Privacy Policy

1. Who We Are

This Privacy Policy is issued by Cherniak B ("we," "us," or "our"), and explains how we collect, use, share and protect information about you when you use any site in our network (together, "the Network," and each one a "Site").

These sites are run by one team on one shared platform. This single policy applies to all of them — and it applies automatically to any Site we add to the Network in future, from the moment it launches, on the same terms set out here. See also section 3 of our Terms of Service.

Our postal address:
81 Binscarth Cres
Thornhill, Ontario
Canada L4J 4S7

2. One Account, One Set of Data, Several Sites

This is the most important thing to understand about privacy across our Network, so we'll be direct about it.

• There is one database. Your account, profile and history are stored once and used by every Site in the Network. Signing up on one Site creates an account that works on all of them.
• Signing in carries across. When you move between our Sites while signed in, we may pass a short-lived, single-use, signed token between the domains so you arrive already signed in. It identifies you to us, isn't shared with anyone else, and expires within a couple of minutes.
• Each Site sets its own cookie. They're separate domains, so each keeps its own session cookie on your device.
• We record which Site you joined on. That's how we know which brand to use when we email you.
• Your public profile may be shown on more than one Site. What's public stays public in the same way on each — cross-listing shows the same profile to a wider audience, it doesn't expose anything new about you.
• This isn't sharing with a third party. The Sites are all us. Moving your data between them isn't a disclosure to anyone else, and doesn't make your information more widely available than your profile's visibility already allows.

3. Information We Collect

a) Information you provide

• Account registration: Email address, password (stored hashed, never in plain text), role (performer or planner), and which Site you registered on
• Performer profile: Name, headshot, biography, performer and act types, fees, location, travel and technical requirements, social media links, video URLs, testimonials, past clients
• Planner profile: Name, organisation, location, contact details
• Directory listings: For agencies, bureaus and planners listed on our directory Site — business name, contact name, email, phone, website, location and a description. This information is published deliberately: the point of a directory is that people can contact you. Rosters are never published.
• Bookings, events and requests: Event details, dates, budgets, and messages exchanged through the platform
• Payment information: Payments are handled by our payment providers (currently PayPal; potentially others such as Stripe). We do not store card numbers. We receive confirmation of payment status and provider reference IDs, and we store the payout address you give us.
• Contact form: Name, email and message content when you contact support

b) Collected automatically

• IP address and approximate location
• Browser type and operating system
• Pages viewed and time spent on a Site
• Referring URLs
• Session data (stored server-side)

c) Analytics

We may use Google Analytics to understand aggregate traffic. It uses cookies and may transfer data to Google's servers. In the EU and EEA, analytics cookies stay off until you accept them. You can opt out anywhere via the Google Analytics opt-out browser add-on.

d) Information from a previous site of ours

Some accounts were created by importing an existing profile from a site we already operated, so long-standing members keep their profile and history rather than starting over. Imported data — profile details, photos, videos, links and sign-in credentials — came from that site and is covered by this policy from the moment it was imported. We keep a marker recording that an account was imported, and its original identifier, for traceability. If you'd rather we didn't hold an imported profile, tell us and we'll remove it.

4. How We Use Your Information

• Create and manage your account across the Network
• Display your profile to event planners on each Site it qualifies for
• Publish directory listings, where you asked to be listed
• Facilitate bookings, requests and messaging between users
• Process subscription and booking payments through our payment providers
• Send transactional email — booking confirmations, messages, reminders, invoices, password resets
• Respond to support requests
• Improve the platform using aggregate usage data
• Enforce our Terms of Service and prevent fraud
• Comply with legal obligations

Which brand emails you

Email from us is sent in the name of the Site the message relates to — the Site where the action happened, or, for scheduled messages like reminders and invoices, the Site your account belongs to. It's the same team and the same platform behind every one of them, and every email tells you who it's from and how to reach us.

5. How We Share Your Information

We do not sell your personal information. We share it only in these situations:

• Across our own Sites: As described in section 2. That's us using your data on our own platform, not disclosure to an outside party.
• With other platform users: Public profile information (name, bio, photo, videos, fees, location) is visible to any visitor on the Sites your profile appears on. A planner's contact details are shared with performers who respond to their booking request with a fee quote, and with the parties to a confirmed booking; private messages are visible only to the people in the conversation. Directory listings publish the contact details you gave us for exactly that purpose.
• With service providers: Payment providers (PayPal, and any additional provider we enable, such as Stripe), email delivery, hosting and analytics. They receive only what they need to do their job and may not use it for anything else. Payment providers handle your payment details under their own privacy policies.
• For legal reasons: Where required by law, subpoena or government request, or to protect our rights, our users or the public.
• On a business transfer: If the Network, or a Site in it, is merged, acquired or reorganised, user data may transfer to the new owner, who will remain bound by this policy or one materially as protective.

6. Cookies

We use cookies for:

• Session management — keeping you signed in. Each Site sets its own session cookie on its own domain.
• Security — CSRF tokens that prevent cross-site request forgery.
• Remembering your device — if you choose "keep me logged in".
• Analytics — Google Analytics, where enabled and (in the EU/EEA) where you've accepted them.

You can disable cookies in your browser, but some things — signing in, most obviously — won't work without session cookies.

7. Data Retention

• Account data is retained while your account is active.
• Booking, payment and commission records are retained indefinitely for accounting, tax and dispute-resolution purposes.
• Messages and booking history are retained for at least 7 years for dispute resolution and tax purposes.
• Email logs and read notifications are purged on a rolling schedule set by our team (180 days by default).
• The short-lived tokens used to sign you in across our Sites are single-use and expire within minutes.
• On account closure we anonymise or delete personal data as described in section 9B, except where retention is legally required.

8. Security

We take reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption on all pages of every Site
• Passwords stored using bcrypt hashing — never in plain text, and never visible to us
• CSRF token protection on forms
• Parameterised database queries to prevent SQL injection
• Signed, expiring, single-use tokens for cross-site sign-in and for links we email you
• Admin access restricted by role

No method of internet transmission is 100% secure, so we can't guarantee absolute security.

9. Your Rights

Depending on where you live, you may have the following rights over your personal data. Because there's one account and one database, exercising a right applies across the whole Network — you don't need to ask each Site separately.

• Access: Request a copy of what we hold about you.
• Correction: Update or correct inaccurate information — most of it you can edit yourself in your profile settings, from any Site.
• Portability: Request a structured export of your data. We provide it in JSON format within 30 days.
• Objection: Object to certain kinds of processing.
• Restriction of listing: Ask us to show your profile on fewer Sites in the Network. See Terms, section 6.
• Deletion / account closure: See section 9B below for exactly what happens.

To exercise any of these, contact us. We respond within 30 days.

9B. Account Closure & What Happens to Your Data

Can I close my account?

Yes. Log in, go to Close Account in your dashboard navigation, and submit the request. Our team reviews and processes it within 3–5 business days, and you'll get a confirmation email.

You can't close your own account instantly — every closure is reviewed to confirm there are no outstanding bookings, pending payments or unpaid commission balances to settle first. And because one account covers the Network, closing it closes your access to every Site.

You have two options

What's kept after permanent closure?

If your account has any history — bookings, requests, payments or reviews — some records are retained even after closure. This is required by law and protects everyone involved:

• Booking, payment and commission records are retained indefinitely for accounting and tax.
• Your email address is anonymised — replaced with a reference code. We keep the original only for legal dispute resolution.
• Reviews you wrote or received remain, attributed to an anonymised account.
• Your public profile, photo and personal details are removed from all public pages across the Network.

Accounts with no booking, payment or review history can be fully and permanently deleted on request.

Outstanding obligations

Closure doesn't cancel financial obligations. Unpaid platform commissions remain due. Accrued payout balances owed to performers are held and released once a valid payment account is provided, even after deactivation. See Terms — Payout Policy.

10. Children's Privacy

Our Sites aren't directed at children under 13, and we don't knowingly collect personal information from them. If we learn that we have, we delete it promptly. You must be 18 or over to hold an account.

11. Third-Party Links

Profiles and listings may link to external sites — video platforms, social media, a business's own website. We're not responsible for the privacy practices of those sites. Links between our own Sites aren't third-party links; they're all covered by this policy.

12. California Privacy Rights (CCPA/CPRA)

If you're a California resident, you have the right to know what personal information we collect, to request its deletion, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law. Using your data across the Sites in our Network is internal use by one operator, not a sale. To exercise your rights, contact us.

13. Users in the EU and UK (GDPR)

If you're in the EU, EEA or UK, we process your personal data on these legal bases: performance of a contract (running your account, profile, bookings and payments), legitimate interests (operating, securing and improving the Network, and showing your profile across the Sites it qualifies for — which is the service you signed up for), consent (analytics cookies and marketing email, which you can withdraw at any time), and legal obligation (accounting and tax records).

You have the rights listed in section 9, plus the right to complain to your local data protection authority. Our servers are in the United States, so using our Sites involves transferring your data there.

14. Changes to This Policy

We may update this policy as the platform develops — including when we add a Site to the Network. Every version carries a Last updated date and a version identifier at the top of this page, so the current status is always visible. We notify registered users of material changes by email, and may ask you to accept the updated version when you next sign in. We record which version your account accepted, and when.

15. Contact Us

Questions, concerns or requests about your privacy? Contact us — a real person will read it, and we respond within 30 days.

81 Binscarth Cres
Thornhill, Ontario
Canada L4J 4S7