PRIVACY POLICY

We collect information you provide when you create an account, build a profile, post a Casting Call, communicate with us, or otherwise interact with the Platform:

• (a) Account and Identity Information. Name, email address, phone number, username, password, and account type (Creator or Employer). For identity verification purposes, we may also collect government-issued identification data processed by our third-party verification provider.
• (b) Creator Profile and Portfolio Information. Headshots and professional photographs, demo reels and video content, audio samples and voice reels, professional credits and work history, skills and specializations, and any other professional information you choose to include in your Creator profile.
• (c) Employer Profile Information. Company or organization name, industry, job title, professional role, and related professional details.
• (d) Casting Call Information. Project descriptions, skill criteria, availability requirements, and other information you include in Casting Calls you post as an Employer.
• (e) Transaction Information. Records of Platform subscription purchases, Conversion Fee transactions, overage charges, and related billing activity. Payment card information is processed directly by our third-party payment processor and is not stored by AICS on its own systems.
• (f) Communications. Messages, support requests, feedback, and other communications you send to AICS or, where Platform-facilitated messaging features are available, through the Platform.

When you use the Platform, we and our service providers may collect certain information automatically:

• (a) Usage Data. Pages visited, features accessed, Casting Calls viewed, submission activity, matching interactions, time spent on the Platform, and other activity data.
• (b) Device and Technical Information. IP address, browser type and version, operating system, device identifiers, and referring URLs.
• (c) Cookies and Similar Technologies. We use cookies and similar tracking technologies to operate the Platform, authenticate users, remember preferences, and analyze usage. See Section 10 for more detail.

We may receive information about you from third parties, including: (a) identity verification providers who process verification data on our behalf; (b) payment processors who provide transaction confirmation and fraud prevention data; (c) analytics providers who help us understand Platform usage; and (d) content safety technology providers, including automated content moderation services (currently including AWS Rekognition for image and video screening) and, as they become available, additional content safety technologies such as hash-matching and duplicate-content detection services.

As part of the Platform's Identity Escrow System, Creator identity information is collected at account registration but withheld from Employer users until identity release conditions are satisfied. The collection of Creator identity information at registration is necessary to operate the Identity Escrow System and to verify Creator identity for Platform integrity purposes. Employer users do not have access to escrowed Creator identity information until the Conversion Fee has been collected and the SOW and SRC have been fully executed.

AICS uses Stripe, Inc. ("Stripe") to conduct identity verification as a condition of Creator account activation. Stripe is a global technology company that provides identity verification, payments, and related services to businesses.

• (a) What Stripe Collects. In the course of identity verification, Stripe collects: (i) images of the front and back of your government-issued photo identification document; (ii) photographs of your face, which Stripe uses to generate biometric identifiers and match against your identification document; (iii) your name, date of birth, and government identification number, validated against applicable databases; and (iv) device and technical information, including through the use of cookies, used for fraud detection and authentication purposes.
• (b) Biometric Consent and Alternative Method. Stripe requests your consent before collecting and using your biometric information (the facial-matching data described above). You may separately choose to allow Stripe to use your verification data to improve Stripe's own biometric verification technology; this is a distinct choice from verification itself and is not required to complete your account activation. If you do not wish to consent to biometric facial matching, you may request an alternative, non-biometric verification method by contacting support@AiCastingServices.com. This alternative involves live human review of your identification and does not involve biometric data collection or processing. See also Section 4A of this Policy.
• (c) How Stripe's Information Is Used and Shared. Stripe shares your verification results with AICS to confirm your identity and maintain Platform integrity. Stripe also independently uses and retains your verification data to operate, provide, and improve its own services, including fraud detection, authentication, and analytics, in accordance with Stripe's own privacy policy (https://stripe.com/privacy). With respect to this data, Stripe acts as both a service provider to AICS and, independently, as a data controller in its own right.
• (d) Data Retention and Deletion. Stripe retains a copy of the verification data you submit. AICS separately retains verification records and metadata as described in Section 5 (Data Retention) and Section 4A (BIPA Disclosures). To delete your verification data held by Stripe, or to revoke your consent to Stripe's use of your data for its own technology improvement, you may contact Stripe directly at https://support.stripe.com, or contact AICS at support@AiCastingServices.com and we will assist in submitting a deletion request through Stripe's tools on your behalf, where applicable.
• (e) Access. Both AICS and Stripe have access to the information you submit through the verification flow. Stripe applies access controls and security standards to your verification data consistent with those it applies to its own compliance and payments data.

Learn more about Stripe and its privacy practices at https://stripe.com/privacy.

We use the information we collect for the following purposes:

• (a) To provide and operate the Platform, including creating and maintaining your account, hosting your profile and portfolio content, operating the Identity Escrow System, and delivering subscription services.
• (b) To operate our criteria-based matching tools, which process Creator profile data and portfolio content metadata to surface Creator profiles to Employers based on defined skill criteria.
• (c) To apply watermarks to Creator-uploaded content for provenance tracking, identity protection, and Creator protection purposes, consistent with our content provenance infrastructure.
• (d) To administer the Identity Escrow System, including withholding Creator identity from Employers until release conditions are satisfied, releasing Creator identity upon satisfaction of those conditions, and removing watermarks from submitted content where applicable.
• (e) To process subscription payments and Conversion Fees through our third-party payment processor, and to manage billing, invoicing, and payment disputes.
• (f) To verify user identity through our third-party identity verification provider as a condition of account activation.
• (g) To communicate with you about your account, subscription, Platform updates, policy changes, and support requests.
• (h) To enforce our Terms of Service, Acceptable Use Policy, and other applicable policies, including detecting and acting on prohibited content through automated content safety tools.
• (i) To detect, investigate, and prevent fraudulent activity, security incidents, circumvention of the Identity Escrow System, and other violations of our policies.
• (j) To comply with applicable legal obligations, including mandatory reporting obligations under 18 U.S.C. § 2258A and cooperation with law enforcement investigations.
• (k) To analyze usage patterns and improve the Platform, including refining our matching tools using aggregated and de-identified data.
• (l) To send you promotional communications about AICS where you have opted in or where otherwise permitted by law. You may opt out of marketing communications at any time as described in Section 9.

Creator profile and watermarked portfolio content is made available to Employer users through the Platform's matching and discovery features. Creator identity information is withheld from Employers under the Identity Escrow System until release conditions are satisfied. Upon satisfaction of those conditions, Creator identity information is released to the specific Employer involved in the engagement. Creator identity is not released to any other Employer or third party as a result of that release.

Employer identity and Casting Call information is visible to all Creators on the Platform, as described in the Terms of Service.

We share information with third-party vendors and service providers that perform services on our behalf, including: identity verification (Stripe); payment processing; cloud hosting and infrastructure; data analytics; email communications and notifications; content watermarking and provenance services; and content safety detection technologies, including automated content moderation (currently AWS Rekognition) and, as they are implemented, additional hash-matching and duplicate-content detection tools. These providers are contractually required to use your information only as directed by AICS and to maintain appropriate security measures.

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service or other agreements; (c) detect or prevent fraud, security incidents, or technical failures; (d) protect the rights, property, or safety of AICS, our users, or the public; or (e) fulfill mandatory reporting obligations, including reporting confirmed CSAM to the NCMEC CyberTipline as required by 18 U.S.C. § 2258A.

In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of AICS's assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information as required by applicable law.

We may share your information for other purposes with your explicit consent.

AICS does not sell your personal information to third parties for monetary consideration. AICS does not share your personal information with third parties for their own independent marketing or advertising purposes without your consent.

This Section applies to Creators who are residents of Illinois and supplements the rest of this Policy pursuant to the Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq. ("BIPA").

This Section applies to California residents and supplements the rest of this Policy pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA").

In the preceding twelve (12) months, AICS has collected the following categories of personal information:

• (a) Identifiers: name, email address, phone number, IP address, account username, and government-issued identification data collected for verification purposes.
• (b) Professional or Employment-Related Information: professional credits, skills, portfolio content, Casting Call information, company name, and job title.
• (c) Commercial Information: subscription records, Conversion Fee transaction history, and payment records.
• (d) Internet or Other Electronic Network Activity Information: usage data, Platform activity, device and technical information.
• (e) Audio, Electronic, Visual, or Similar Information: portfolio images, demo reels, audio samples, and other media uploaded by Creators.
• (f) Inferences: profile characteristics and matching attributes derived from your use of the Platform.
• (g) Biometric Information: facial images and related biometric identifiers collected during identity verification through our third-party verification provider, Stripe.

We collect the categories of personal information described above for the business and commercial purposes described in Section 2 of this Policy.

We share personal information with the categories of third parties described in Section 3, including service providers (identity verification, cloud hosting, payment processing, content safety, analytics), other Platform users (Creator watermarked content with Employers; Creator identity upon release; Employer identity and Casting Call information with Creators), and as required by law.

As a California resident, you have the following rights under the CCPA/CPRA:

• (a) Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for collection, and the categories of third parties with whom it has been shared.
• (b) Right to Delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law, including information needed to complete transactions, detect fraud, fulfill mandatory reporting obligations, or comply with legal obligations.
• (c) Right to Correct. You have the right to request that we correct inaccurate personal information we maintain about you.
• (d) Right to Opt-Out of Sale or Sharing. AICS does not sell your personal information. If this practice changes, we will update this Policy and provide you with the right to opt out.
• (e) Right to Limit Use of Sensitive Personal Information. Biometric information collected during identity verification is sensitive personal information under the CPRA. You have the right to request that we limit our use of this and other sensitive personal information to purposes permitted by law.
• (f) Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights under the CCPA/CPRA.

To exercise any of your rights under this Section, please submit a verifiable consumer request to:

We will respond to verified requests within forty-five (45) days as required by law. We may request additional information from you to verify your identity before processing your request.

You may designate an authorized agent to submit a CCPA/CPRA request on your behalf. Authorized agents must provide written authorization signed by you, and we may require you to verify your identity directly with us before processing the request.

California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. AICS does not share personal information with third parties for their own direct marketing purposes without your consent. To make a Shine the Light inquiry, contact us at support@AiCastingServices.com.

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at: