Privacy
Privacy Policy
How CastSides collects, uses, stores, and shares information across production, crew, and casting workflows.
Effective August 26, 2026
Who we are and the scope of this policy
CastSides is a production and casting management platform operated by Hartvest Cycle Inc. This policy applies to CastSides websites, authenticated workspaces, public registration forms, and related communications. Production organizations and their authorized administrators determine which productions, castings, forms, roles, and evaluation workflows they create.
Information we collect
Depending on how you use CastSides, we may collect: name, Google-verified email address and profile image; phone number; date of birth; city, country, pronouns, experience, requested roles, talents, custom form responses, photographs, check-in and queue information, evaluations, casting decisions, production assignments, and consent records. For minors, forms may also collect a parent or guardian's name, email, phone number, and consent record. We also receive routine technical information needed for security and operation, such as session, request, device, browser, and diagnostic data.
How we use information
We use information to authenticate authorized users; operate production, crew, casting, registration, check-in, evaluation, and results features; display information to authorized members of the relevant production; send invitations, confirmations, and operational notices; secure and troubleshoot the service; prevent misuse; comply with legal obligations; and improve CastSides. We do not use participant or crew photographs for facial recognition or biometric identification.
Production organizations and administrators
A production organization and its authorized administrators decide why participant and crew information is requested, configure form questions and consent language, grant workspace access, and manage the resulting records. They are responsible for providing notices and obtaining permissions required for their production, including permissions involving auditions, photographs, minors, publicity, and local law. CastSides processes and presents this information to support those instructions while also processing account, security, and service data for its own platform operations.
Children and minors
A child under 13 must not complete a CastSides form independently. The child's parent or legal guardian must complete or authorize the submission and provide any consent required by the production and applicable law. Production administrators must not direct a child under 13 to submit personal information without the required parental notice and verifiable consent. Information about minors is used only for the relevant production workflows and authorized operational purposes. A parent or guardian may contact the production administrator or CastSides to request access, correction, or deletion.
When information is shared
Information may be shared with authorized administrators, crew members, judges, observers, and other assigned roles within the relevant organization or production, according to their permissions. We also use service providers to operate CastSides, including Google for sign-in, Vercel for application hosting, Supabase for database infrastructure, Cloudinary for image storage and delivery, and Resend for transactional email. These providers process information to provide their services. We may also disclose information when legally required, to protect rights or safety, or in connection with a corporate transaction. We do not sell personal information.
Google sign-in data
When you sign in with Google, CastSides requests only the basic OpenID Connect information needed to identify and authenticate you, such as your name, verified email address, profile image, and Google account identifier. We use this information only for sign-in, account security, invitations, and authorized access to CastSides. We do not request access to Gmail, Google Drive, contacts, or calendars, and we do not use Google user data for advertising.
Retention and deletion
We retain information for as long as reasonably necessary to provide the service, maintain production records and consent evidence, resolve disputes, secure the platform, and meet legal obligations. Production administrators control the active lifecycle of their production records. Deleted productions may remain in a recoverable trash state for 30 days before permanent deletion is available. Service-provider systems and backups may retain limited copies for their ordinary security and recovery cycles. Deletion requests may be subject to legal, safety, fraud-prevention, and recordkeeping exceptions.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including role-based access and verified Google authentication for workspace users. No online service or storage method can guarantee absolute security. Users and administrators must protect their accounts, devices, public form links, and access permissions.
International processing
CastSides and its service providers may process information in the United States and other countries where they operate. Those locations may have privacy laws different from the laws where you live. We use service providers and safeguards appropriate to the operation of the platform.
Your choices and privacy requests
You may choose not to submit an optional form field, although required information may be necessary to participate in a production workflow. You may request access, correction, or deletion by contacting the production administrator responsible for the form or by contacting CastSides. Workspace users may also request account assistance. We will verify requests and respond as required by applicable law.
Changes to this policy
We may update this policy as CastSides, our practices, or legal requirements change. We will publish the revised policy with a new effective date and provide additional notice when a change is material and notice is required.