Privacy Policy

Talentbook (“Talentbook”, “we”, “us”) operates this platform and is the data controller of the personal data described in this policy. You can reach us regarding privacy at [contact email to be added], address [registered address to be added], Bulgaria.

• Account data — name, email address, password (stored hashed), and account type (talent, business/client or admin).
• Talent profile data — headline, categories, gender, age, city/country, physical attributes and measurements, languages, skills, experience, day rate, availability, social handles, and the photos you upload.
• Business/client data — company name and the castings or events you publish.
• Activity data — applications you submit, application statuses, and messages you exchange with other users.
• Contact details — phone number and email, which are kept private and shown only to authorised parties (e.g. a client whose casting you applied to, and administrators).
• Technical data — session and authentication cookies needed to keep you signed in (see our Cookie Policy).

• To provide the service (performance of a contract) — creating your account, publishing approved profiles, handling applications and messaging.
• With your consent — publishing your talent profile and photos publicly, and processing sensitive profile details you choose to provide. You may withdraw consent at any time.
• Legitimate interests — moderating content, preventing fraud and abuse, and improving the platform.
• Legal obligations — complying with applicable law and responding to lawful requests.

Approved talent profiles are shown publicly using a profile code (e.g. TB-2457). Your full name and contact details are not shown publicly; they are revealed only to authorised parties such as a client whose casting or event you applied to, and to administrators. Photos you upload are displayed on your public profile. Do not upload images you do not have the rights to use.

Talentbook may host profiles of minors (for example, the “Child Model” category). Where a talent is under 18, the account must be created and managed by a parent or legal guardian, who must consent to the processing and public display of the minor’s data and photos. Under Bulgarian law, the digital age of consent is 14; for younger users, parental consent is required. We will remove a minor’s data promptly on a verified request from a parent or guardian.

We do not sell your personal data. We share it with service providers who process data on our behalf under data-processing agreements:

• Supabase — database, authentication and file storage (hosted in the EU).
• Vercel — application hosting and delivery.
• Resend — transactional email delivery (verification codes, notifications).
• Stripe — payment processing, if and when paid features are enabled.

We also share profile and contact data with other users where the service requires it (e.g. clients seeing their applicants).

Your data is primarily processed within the European Union. Where a provider processes data outside the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We keep your data for as long as your account is active and as needed to provide the service. If you delete your account, we remove your profile and personal data, except where we must retain certain information to comply with legal obligations or resolve disputes.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at [contact email to be added]. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP / КЗЛД) or your local supervisory authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and the principle of least privilege. No system is perfectly secure, but we work to keep your data safe and to notify you and the relevant authority of any breach as required by law.

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date above. Material changes may also be communicated by email.

For any privacy question or request, contact Talentbook at [contact email to be added].