Privacy Policy

Account data: your email address and name. If you sign in with Google, we receive your email, name, and profile photo from Google.

Profile & application data: details you add to your talent profile and casting applications (e.g. photos, self-introduction, and eligibility answers you choose to provide).

User content: community posts, comments, votes, and images you upload.

Usage & device data: pages viewed, actions taken, IP address, and approximate location derived from it, collected to operate and secure the service.

To create and manage your account and sessions, and to authenticate you (including Google sign-in).

To provide core features: casting applications, community, referrals, and to connect applicants with the relevant partner for an event.

To secure the service (rate limiting, fraud/abuse prevention) and to diagnose errors.

To communicate service and account notices.

We process your data to perform our contract with you (providing the service), for our legitimate interests (security, improvement), to comply with legal obligations, and with your consent where required (e.g. non-essential cookies).

We do not sell your personal data. We share it only with service providers that process data on our behalf under contract: Supabase (authentication, database, file storage), Upstash (caching/rate limiting), Vercel (hosting), Google (sign-in), and error-tracking (Sentry) when enabled.

When you apply to an event, the managing partner for that event can see the application information you submit.

We may disclose data where required by law or to protect our rights and users’ safety.

We use essential cookies for sign-in sessions and security, a consent cookie to remember your choice, a language preference cookie, and a referral cookie when you arrive via a share link. Analytics/visit cookies are set only after you consent. You can withdraw consent at any time in your browser or via the cookie banner.

We keep your data while your account is active and as needed to provide the service. You can request deletion of your account and associated personal data; some records may be retained where required by law.

Depending on your location, you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise these rights, contact us at support@iamkstar.com.

Our providers may process data in regions including South Korea and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

We use industry-standard measures (encrypted transport, hashed credentials, access controls). No method is 100% secure, but we work to protect your data.

The service is not directed to children under 14. Applicants under the applicable age are handled per event requirements; do not use the service if you are below the minimum age in your jurisdiction without appropriate consent.

We may update this policy; material changes will be posted here with a new date. Questions or requests: support@iamkstar.com.