Privacy Policy

• We collect what we need to run your account and keep members safe.
• We do not sell your personal information, and we do not show advertising.
• We never store identity documents or biometric templates — our verification provider keeps them and returns only an outcome.
• Your date of birth is never shown to anyone.
• You control who can see your profile, and you can ask us to access, correct, export or delete your data.

• Account details: your email address and/or mobile number, password (stored only as a secure hash), date of birth, country, and optionally your city and preferred language.
• Profile: name, username, headline, bio, roles, skills, experience, availability, location, photos, videos, portfolio, credits and any other details you choose to add.
• Activity and content: castings you post or apply to, events, consultations and circles, reviews, reports, and the messages you send through Klerifai.
• Verification: the professional proof you submit for review (such as links or portfolio items), and the consents you give to identity checks.
• Payments: your billing details are entered with Stripe, our payment processor. We receive a record of each transaction, such as its amount and status — never your full card number.
• Guardian details, if an account requires a parent or guardian's approval: the guardian's email address and their decisions.
• Support: what you tell us when you contact us.

• Sign-in and security records: IP address, browser and device type, a device label, and an approximate location (city/country) derived from the IP address on our own servers. We use these to protect your account and alert you to new sign-ins.
• Usage needed to provide features you use, such as saved searches and notification preferences.
• Photo processing: when you upload an image we remove its embedded metadata (including GPS location) and store a fingerprint used to detect re-uploaded abusive images.

We do not use advertising trackers or third-party analytics cookies. See Cookies and local storage.

• Sign-in providers: if you sign in with Google, Apple or Facebook, we receive your name, email address and (where the provider supplies it) profile picture. We do not receive your password or contacts.
• Identity verification: our provider tells us whether a check passed, a reference number and a reason code. It does not send us your documents or images.
• Stripe: payment and payout status, and the information needed to resolve disputes.
• Other members: for example, when someone reviews you, reports content, or invites you to a casting or event.

• To create and run your account, sign you in and keep it secure (performance of our contract with you).
• To show your profile and content to the audience you choose, and to let members find, message, book and pay one another (contract).
• To process payments, refunds and payouts, and to keep financial records (contract and legal obligation).
• To send you codes, security alerts, receipts and the notifications you have chosen (contract and legitimate interests).
• To verify members, detect fraud, scams and abuse, moderate content, and protect people from harm — particularly minors (legitimate interests and legal obligation).
• To enforce our Terms, handle appeals and respond to legal requests (legitimate interests and legal obligation).
• To fix problems and improve Klerifai (legitimate interests).

We use your date of birth to decide what your account may do. Other members can see only whether you are an adult, never your birthday.

If you give us a mobile number, we use it to send one-time sign-in and verification codes, security alerts, and the text notifications you turn on in Settings. We do not send marketing texts. The full program terms — including how to opt out by replying STOP — are in Text messages in our Terms.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties.

The only companies that handle your number for texting are the messaging providers that deliver texts on our behalf (such as Twilio and Sent), under contract and only for that purpose.

We do not sell or rent your personal information. We share it only as follows:

• Other members and visitors: your profile and content, according to your visibility setting; your messages, with the people you send them to; and your reviews, with the member reviewed and the audience of their profile.
• Service providers who process data for us under contract: Stripe (payments and payouts), our identity-verification provider, Twilio and Sent (text messages), our email delivery provider, our cloud hosting and file-storage providers, and Daily (video for virtual events and consultations).
• A guardian, for an account that requires guardian approval, who can see the account's messages and approve its contacts.
• Authorities and others, when the law requires it, or when we believe in good faith it is necessary to protect someone's safety, investigate fraud or abuse, or defend our rights.
• A buyer or successor, if Klerifai is involved in a merger, acquisition or sale of assets — in which case this policy continues to apply to your information.

You choose your profile's visibility in Settings: public, industry members only, verified members only, or private. You can also choose who is allowed to message you. Accounts that belong to minors never appear in search or to visitors who are not signed in, whatever the setting.

Klerifai accounts are currently available only to people aged 18 and over. Klerifai is never available to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact privacy@klerifai.com and we will delete it.

If we open accounts to 13 to 17 year olds, they will require a parent or guardian's consent, which the guardian can withdraw at any time, and will be subject to the protections described in our Terms.

Klerifai uses one cookie, and only because the service needs it:

• "klerifai_session" — keeps you signed in. It cannot be read by scripts on the page and is removed when you sign out or the session ends.

Your browser's local storage also holds a few preferences and work in progress — for example your light or dark theme, and an unfinished registration — so they survive a page reload. None of this is used for tracking or advertising, so we do not show a cookie banner.

We keep your information while your account is open. When you close your account, your profile is removed from Klerifai straight away; you can then ask us to delete your personal data (see below).

Some records are kept after deletion, for as long as they are needed for their purpose:

• payment, tax and payout records, for the period the law requires;
• safety and moderation records — such as reports, enforcement decisions and fingerprints of abusive images — so that someone removed for harming others cannot simply return;
• the record of interactions and reviews other members rely on, in anonymised form;
• information subject to a legal hold, an open safety case, money owed or an open dispute, until that is resolved.

Your own messages are deleted when your data is erased. Our identity-verification provider keeps verification evidence for up to 365 days and then deletes it.

Depending on where you live, you can ask us to:

• give you a copy of your personal information, including in a portable format;
• correct information that is wrong — most of it you can edit yourself in Settings;
• delete your personal information;
• restrict or object to how we use it, or withdraw a consent you gave (such as for text notifications or a biometric check).

To make a request, use "Request my data" in Settings → Privacy, or email privacy@klerifai.com from the address on your account. We may need to confirm your identity. We will respond within the time your local law requires — for example one month in the UK and EU, or 45 days in California — and we will not treat you differently for exercising your rights.

California residents: we do not sell or "share" personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. If we decline your request, you can appeal by replying to our decision.

UK and EU residents: you can also complain to your local data protection authority, though we would appreciate the chance to resolve your concern first.

You can turn email and text notifications on or off in Settings → Notifications. Security messages and sign-in codes are sent whenever you need them.

Information is encrypted in transit. Passwords are stored only as strong one-way hashes, sessions use secure, script-inaccessible cookies, and access to member data within Klerifai is limited to staff who need it. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Klerifai and our service providers may process information in the United States and other countries whose data-protection laws differ from yours. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We will update this policy when our practices change, and change the "Last updated" date above. If a change is material, we will tell you by email or in the app before it takes effect.

Klerifai, LLC is responsible for your personal information. [Registered address].

Privacy questions and requests: privacy@klerifai.com.