Privacy Policy

This policy explains what personal data Fimcast collects, why, and what rights you have. We follow the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.

1. What we collect

• Account details: name, email, phone number, password (stored encrypted), account type, and production company name for producers.
• Profile details (actors): stage name, gender, date of birth, location, languages, physical attributes, experience, credits, training, skills, social media handles, availability and rates.
• Photos and videos: headshots, additional photos, and self-tapes you upload.
• Activity: castings you post, applications, shortlists, favourites, and notifications.
• Technical data: basic logs and error reports (e.g. browser type) used to keep the service working.

Fimcast is for adults only. We don't knowingly collect data from anyone under 18; if we learn an account belongs to someone under 18, we delete it.

2. Why we use it

• To run your account and verify your phone number.
• To show your profile to producers, or your castings to actors.
• To send you emails and SMS about applications, shortlists and deadlines (you can turn these off).
• To keep the platform safe, prevent fraud, and fix problems.

Your exact date of birth is never shown publicly. Producers only see an age range. Your email and phone number are never shown publicly either: when you apply for a casting and the producer shortlists you, that producer can see them so they can arrange next steps, and you can see theirs. We don't sell your data.

3. Where your data is stored

• Supabase (PostgreSQL database): account, profile and casting data.
• Cloudflare R2: headshots, photos and script attachments.
• Mux: self-tape videos and streaming.

Some of these providers store data outside Nigeria. We only use providers with appropriate safeguards.

4. Third-party services

• Google: if you choose "Continue with Google", we receive your name, email address and Google account ID. We don't get your Google password or access to anything else in your Google account.
• Termii: phone verification codes and SMS notifications.
• Resend: transactional emails.
• Sightengine: automatic safety checks on uploaded photos (for example, nudity and AI-generated images). Photos are sent to Sightengine only to be checked.
• Vercel: hosting.
• Sentry: error monitoring.
• Paystack: subscription payments (coming in a future release).

5. How long we keep it

We keep your data while your account is active. When you delete your account, we delete your profile, photos, videos and castings. Backups are cleared within 30 days. We may keep limited records longer where the law requires it.

6. Your rights

Under the NDPR you can:

• access the personal data we hold about you;
• correct inaccurate data (most of it you can edit yourself in Settings);
• delete your account and data at any time from Settings;
• object to or restrict certain processing, and withdraw consent;
• complain to the Nigeria Data Protection Commission.

7. Cookies

We only use essential cookies: the ones that keep you logged in and secure. We don't use advertising cookies.

8. Contact

Questions or requests: email support@fimcast.com. See also our Terms of Service.