Privacy Policy
Last updated:
What we collect
Account details (name and email, via Google, Apple, or an email address with a password or sign-in link), the profile you build (stats, location, casting preferences, languages, optional ethnic appearance, social handles), photos you upload, applications you draft and send, in-app activity (castings viewed, saved, dismissed, and how you move through the app), and, if you take part in the referral program, who referred you and who you referred. If you enable notifications in the mobile app, we store a device token to deliver them.
How we use it
To match casting calls to your profile, generate application drafts, send applications you approve, improve matching quality, and find and fix problems in the app.
Analytics, session recordings & error reports
We want to be plain about this, because it's more than most people picture. We use PostHog to record how the app is used — which screens you open, what you tap, and a replay of your session (a reconstruction of what was on your screen and where you tapped) together with the app's console output. This is how we find bugs: when something breaks, we go back and watch what happened. Text you type into form fields is masked in recordings, and card numbers never reach us at all (payment is handled by Stripe on its own pages). We use Sentry to collect error reports, which include the error, your device and browser type, and the screen you were on. Only our team can see any of this; it's used to fix and improve the app, never for advertising, and it's not sold or shared. Recordings are kept for 30 days. When you delete your account, your analytics profile and its events and recordings are erased along with it (see below). Error reports can include your account identifier and are kept under Sentry's standard retention (90 days); email us if you want those removed sooner.
The public pages of this site (the home page, the casting-call pages, pricing, and pages like this one) use PostHog for page views and clicks only — no session recording — and honour your browser's Do Not Track setting. If you go on to create an account, that anonymous visit is linked to it so we can tell which pages bring people in.
AI processing
HeyBooker is built on AI, and we want to be plain about where it runs: your profile text, your onboarding and assistant chat messages, and photos you upload for analysis are processed by Google Gemini to build your profile, score matches, tag photos, and draft applications. Casting listings themselves are also AI-analyzed (to extract role details and screen for scam patterns) — that processing is of the public posting, not of your data. Under our API terms, none of this content is used to train third-party models. AI output can be wrong: drafts are always shown to you for review before anything is sent, and match scores are recommendations, not decisions made about you.
Services we rely on
Firebase (authentication, database, photo storage), Google Gemini (AI drafting/matching), Stripe (payments — we never see your card number), Resend (sending application emails and match digests), PostHog (product analytics and session replay), and Sentry (error monitoring).
What we don't do
We don't sell your personal information. Your photos and profile are shared only where you direct an application to be sent.
Your controls
Edit your profile any time. Turn off email digests in Settings. Delete your account from Profile → Settings — this permanently removes your profile, photos, applications, conversations, and activity, and cancels any subscription.
Children's privacy
HeyBooker accounts are held by adults. Talent under 18 can be on HeyBooker only through a managed profile created by a parent or legal guardian, who attests to that relationship, accepts the Terms and this policy on the child's behalf, and is the contact on every application. For a managed profile we collect only what casting directors need to consider the talent: name, age, presentation, city, casting types, height, shoe size, eye and hair colour, the photos the guardian uploads, and — only if the guardian volunteers it — ethnic appearance. We do not collect the child's email address, phone number or social accounts, and Booker never asks for them or for body measurements. For a child under 13 we ask for consent twice: the attestation in the app, and a confirmation link sent to the guardian's email address. The guardian can review everything on the profile screen and delete the whole profile at any time from Profile → Settings; deletion is immediate and complete, as described under Data retention. Questions or requests about a child's data: hello@heybooker.app.
Data retention
Data is kept while your account is active and deleted on account deletion. Backups age out within 7 days.
Your conversations with Booker are kept for 30 days in a private diagnostic log, so we can investigate problems you report — a wrong answer, a bad suggestion, a reply that shouldn't have been sent. They are not shown anywhere in the app, are readable only by us, are never used for advertising, and are deleted automatically after 30 days or immediately when you delete your account.