Privacy Policy

BreakoutCasting ("Company," "we," "us," or "our") is committed to protecting the privacy of individuals who use our talent casting platform at breakoutcasting.com (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect personal information in connection with your use of the Platform.

This Privacy Policy applies to all users of the Platform, including talent who apply or are approved to appear on our roster, production companies and casting directors who access talent materials or post casting calls, and any visitor who browses the Platform without creating an account.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the Platform.

This Privacy Policy is incorporated by reference into our Terms of Use. Capitalized terms not defined here have the meanings given in the Terms of Use.

Information You Provide Directly. We collect information you provide when you interact with the Platform, including:

• Application information: First and last name, date of birth, gender, height, email address, phone number (if provided), city, state or province, country, social media handles (if provided), other platform links (if provided), categories of interest, experience level, and any other information you choose to include in your application.
• Photographs and images: Headshots, full-body photographs, and any additional photographs submitted through the application form. These are uploaded through our third-party file handling service and stored securely.
• Physical measurements: Height, bust, waist, hips, dress size, shoe size, chest, waist, inseam, suit size, hair color, and eye color, as applicable based on gender. Measurements that have been verified by a Company agent are designated as such on your profile.
• Account credentials: The password you create during the application process, which is used for identity verification when applying to casting calls. Passwords are transmitted to us via our form submission system and stored securely in our records.
• Communications: The content of any messages, inquiries, or other communications you send to us through the Platform's contact forms, inquiry forms, or by direct email.
• Production account information: For productions and casting directors, company name, contact name and title, email address, project type, project details, and any other information submitted during the verification or inquiry process.

Information Collected Automatically. When you visit the Platform, certain information is collected automatically by our web server and third-party services:

• IP address (collected in hashed, non-identifiable form for rate-limiting purposes)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent on the Platform
• Date and time of access

We use the information we collect for the following purposes:

• Platform operation: To review talent applications, maintain the talent roster, display talent profiles to verified productions, and operate all features of the Platform.
• Identity verification: To verify the identity of talent when they apply to casting calls, using the email address, phone number, or account identifier and password provided during application.
• Production services: To facilitate verified productions' access to talent profiles, process casting call listings, and deliver talent package orders.
• Communications: To respond to your inquiries, send application status updates, transmit confirmation emails, and communicate about Platform updates, casting call availability, and other matters related to your account.
• Access code management: To issue, validate, and manage personal access codes for approved talent, enabling secure access to restricted areas of the Platform.
• Security and fraud prevention: To detect and prevent spam, fraud, unauthorized access, and other prohibited activities. We use hashed IP addresses for rate-limiting purposes to prevent abuse of our form submission system.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, and to protect the rights, property, and safety of the Company and its users.
• Platform improvement: To analyze usage patterns and improve the functionality, content, and user experience of the Platform.

We do not sell your personal information to third parties. We do not use your personal information for targeted advertising. We do not share your information with advertisers.

With Verified Productions. Approved talent profiles, including photographs, measurements, categories, experience information, and related profile data, are made available to verified production companies and casting directors through the Platform. Access is limited to users who have completed the Company's verification process and agreed to our Terms of Use. Productions are contractually prohibited from sharing or republishing talent materials.

With Service Providers. We share information with carefully selected third-party service providers who assist in operating the Platform, including file storage and upload services, email delivery services, and payment processors. These providers are authorized to use your information only as necessary to provide services to us and are bound by appropriate confidentiality and data protection obligations.

For Legal Reasons. We may disclose your information if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect and defend our legal rights, prevent or investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability.

Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such transfer and the applicable privacy choices available to you.

With Your Consent. We may share your information with third parties when you have given us your explicit consent to do so, such as for promotional features or social media spotlights described elsewhere on the Platform.

We do not share personal information with third parties for their own marketing purposes.

Photographs and physical measurements submitted through the Platform are treated with heightened care given their personal and sensitive nature. We apply the following protections specifically to such materials:

• Photographs are stored through our third-party file handling service using secure, access-controlled storage.
• Photographs submitted through the application form are used solely for internal review purposes until and unless a talent is approved, at which point the talent's primary photograph(s) may appear on their profile accessible to verified productions.
• Physical measurements are not publicly visible. They are accessible only to verified productions through the Platform and to Company personnel in connection with Platform operations.
• We do not sell, license, or distribute photographs or measurement data to any party other than verified productions for legitimate casting purposes.
• Upon account deletion, we will remove photographs from our systems within a reasonable period, subject to any applicable legal retention requirements.

You may request removal of specific photographs from your profile at any time by contacting support@breakoutcasting.com. We will process such requests within a reasonable timeframe.

The Platform uses browser local storage — a standard web technology built into modern browsers — to store certain functional data on your device. Unlike cookies, local storage data is not transmitted to our servers with each page request; it remains on your device until you clear it.

We use local storage for the following purposes:

• Application status: The Platform stores a record in local storage when you successfully submit a talent application. This causes the "Apply Now" navigation button to be hidden on subsequent visits, since your application has been received. This data contains only a boolean flag and no personal information.
• Access code session: When an approved talent validates their personal access code, the Platform stores a hashed verification token in local storage. This allows your authenticated session to persist between visits without requiring you to re-enter your access code each time. The stored token is a cryptographic hash and does not contain your plain access code. The Platform re-validates this token against our access code records on each visit to ensure that deactivated codes are properly restricted.

You may clear all local storage data at any time through your browser's settings (typically found under Privacy, Site Data, or similar). Clearing local storage will not affect your account standing, application status, or any data held on our servers, but will cause the "Apply Now" button to reappear and will require you to re-enter your access code on your next visit.

The Platform does not use third-party advertising cookies, tracking pixels, or behavioral targeting technologies. We do not participate in cross-site tracking or retargeting advertising programs.

The Platform uses the following categories of third-party services:

• File upload and storage: Photographs submitted through the application form are processed and stored through Uploadcare, Inc. Uploadcare's privacy policy governs the handling of uploaded files on their infrastructure. We recommend reviewing Uploadcare's privacy policy at uploadcare.com.
• Email delivery: The Platform uses our hosting provider's mail infrastructure to deliver transactional emails including application confirmations and inquiry notifications. We use Tuta Mail for receiving communications at our official email addresses.
• Payment processing: Premium subscription fees and production listing fees are processed through a third-party payment processor. We do not receive or store your complete payment card information. The payment processor's privacy policy governs the handling of payment data.
• Web hosting: The Platform is hosted on DreamHost servers. DreamHost's terms of service and privacy policy govern server-level data handling.

Each of these service providers is selected based on their data protection practices and is bound by appropriate contractual obligations. We are not responsible for the privacy practices of these third parties beyond our contractual agreements with them.

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to: use of cryptographic hashing for access codes and sensitive identifiers, rate-limiting of form submissions using IP address hashing, access controls limiting internal access to personal information on a need-to-know basis, and secure transmission of data between your browser and our servers via HTTPS.

Despite these measures, no security system is impenetrable. We cannot guarantee the absolute security of your personal information. In the event of a data breach that materially affects your rights, we will notify you as required by applicable law.

You are responsible for maintaining the security of your account credentials and access code. You should not share your access code or password with any other person. If you believe your credentials have been compromised, contact us immediately at support@breakoutcasting.com.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to maintain your account in good standing, to comply with our legal obligations, resolve disputes, and enforce our agreements.

Talent application materials, including photographs and personal information, submitted by applicants who are not approved are retained for a limited period for review purposes and then deleted. Approved talent profile data is retained for the duration of the talent's active account on the Platform. Upon account deletion, we will remove personal information from active systems within a reasonable period, generally not exceeding ninety (90) days, subject to legal retention requirements.

Production account information and casting call records are retained for a period sufficient to address any billing disputes, legal claims, or regulatory requirements, generally not exceeding three (3) years from the date of last activity.

You may request deletion of your data at any time as described in Section 10 below.

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Access: The right to request a copy of the personal information we hold about you.
• Correction: The right to request correction of inaccurate or incomplete personal information.
• Deletion: The right to request deletion of your personal information, subject to our legal retention obligations.
• Restriction: The right to request that we restrict the processing of your personal information in certain circumstances.
• Portability: The right to receive your personal information in a structured, commonly used, machine-readable format.
• Objection: The right to object to certain types of processing of your personal information.
• Withdrawal of consent: Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@breakoutcasting.com with your request. We will respond within thirty (30) days. We may require verification of your identity before processing certain requests.

The Platform is not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If we become aware that we have collected personal information from a person under 18, we will take immediate steps to delete that information from our systems. If you believe a person under 18 has submitted an application or otherwise provided personal information through the Platform, please contact us immediately at support@breakoutcasting.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information is collected about you and how it is used, the right to delete personal information subject to certain exceptions, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information (note: we do not sell or share personal information for advertising purposes), the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

To exercise your California privacy rights, contact us at support@breakoutcasting.com. We will respond to verifiable requests within forty-five (45) days as required by law.

The Platform is operated in the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer and processing. We will take appropriate steps to ensure your information receives adequate protection in accordance with this Privacy Policy.

If you are located in the European Economic Area, United Kingdom, or Switzerland, and believe we process your personal data subject to the General Data Protection Regulation or equivalent legislation, you have additional rights under such laws. Please contact us at support@breakoutcasting.com to exercise those rights or for more information about the legal basis for our processing activities.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the Platform. We encourage you to review this Privacy Policy periodically.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the updated Privacy Policy. If you disagree with any update, you should discontinue use of the Platform and may request deletion of your account as described in Section 10.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy and data requests: support@breakoutcasting.com
• General contact: breakoutcasting.com/contact
• Platform website: breakoutcasting.com

We will acknowledge privacy-related requests within five (5) business days and aim to fully respond within thirty (30) days.