Privacy Policy

This Privacy Policy describes how TakeOne ("TakeOne", "we", "us") collects, uses, stores and shares information when you use the TakeOne platform at jointake.one (the "Service"). It applies to actors, casting directors, production houses, and any visitor to the Service.

We collect information in three buckets:

1. Information you give us

• Account details: name, email, phone number, date of birth.
• Portfolio content: profile photos, showreels, gallery images, filmography credits, skills, languages, physical stats, work preferences, social links.
• Identity verification documents (when you opt into KYC) - these are stored encrypted and never shown publicly.
• Payment details - processed by our payment provider; we do not store card numbers.

2. Information collected automatically

• Device, browser, IP address, and approximate location.
• Pages visited, time on page, and interactions (collected via PostHog and Sentry).
• Cookies and similar technologies - see our cookies section below.

3. Information from third parties

• If you sign in via Google, we receive your name, email, and profile photo from Google.
• For filmography credits, we may pull poster art and metadata from TMDb (themoviedb.org).

• To create and operate your account.
• To make your profile discoverable by casting directors and houses (only data you mark public).
• To process payments and credits.
• To send transactional emails (signup confirmation, OTPs, casting alerts).
• To prevent fraud, abuse, and impersonation.
• To improve the Service through aggregate analytics.
• To comply with legal obligations.

We do not sell your personal information. We share data only with:

• Other users - when you make your profile public, casting directors and houses can see it.
• Service providers - Supabase (database & auth), Vercel (hosting), Resend (email), Dodo (payments), Cloudflare (CDN), PostHog (analytics), Sentry (error monitoring), Upstash (rate limiting), Replicate & FAL (AI image generation), TMDb (filmography data), Anthropic (AI features).
• Legal authorities - if required to comply with applicable law or a valid legal process.

We use cookies for authentication, fraud prevention, and analytics. Essential cookies (e.g., your login session) are required to use TakeOne. Non-essential cookies (analytics) are loaded only after you accept the cookie banner.

We keep your account data while your account is active. If you delete your account, we remove personal data within 30 days, except where we are legally required to retain it (e.g., financial records for taxation purposes).

Under India's Digital Personal Data Protection Act 2023 and similar laws elsewhere, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention).
• Withdraw consent for non-essential processing.
• File a grievance with our Grievance Officer (below).

To exercise any of these rights, email privacy@jointake.one.

TakeOne is for users 18 and older. If we learn we have collected data from someone under 18 without verifiable parental consent, we will delete it promptly. If you believe a minor has created an account, report it to safety@jointake.one.

We use industry-standard encryption in transit (TLS) and at rest, and enforce row-level security on our database. No system is perfectly secure; if you suspect your account has been compromised, change your password and email security@jointake.one.

Some of our service providers store data outside India (primarily in the United States and the European Union). Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 7 days before they take effect.

For complaints regarding the processing of your personal data, write to our Grievance Officer at grievance@jointake.one. We will respond within 15 days as required by Indian law.