Privacy Policy

This Privacy Policy explains what information Troupe ("Troupe," "we," "us," or "our") collects through our website and mobile apps (together, the "Service"), why we collect it, who we share it with, and the choices you have. It's written to describe what the product actually does, not a generic template — if something here ever stops matching reality, that's a bug in this page, and we'd want to know about it.

1. Scope of this Policy

This Policy applies to everyone who uses Troupe — both Actor and Casting Director accounts, wherever they are. Troupe is built for the U.S. casting market and is also available to users in other countries, including the European Economic Area (EEA) and the United Kingdom; sections 6, 13 and 16 describe the additional protections that apply there. Troupe is not directed at anyone under 18 (see Children's Privacy below).

2. Who is responsible for your data

The controller of your personal data is the operator of Troupe. You can reach us about anything in this Policy, including any privacy request, at support@troupecast.com.

3. Information we collect

Account & profile information

When you sign up, we collect your email and password (handled by our authentication provider — we never see or store your password in plain text). Depending on your account type, you may also provide: your name, headshots and other photos, a reel link, bio and resume text, playing age, height, weight, gender, city and state, date of birth, phone number, and special skills — and, only if you choose to share them, ethnicity and union status (see below) — for actors; or your production and project details (for casting directors).

Submissions

When an actor submits to a role, we take a snapshot of their profile at that moment (name, photos, reel, stats, playing age, location, and — if you shared them — ethnicity and union status) and attach it to that submission. This is deliberate — if you edit your profile later, roles you've already applied to keep showing what the casting director actually saw when they reviewed you.

Self-tapes & sides

If a casting director requests a self-tape, the video you record and upload is collected and processed through our video infrastructure provider. If a casting director uploads sides (audition script pages) for a role, those documents are stored and, when displayed to an actor, watermarked with that actor's name and email.

Messages

We store the content of messages sent between an actor and a casting director about a specific submission, so the conversation can be displayed to both participants.

Payment information

When a casting director buys credits, our payment processor, Stripe, collects the card details directly — we receive only confirmation that the payment succeeded, the amount, and a customer reference. We never see or store your full card number. We keep a record of every credit purchased, used, refunded or expired, because these are accounting records.

Confidentiality agreements

Before an actor can view the sides for a project, they accept that project's confidentiality agreement. We record that you accepted it, for which project, and when.

Push notifications

If you allow notifications in the mobile app, we store a push token for your device so we can send you alerts about your submissions, messages, and scheduling. You can turn notifications off at any time in your device settings.

Mobile app waitlist

If you leave your email on our website to hear when the mobile app launches, we store that address (and nothing else) so we can send you a single email at launch. You don't need an account to do this. To be removed from the list, email us at support@troupecast.com.

Device & usage information

We automatically collect standard technical information needed to operate the Service — for example, the fact that a request was made, its timestamp, and error logs if something goes wrong — through our hosting provider. If the website or the mobile app hits an error, an error-monitoring service (Sentry) receives a report with technical details such as your browser or device model, operating system and app version, the page or screen you were on, and the error itself, so we can fix it. When you claim free welcome credits, a bot check by Cloudflare (Turnstile) looks at technical signals from your browser to tell people from automated sign-ups. We do not currently use third-party analytics or advertising trackers; if that changes, we'll update this Policy first.

4. Ethnicity & union status

Ethnicity reveals racial or ethnic origin, and union status reveals trade-union membership. Data-protection laws such as the EU and UK GDPR treat these as special categories of personal data, and we treat them that way for every user:

• They're optional. You can complete your profile and apply to roles without them.
• We only store them with your explicit consent, which you give with a separate checkbox in your profile. Without it, our database refuses to store them.
• Who sees them: the casting directors (and their project collaborators) you apply to, casting directors searching the talent database, and the comparison links they create.
• You can withdraw consent at any time by unticking the box in your profile. Both values are then deleted from your profile, from the applications you've already sent, and from any comparison link that includes you. Withdrawing doesn't change what casting directors already saw.

5. How we use information

We use the information above to:

• Operate the marketplace — create your profile, show relevant roles, and process submissions;
• Let casting directors review actors who submit to their roles, and vice versa;
• Process credit purchases through Stripe;
• Send notifications about your submissions, messages, and audition scheduling (by email, push notification, or in-app);
• Respond to support requests you send us directly;
• Maintain the security and integrity of the Service, including detecting abuse; and
• Comply with legal obligations.

6. Legal bases (EEA & UK)

If you're in the EEA or the UK, we rely on these legal bases under the GDPR:

• Performance of our contract with you (art. 6(1)(b)) — your account and profile, roles and submissions, self-tapes and sides, messages, scheduling, credit purchases, and the notifications that are part of those features;
• Your consent (art. 6(1)(a) and, for ethnicity and union status, art. 9(2)(a)) — ethnicity and union status, push notifications, and the mobile app waitlist. You can withdraw consent at any time without affecting earlier processing;
• Our legitimate interests (art. 6(1)(f)) — keeping the Service secure, preventing fraud and abuse (including bot checks and rate limits), handling reports about users or content, and fixing errors. You can object to this processing (see your rights);
• Legal obligations (art. 6(1)(c)) — keeping payment and accounting records for as long as tax law requires, and responding to lawful requests.

We don't make decisions about you based solely on automated processing that produce legal or similarly significant effects. The "Matches your profile" label on roles is a simple comparison of a role's requirements with your own profile, shown only to you; casting decisions are always made by people.

7. How we share information

We do not sell your personal information. We share it only in these circumstances:

• With casting directors you submit to — your profile snapshot (per above) becomes visible to the casting director for that specific role, and stays visible to them even if you later edit your live profile;
• With actors you request a self-tape from, as a casting director — your name is visible to any actor whose submission you interact with;
• With other people on a project — a casting director can invite collaborators (for example, an associate) to a project, and collaborators can see that project's roles and the submissions made to them;
• Through comparison links a casting director creates — a casting director can share a read-only link to a side-by-side comparison of a few actors, for example with a producer who doesn't have a Troupe account. The link shows the actor's name, primary photo, and profile details such as age, height, location, skills, reel link, and — if the actor shared them — ethnicity and union status. It never includes a self-tape, it expires after 30 days, and the casting director can revoke it sooner. If you delete your account, you are removed from any comparison links that include you;
• With service providers who process data on our behalf to run the Service — currently Supabase (database, authentication, file storage), Mux (video), Stripe (payments), Resend (transactional email), Vercel (hosting), Sentry (error monitoring), Cloudflare (bot checks), and Expo together with Apple and Google (delivering push notifications). They're contractually restricted to using your data only to provide these services to us;
• If required by law — for example, in response to a valid subpoena, court order, or to protect the rights, property, or safety of Troupe, our users, or the public; and
• In connection with a business transfer — if Troupe is ever acquired or transfers assets, user information may transfer as part of that transaction, subject to this Policy or a successor policy you'll be notified of.

8. Self-tapes & sides

Self-tape video is never public. Playback requires a signed, time-limited access token generated specifically for the actor who recorded it and the casting director who requested it — there is no public URL that plays a self-tape without that token. Sides are similarly gated: an actor can only view sides for a role once a casting director has actually requested a self-tape from them for it, and the copy they see is watermarked with their own name and email, which helps trace any copy that's shared outside the casting process it was intended for.

9. Data retention & deletion

We keep your account and profile information for as long as your account is active. You can delete your account yourself at any time from Settings, on the website or in the mobile app — you'll be asked to confirm and to re-enter your password. Deletion is permanent and can't be undone.

When you delete your account, we permanently erase your profile, photos, submissions, self-tape videos, messages, saved payment card, and notification history. Because a submission belongs to both people involved, it also disappears from the casting director's view. If you're a casting director, deleting your account also deletes your projects, roles, and everything attached to them — including the submissions, self-tapes, and messages actors sent you — and removes collaborators' access to those projects. Records of past payments are kept by Stripe under its own retention obligations, and backups may hold deleted data for a short period before they're overwritten. Records of credits bought, used, refunded or expired are kept as accounting records, no longer linked to your account, for as long as tax law requires.

Self-tapes specifically are also deleted automatically, even if nobody deletes an account — the underlying video asset and its playback link are removed roughly six months after the project the self-tape was requested for is closed. The fact that a self-tape once existed for a submission is kept as a record (so your submission history stays coherent), but the video itself is gone.

While your account is active, submission history and status changes (for example, that you were shortlisted or booked for a role) are retained as part of the record of that role, even after the video itself is deleted.

10. Cookies & tracking

Troupe's web app keeps you signed in using your browser's local storage, not tracking cookies, and remembers your language in a functional cookie. We don't currently run any third-party advertising, analytics or cross-site tracking technology. The only third-party technology that runs in your browser is strictly necessary for a feature you're using: Stripe's checkout when you pay, the video player when you watch a self-tape, and Cloudflare's bot check when you claim welcome credits. If that ever changes — for example, if we add privacy-respecting product analytics to understand which features get used — we'll update this section first, rather than silently start doing it.

11. Security

We use industry-standard measures to protect your information — encrypted connections, access controls limiting who can read what, and signed, expiring links for sensitive content like self-tapes and sides rather than permanent public URLs. No system is perfectly secure, though, and we can't guarantee absolute security of information you transmit to us.

12. Your choices & rights

You can review and update most of your profile information directly in the app at any time, and delete your account yourself from Settings. To request a copy of your data or correct information you can't edit yourself, email us at support@troupecast.com. We'll respond within a reasonable time and verify your identity before acting on the request.

You can control notification preferences (push and email) from your device or account settings. You can unsubscribe from non-essential emails using the link in those emails; we'll still send transactional messages needed to operate your account (like confirming a submission).

13. Your rights in the EEA & UK

If you're in the EEA or the UK, you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave at any time. Many of these you can do yourself in the app (edit your profile, untick the ethnicity and union status consent, turn off email or push notifications, delete your account). For anything else, email support@troupecast.com; we'll answer within one month and may ask you to confirm your identity first.

You also have the right to lodge a complaint with a data-protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es), or the authority in the country where you live or work.

14. California privacy rights

If you're a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you additional rights over your personal information, including the right to know what we've collected about you, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. As stated above, we do not sell or share personal information for cross-context behavioral advertising. To exercise any of these rights, contact us at support@troupecast.com.

15. Children's privacy

Troupe is intended for users 18 and older and is not directed at children. We don't knowingly collect personal information from anyone under 18. If we learn that we have, we'll delete it. If you believe a minor has created an account, contact us at support@troupecast.com.

16. International transfers

Our database and most of our service providers are located in the United States, so if you use Troupe from outside the U.S. your information is transferred to and processed there. For transfers from the EEA, the UK or Switzerland we rely on the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses in our agreements with those providers. You can ask us for more information about these safeguards at support@troupecast.com.

17. Changes to this Policy

We may update this Policy as the product changes. If we make a material change, we'll update the effective date above and, where practical, let you know through the Service.

18. Contact

Questions about this Policy, or a privacy request? Reach us at support@troupecast.com. See also our Terms of Service.