Legal

Privacy Policy

Effective Date: June 20, 2026

This Privacy Policy explains how Kasted collects, uses, shares, discloses, and protects information when you use kasted.co and related services.

1. Information We Collect

We collect account information such as name, email address, username, password credentials, profile information, and professional details when you create and maintain an account.

We collect portfolio and content information, including photos, videos, portfolio materials, uploaded files, messages, and submissions you provide through the Platform.

Payments are processed securely through Stripe. Kasted does not store full payment card information.

We collect technical information such as IP addresses, device information, browser information, authentication logs, and security event data.

General location information may be inferred from IP addresses or user-provided profile data. Profile location features use OpenStreetMap/Nominatim geocoding services.

When you use in-app messaging and related communication tools, we collect message content, conversation threads, attachments, sender and recipient data, timestamps, read and delivery status, reports, blocks, moderation data, and related metadata.

2. Sensitive Information

The Platform is not designed to collect sensitive personal information such as government identification numbers, health information, or precise biometric identifiers. Please do not upload or message sensitive personal information that is not necessary for your professional profile.

Kasted does not intentionally collect biometric identifiers or biometric information. If a future feature, such as identity verification, involves such data, this Policy will be updated and any required notice and consent will be obtained first.

3. How We Use Information

  • Operate the Platform, authenticate users, and process subscriptions.
  • Deliver in-app messages and notifications, and enable brand, talent, and agency communication.
  • Provide customer support and facilitate discovery, casting, and application workflows.
  • Perform safety moderation, fraud prevention, abuse investigation, dispute handling, and enforcement of our Terms.
  • Maintain security, improve Platform performance, send transactional communications, and comply with legal obligations.

4. How We Share Information

Kasted does not sell personal information. Messages are shared with their intended recipients. Messages sent through organization accounts may be visible to authorized owners, admins, or team members depending on account settings.

Agency-routed workflows may expose relevant communication and submission context to the agency where representation applies.

Service providers may process information to operate hosting, storage, security, email notifications, and platform infrastructure on our behalf.

We may disclose information if required by law, to protect users, to prevent fraud or abuse, or to enforce our legal rights.

5. Marketing Communications

We may send transactional, operational, and account-related communications. We may also send marketing or promotional communications to users or prospective users where permitted by law. Marketing emails will identify Kasted as the sender, include a functioning unsubscribe mechanism, and include our business mailing address.

Users may unsubscribe from promotional communications at any time by following unsubscribe instructions in such communications or through account settings.

6. Cookies, Analytics, and Authentication Technologies

Kasted uses strictly necessary cookies and similar technologies, including authentication sessions via Supabase or Google OAuth, security and login verification, and payment-related session handling through Stripe.

Kasted does not currently use analytics or advertising cookies. If Kasted introduces analytics, advertising, or optional preference technologies in the future, this Policy and the Cookie Policy will be updated, and additional consent mechanisms will be implemented where required by applicable law.

7. Third-Party Service Providers

  • Stripe — payment processing and billing.
  • Supabase — authentication, database, and file storage.
  • Vercel — application hosting and content delivery.
  • Resend — transactional and platform email delivery.
  • Google OAuth — optional sign-in service.
  • OpenStreetMap / Nominatim — location search and geocoding.

8. User Content and Visibility

Profiles, portfolios, and related content may be publicly visible depending on account settings and Platform functionality. Users retain ownership of uploaded content. By uploading content, users grant Kasted a license to host, reproduce, distribute, display, cache, resize, optimize, and promote content for Platform operation and promotion, as described in the Terms of Service.

9. Account Deletion and Data Retention

Users may request account deletion at any time. After deletion, public-facing visibility will be removed. Certain backend records — including message records — may be retained where needed for safety, legal compliance, billing, fraud prevention, dispute resolution, moderation records, backups, or operational continuity.

10. Privacy Rights

California residents may have rights to know, access, delete, correct, and receive portability disclosures regarding personal information, and to not receive discriminatory treatment for exercising rights. Kasted does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

Depending on applicable law, including GDPR and UK GDPR where applicable, users may have rights to access, correct, delete, restrict processing of, object to processing of, and request portability of personal data.

Requests may be submitted to contact@kasted.co. We may verify your identity before fulfilling a request.

11. Security, Children, Links, Changes, and Contact

Kasted uses commercially reasonable safeguards intended to protect information from unauthorized access, disclosure, alteration, or destruction. However, no system can guarantee absolute security.

The Platform is intended only for users 18 years of age or older. Kasted does not knowingly collect personal information from minors.

The Platform may contain links to third-party services or websites. Kasted is not responsible for the privacy practices of such third parties.

This Policy explains our practices. Where applicable law requires consent, we will request consent separately.

Contact: Kasted LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States. contact@kasted.co. kasted.co.