Privacy

[PLACEHOLDER: company name], [PLACEHOLDER: registered address], is the controller of your personal data on Crewvale. Contact us about privacy at [PLACEHOLDER: privacy email].

[PLACEHOLDER: data protection officer, if one is appointed.]

We don’t store your date of birth, ID documents, phone number or exact earnings. Crewvale does not verify creators’ age or identity.

Your account: email address, a securely hashed password, your language and your account type.

Creator profiles: the details you add, such as stage name, country, city, time zone, languages, platforms, experience, audience and earnings bands, content and limits, links, what you need from an agency, the terms you’d accept, your visibility settings, your 18+ confirmation, saved and blocked agencies, and the private reasons you give for “Not for me”.

Agencies: business details (including legal name and registration number), published terms, services, team members as entered, business verification documents, saved models and their pipeline stages.

Between members: introductions and their notes, messages, and reports.

Job applications: the name, email, message and optional CV you send.

Technical data: a sign-in cookie, a language cookie, and your IP address in server logs and for rate limiting.

Some profile details, such as content and limits, may reveal information about your sex life. We process them only because you choose to add them and to use Crewvale to find representation, and only to show them to the agencies you allow. You can remove them at any time.

Your profile is private from the moment you create it. Agencies see an anonymous summary until you accept an introduction. Your legal name and email are never shown to agencies. You choose who sees each of the other fields: any verified agency, only agencies you accepted, or only you.

Creator profiles are never shown on the public web or to search engines. Agencies you block, and if you choose agencies in your own country, can never find you.

To run your account and Crewvale’s services: matching, introductions, messaging, jobs and notifications. The legal basis is our contract with you.

To keep Crewvale safe: verifying agencies, handling reports, preventing abuse and securing accounts. The legal basis is our legitimate interest in a safe service.

To pass a job application to the agency. The legal basis is your consent, which you give when you apply.

To keep records the law requires. The legal basis is our legal obligation.

We don’t sell your data, don’t use it for advertising and don’t use tracking or analytics tools.

Agencies see creator details only as your visibility settings allow. Agencies see job applications sent to their jobs.

We use these providers to run Crewvale: Hetzner (servers and encrypted backups, in the EU), Cloudflare (network security and delivery) and Resend (sending email). They process data only on our instructions.

Where a provider processes data outside the European Economic Area, we rely on an adequacy decision or the EU Standard Contractual Clauses. [PLACEHOLDER: confirm each provider’s locations and agreements.]

We may disclose data when the law requires it, or to protect someone from serious harm.

Account and profile data: until you delete your account.

Job applications and CVs: 180 days after they are sent, then deleted automatically. The agency may delete them sooner.

Business verification documents: while the agency account exists.

Reports and moderation records: [PLACEHOLDER: retention period].

Backups: encrypted copies are kept for up to 6 months, so deleted data disappears from backups within that time.

Crewvale uses two cookies: one keeps you signed in, the other remembers your language. Both are needed for the service you ask for, so there is no consent banner. The agency comparison is kept in your browser tab only and is cleared when you close it. We don’t use advertising or analytics cookies.

You can see and download everything we hold about your account (“Export my data” in account settings), correct your details at any time, and delete your account and everything under it.

You also have the right to object to or restrict some processing, and to withdraw consent where we rely on it. Contact us at [PLACEHOLDER: privacy email].

If you think we have handled your data wrongly, you can complain to your data protection authority. [PLACEHOLDER: our lead supervisory authority.]

Passwords are hashed, files are stored privately and served only to people allowed to see them, backups are encrypted, and access to our servers is restricted. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

We may update this notice. If a change matters, we will tell you before it takes effect.

This notice is written in English. Translations are provided for convenience; if they differ, the English version applies.