Privacy Policy

This Privacy Policy explains how Talent Digital LLC ("NeedaCrew", "we") collects, uses, shares, and protects personal information when you use the NeedaCrew Platform.

1. Information We Collect

You give us:

• Account info (name, email, phone, password, profile photo, role, location)
• Profile content (bio, skills, reels, work history, equipment listings)
• Payment info (handled by Stripe; we receive only tokens and metadata)
• Identity verification documents (when required)
• Messages and content you post on the Platform
• Voice recordings and transcripts when you use voice features (with consent)

We collect automatically:

• Device, browser, IP address, OS, language, time zone
• Usage data (pages visited, clicks, search queries, session duration)
• Cookies and similar technologies (see §7)
• Approximate location (from IP) and precise location (with permission, mobile only)

From third parties:

• Stripe (payment status), social login providers, public sources, fraud-prevention vendors

2. How We Use Information

• Operate, maintain, and improve the Platform
• Match Crew with Hirers, surface relevant gear, generate offers
• Process payments and prevent fraud
• Communicate with you (transactional, support, marketing — opt-out available)
• Enforce our Terms and AUP, investigate misconduct
• Comply with law and respond to lawful requests
• Conduct analytics, research, and product development
• Train and improve internal AI features (we do not sell User Content to third-party model providers; aggregated and de-identified data may be used)

Legal bases (EEA/UK users): contract performance (Art. 6(1)(b)), legitimate interests (6(1)(f)), consent (6(1)(a)), and legal obligation (6(1)(c)).

3. How We Share Information

• With other Users, as part of normal Platform function (your profile, messages, reviews, listings)
• Service providers (Stripe, Supabase, Vercel, email/SMS vendors, analytics, AI processors) under contract
• Legal/safety to comply with law, protect rights, prevent fraud or harm
• Business transfers in connection with a merger, acquisition, or sale of assets
• With consent for any other purpose

We do not sell personal information as defined under California law. We do not share personal information for cross-context behavioral advertising without your opt-in.

4. Your Rights

California (CCPA/CPRA): right to know, delete, correct, opt out of sale/sharing, limit sensitive PI use, and non-discrimination. Submit requests via privacy@needacrew.com.

EEA/UK (GDPR): right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Right to lodge a complaint with your data protection authority.

Other US states (VA, CO, CT, UT, etc.): equivalent rights under your state's law.

We will respond within the timeframes required by law (generally 30–45 days).

5. Data Retention

We retain personal information as long as your account is active and as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Deleted accounts are purged or de-identified within 90 days, except where retention is legally required (e.g., tax, fraud, anti-money-laundering).

6. Security

We use commercially reasonable administrative, technical, and physical safeguards. No system is 100% secure; you use the Platform at your own risk.

7. Cookies

We use first- and third-party cookies for authentication, analytics, and functionality. EEA/UK users will see a cookie banner allowing reject-all. You can also control cookies through your browser.

8. International Transfers

We are based in the United States. If you access the Platform from outside the U.S., your information will be transferred to and processed in the U.S. For EEA/UK transfers, we rely on Standard Contractual Clauses where required.

9. Children

The Platform is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact privacy@needacrew.com.

10. Voice and Biometric Data

If you use voice features, we record audio and may generate transcripts to operate the feature. We do not create voiceprints or use biometric identifiers as defined under the Illinois Biometric Information Privacy Act (BIPA), the Texas CUBI Act, or the Washington Biometric Privacy Act. Recordings are deleted within 30 days unless retention is legally required. Two-party-consent jurisdictions: all participants must consent before recording.

11. AI Features

Some Platform features use AI to suggest matches, generate offers, score profiles, or moderate content. We disclose AI-generated content where material. AI decisions are advisory; binding actions require human or User confirmation. EEA users have the right not to be subject to solely automated decisions with legal effect (GDPR Art. 22).

12. Do Not Track

We do not currently respond to browser Do Not Track signals. We do honor opt-out preference signals (e.g., Global Privacy Control) for California residents.

12a. Casting Module Data (added 2026-04-08)

When you use the Casting Studio (for hirers) or submit to a casting role (for talent), additional data flows apply:

Self-tape videos and headshots. Talent uploads (self-tapes, headshots, submission attachments) are stored in our Supabase media bucket and are accessible to: (i) the casting project owner, (ii) project collaborators the owner invites, and (iii) any third-party reviewers (directors, producers, brand stakeholders) the casting team shares a Presentation Link with. Presentation Links are watermarked with the recipient's identity to deter unauthorized redistribution.

Submission answers. Answers you provide to casting questions (e.g., "Do you own a car from 2008 or earlier?") are stored alongside your submission and visible to the casting team and any reviewer with whom they share a Presentation Link.

Pipeline stage history. When casting moves your submission through stages (Submitted → Shortlisted → Sent to Director → Callback → Offered → Booked → Wrapped), we log a timestamped audit trail. This is required for SAG-AFTRA compliance and tax recordkeeping when bookings occur.

Legal hold on bookings. If you are booked for a role through the Platform, your submission record (including a frozen snapshot of your contact information at time of booking) will be retained for the period required by tax, payroll, and union recordkeeping obligations (typically 7 years), even if you later delete your account. Non-booked submissions are deleted with your account in the normal way.

Director/reviewer feedback. When a third-party reviewer leaves yes/no/maybe feedback on your self-tape via a Presentation Link, that feedback is stored and visible to the casting team. Reviewers do not see your direct contact information unless the casting team chooses to share it.

Payments via Stripe Connect. When you are booked, payment is processed through Stripe Connect from the producer/hirer directly to your Stripe Connect account. NeedaCrew never holds talent funds; we collect a platform fee as `application_fee_amount` on the transfer. Stripe handles 1099 tax reporting where applicable. Stripe's privacy policy applies to your Stripe account data.

No algorithmic ranking. We do not use AI or automated scoring to rank, recommend, or filter talent for casting decisions. Casting decisions are made by humans. AI features that operate on casting data are limited to: self-tape transcript search, brief-fit verification (does your answer match the question), duplicate-account detection, and slate metadata extraction. None of these influence selection.

EEO and demographic data. We do not collect race, ethnicity, gender identity, sexual orientation, disability, or other protected-class information for the purpose of casting decisions. Where role descriptions reference such characteristics, they reflect Bona Fide Occupational Qualifications under entertainment-industry exemptions to anti-discrimination law and apply to the role brief, not to filtering or sorting talent.

Minors. The Platform is restricted to users 18 and over. Minors may not create accounts or submit to casting roles directly. Minor talent participation requires a separate flow not yet released.

13. Third-Party Links

The Platform may contain links to third-party sites. We are not responsible for their privacy practices.

14. Changes

We may update this Policy. Material changes will be notified via the Platform or email. The "Effective Date" reflects the most recent version.

15. Contact

Talent Digital LLC

[TALENT DIGITAL LLC MAILING ADDRESS — fill in]

privacy@needacrew.com

EU Representative (when appointed): [EU REP NAME AND ADDRESS]