its actual deployment.