Privacy Policy

1. Who we are (Data Controller)

For all privacy-related requests — access, correction, deletion, portability, or objection — please email us at the address above.

2. Personal data we collect

This landing site no longer collects personal data through forms — account sign-up happens in the casTyou app, which has its own in-app privacy notice. Before our beta opened in July 2026, this page offered a pre-launch waitlist that collected:

• Name (or stage name / agency name) — to address you in communications.
• Email address — to send you a single notification when early access opened.
• Role (Talent, Producer, Agency, Pet Owner) — to send role-relevant updates only.
• Optional notes — free text you provided.
• Technical data — your IP address, browser user-agent, and the timestamp of your submission. Used for abuse prevention and rate limiting.

Waitlist entries already submitted are retained as described in Section 7. If you create a casTyou account, additional data is collected as described in the in-app privacy notice.

3. Why we use your data (Legal basis)

• Consent (GDPR Art. 6(1)(a)): You provided your name, email, role, and notes voluntarily when you joined the pre-launch waitlist. You may withdraw consent at any time by emailing us — see Section 8.
• Legitimate interest (GDPR Art. 6(1)(f)): Processing your IP address and request metadata for security and abuse prevention, balanced against your reasonable expectation of a working service.
• Consent (GDPR Art. 6(1)(a)) for analytics: If you accept analytics in our cookie banner, we process pseudonymous usage data through Google Analytics. You can withdraw this consent at any time via the “Cookie preferences” link in the footer.

4. Who we share data with (Recipients)

• Google LLC (Google Analytics) — only if you consent. When you accept analytics in our cookie banner, Google Analytics receives pseudonymous identifiers, your IP address (truncated where supported), and information about pages viewed. Google acts as our data processor under Standard Contractual Clauses for any transfers to the United States. See Google's privacy policy (opens in a new tab).
• OpenAI (AI processing) — OpenAI processes data as our data processor for: safety (content people post is checked by OpenAI's moderation service); search and matching (text from profiles — such as name, bio, location, skills and experience — job listings, post captions and search queries is turned into numerical representations, “embeddings”, so we can find relevant people, jobs and posts; contact details are not included); and AI features you choose to use, such as Cas, our AI assistant (see Section 5), playable-age estimates from your photos, flyer generation and casting self-tape summaries and transcripts. Under OpenAI's API terms this data is not used to train its models, and where the API allows it we ask OpenAI not to store it.
• Our hosting providers — Infrastructure providers (database, email delivery) process your data on our behalf under data-processing agreements. They are prohibited from using your data for their own purposes.

We do not sell your personal data, run third-party advertising, or share it with marketing partners.

5. AI assistant (Cas)

Users on a paid plan, and casTyou administrators, can use Cas, an AI assistant inside the casTyou app that explains how casTyou works and answers questions about their own account. Using Cas is optional; nothing is processed unless you open it and send a message.

• What Cas processes. The messages you write, the page of the app you are on, and the details of your own account needed to answer you (for example your profiles, plan, verification status, and the jobs, children, pets, and casting forms you manage).
• Casting-form submissions — only at your request. If you ask Cas about a casting form you own, it reads that form's submissions to answer you. Cas cannot read forms you do not own, and it never sends other people's contact details (such as email addresses or phone numbers) to the AI model.
• Conversations are not stored. A conversation is held temporarily so it can continue while you move around the app, and is deleted after two hours of inactivity or as soon as you start a new chat. We do not save transcripts. We keep only a usage record of each request (who made it, when, how much it used, and whether it was answered) with no message content, to enforce usage limits and prevent misuse.
• Read-only. Cas can explain steps and link you to the right page, but it cannot change your account or data, send messages, or act on your behalf.
• Legal basis. Performance of our contract with you (GDPR Art. 6(1)(b)) when you choose to use Cas, and our legitimate interest (GDPR Art. 6(1)(f)) in keeping content-free usage records to prevent abuse.

AI answers can be wrong. Please check anything important before relying on it.

6. Cookies and similar technologies

We use two categories of cookies and local storage on this site:

• Strictly necessary (no consent required). We store your consent choice itself in your browser's localStorage under the key castyou.consent so we don't ask you again on every visit. This falls under the “strictly necessary” exemption in the ePrivacy Directive.
• Analytics (consent required). If you click “Accept analytics” in our cookie banner, we set Google Analytics cookies (_ga, _ga_*) to measure aggregate, pseudonymous traffic patterns and improve the site. You can withdraw consent at any time using the Cookie preferences link in the footer; we will stop loading analytics and you can clear the cookies from your browser settings.

7. How long we keep your data (Retention)

• Waitlist entries are kept until (a) you create a full casTyou account, at which point your account record replaces the waitlist entry, or (b) twenty-four (24) months from the date of submission — whichever happens first. After that, we delete the entry.
• Rate-limit metadata (IP + timestamp counters) is held in memory and discarded within one hour.
• AI assistant conversations are deleted after two hours of inactivity, or immediately when you start a new chat. Only content-free usage records are kept (see Section 5).

8. Your rights

Depending on where you live, you have the following rights regarding your personal data. To exercise any of them, email legal@castyouapp.com from the address you used to sign up. We respond within 30 days.

• Access — a copy of the data we hold about you.
• Rectification — correct any information that is wrong or out of date.
• Erasure — “right to be forgotten” — request deletion of your waitlist record.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to pause processing while a dispute is resolved.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — withdraw at any time, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint — you may also complain to your local data protection authority. In the EU, find yours at edpb.europa.eu (opens in a new tab).

9. International data transfers

casTyou is established in the United States. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data-export rules, your personal data will be transferred to the United States. We rely on the European Commission's Standard Contractual Clauses (SCCs) with our processors where applicable.

10. Children

The casTyou Service is intended for users 18 years of age and older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has signed up, please contact us and we will delete the record.

11. Security

We use HTTPS for all data in transit, store waitlist data in an access-controlled database, hash account credentials, and apply rate limits to our public endpoints. No system is perfectly secure; if we ever become aware of a breach affecting your data, we will notify you and the relevant supervisory authority as required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Effective Date” above and, if you are on our waitlist, notify you by email.