Privacy Policy

1. What we collect

• Account info — your email, password (hashed via our auth provider), display name, username, role, and home city.
• Profile content — the things you publish: portfolio images and metadata, vouches you give and receive, casting posts and applications, inquiries you send and receive, calendar entries you create or accept, travel flags, moodboards.
• Operational telemetry — page views, request metadata, IP addresses, user-agent strings, and rate-limit counters. Used to operate the service and detect abuse, not for advertising.
• Communications — the content of messages and inquiries you exchange with other creators and with us.

2. What we don't do

We don't sell your data. We don't serve third-party advertising. We don't train AI models on your portfolio images or messages, and we don't hand them to anyone who does. We don't embed third-party trackers on RevoForge surfaces.

3. How we use it

To operate the service: render your profile, deliver messages, match castings, generate calendar conflicts, and so on. To keep the service safe: detect spam, block fraud, investigate reports. To communicate with you: account notifications, security alerts, and (if you opt in) product updates. To meet legal obligations.

4. Who else sees it

Other creators see what you publish according to your visibility settings — public profile pages are public, hidden ones aren't. We use trusted infrastructure providers (database, object storage, email delivery, error tracking) under contractual data-protection obligations. We don't share data with anyone else except where legally required.

5. Your rights

You can export your data, correct it, restrict its processing, or delete your account from Account settings. If you're in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CPRA — including the right to lodge a complaint with a supervisory authority. Email [email protected] and we'll respond within 30 days.

6. Retention

Account data lives until you delete your account, then ages out of backups within 60 days. Operational logs are kept for up to 90 days for security and debugging. Messages remain visible to recipients even after the sender deletes their account; recipients can delete their own copy.

7. International transfers

We process data in the European Union. If you access RevoForge from outside the EU, your data may be transferred to and processed in the EU under standard contractual clauses where required.

8. Cookies

We use first-party cookies strictly necessary for sign-in and session continuity (auth tokens, anti-CSRF, return-to redirect). We don't set advertising or analytics cookies that would require a banner under EU rules.

9. Changes

Material changes will be announced in-app and by email at least 14 days before they take effect. The effective-date stamp at the top of this page tracks the last update.

10. Contact

Privacy questions and rights requests: [email protected].