Who is responsible for your data
The data controller is Adi Gheo, contact: contact@adigheo.com. Write to this address with any question or request about your data.
What data we keep and why
- Account: name, email, date of birth and password (stored as a hash, not in plain text). Date of birth is used to verify the minimum age of 18 and is not displayed publicly. Legal basis: our contract with you (Article 6(1)(b) GDPR).
- Actor profile: city, country, citizenship, languages and what you add (photos, CV, showreel, voice, roles). This allows agents to find and prepare suitable castings for you. Legal basis: the contract.
- Professional profile: name, roles (director, producer, casting director, talent scout), company and website, plus the fact and date of identity verification. This lets actors know who is inviting them and ensures only verified people can view actors. Legal basis: the contract and our legitimate interest in protecting actors.
- Agency profile: agency name, city and country, website or public link (for example Instagram, Facebook, IMDb, LinkedIn), contact person and how the agency was verified (invitation, email on the website's domain or manual verification). This lets actors know who views their contact details. Legal basis: the contract and our legitimate interest in protecting actors.
- Contact details on the actor's public page: the actor's email, telephone and CV do not appear on the public page. Only the actor and verified professionals and agencies can view them on request. We keep a record of who accessed contact details and when, and limit the number of accesses to prevent bulk data collection. The actor sees who accessed their contact details in Settings → Your public page, and the professional can find their accesses in their data download. The record is deleted with the account that accessed the contact details. Legal basis: our legitimate interest in protecting actors.
- Actor matching: for actors who have enabled “Visible profile”, AI uses the visible profile (including a short summary the actor can view and correct) to suggest them to verified professionals seeking an actor for a role. Other actors never appear. The actor is contacted only through an invitation they can decline. Legal basis: the actor's consent, given by enabling “Visible profile”, which can be withdrawn at any time.
- Searches and invitations: the character description written by the professional, suggested actors and the reason for each selection, invitations and the actor's response, then messages exchanged after the actor accepts. After acceptance, the professional also sees the telephone number the actor included in their CV; the actor is told about this next to the “Accept” button. Searches remain until the professional deletes them or deletes their account; invitations and messages remain while both accounts exist. The actor can see and download everything concerning them (invitations, messages, the reason they were suggested). Legal basis: the contract and the actor's consent for “Visible profile”.
- Connected email address: your address and the app password you provide in Settings, stored encrypted. We use it only to send emails you approved from your account, on your behalf, and to read replies and casting alerts in your inbox. You can disconnect it in Settings at any time. Legal basis: our contract with you.
- Activity in Studio: castings found for you, applications, replies and your settings. Legal basis: the contract.
- Record of acceptance: which document you accepted, its version and when. Legal basis: the legal obligation to demonstrate that you were informed and gave consent.
- Login sessions (a strictly necessary cookie and connected devices), to keep you signed in securely. We do not use advertising cookies. Optional analytics requires separate consent. Details in Cookie policy.
- Optional analytics · 29 October 2026: with separate consent given in Cookies, Google Analytics 4 measures signed-out visits to public pages, visit sources, approximate country and device type. We do not send names, email addresses, account identifiers or private pages. We do not link these statistics to your account. Basis: consent, which you can withdraw at any time in Cookies without losing access to the website.
We do not request sensitive data (health, religion, ethnicity). We do not publish anything about you without your separate consent.
Who else processes data on our behalf
- Supabase: the database, in the European Union (Frankfurt).
- Vercel: website hosting.
- Google: Google Analytics 4 statistics, only after consent to traffic analysis. Details and preference controls are in Cookies.
- OVHcloud: hosting the services that run the platform's agents.
- The configured email provider (Apple iCloud Mail for authentication messages): delivery of emails needed for the account.
- Anthropic and OpenAI: the AI models agents use to analyse castings for your profile and read casting portraits when a professional searches for an actor.
- Apify: reading public casting notices.
Some of these providers may process data outside the EU (for example in the USA). Transfers take place only with the safeguards required by GDPR (adequacy decisions or standard contractual clauses).
How long
For as long as you have an account. If you request account deletion, we delete the account and all your data, including acceptance history, within 30 days.
Detailed event and user data in Google Analytics is retained for 2 months, without extending the retention period when new activity occurs. Aggregated reports may remain available. Deleting cookies from your browser does not retroactively delete data already sent to Google.
Your rights
You can request a copy of your data, its correction or deletion, restriction or portability, and object to processing at any time. Write to the address above: we respond within one month. You also have the right to lodge a complaint with the data protection authority (in Romania, ANSPDCP, dataprotection.ro).
From your account, under Personal data, you can download a copy of your data or delete your account at any time, after confirming your password. This is available to actors, agencies and professionals.
In an agency account, the owner also downloads the agency's data: profile, team, castings, received applications (without actors' private materials), drafts and files. A team member downloads and deletes only their own account; the agency remains. An agency owner with team members removes them from the team first; deleting the owner's account then also deletes the agency, its castings and received applications. Actors' accounts are not deleted.
In a professional account, Settings → Your data lets you download a copy of your account, profile, searches, results still available, invitations, messages and castings. You can also delete the account after confirming your password. Castings you published and conversations linked to the account are also deleted from the active database; other accounts are not deleted. The export does not include passwords, connection keys or actors' private profiles.
Age
Studio is only for people aged 18 or over. At registration you confirm you are at least 18; date of birth is entered when preparing your profile and is not displayed publicly.