Privacy Policy

Last Updated: February 3, 2026 | Version 2.0

Scoutcast (PTY) LTD ("we," "our," or "us") is committed to protecting your privacy and complying with applicable data protection laws worldwide, including the Protection of Personal Information Act (POPIA) of South Africa, the General Data Protection Regulation (GDPR) for EU/UK users, and the California Consumer Privacy Act (CCPA) for California residents. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application and related services.

1. Information We Collect

1.1 Information You Provide Directly

Category	Data Collected
Account Information	Full name, email address, phone number, password (encrypted), date of birth
Profile Data	Profile photo, bio, location (city, region, country), gender, experience level
Professional Information	Categories, skills, keywords, portfolio items, business details
User Content	Photos, videos, posts, messages, crew notes, showreels
Payment Information	Processed securely by our payment provider (we do not store card details)

1.2 Information Collected Automatically

Category	Data Collected
Device Information	Device type, operating system, unique device identifiers
Usage Data	Features used, time spent, interactions, app performance data
Location Data	City-level location (only with your permission)
Log Data	IP address, browser type, access times, referring URLs
Push Tokens	Device tokens for sending push notifications

2. How We Use Your Information

We process your personal information for the following purposes (as permitted under POPIA Section 11):

2.1 Service Provision

• Create and manage your Scoutcast account
• Display your profile to other users for professional connections
• Facilitate communication between users (messaging, crew notes)
• Process subscription payments and manage billing
• Send transactional notifications (messages, gig applications, project invites)

2.2 Platform Improvement

• Analyze usage patterns to improve features and user experience
• Personalize content and recommendations
• Surface relevant opportunities based on your location and categories
• Conduct research and analytics (aggregated, anonymized data)

2.3 Safety & Security

• Detect and prevent fraud, abuse, and policy violations
• Verify user identities and age requirements
• Protect the security and integrity of the Platform
• Enforce our Terms of Service and Community Guidelines

2.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Protect our legal rights and interests

3. Information Sharing & Disclosure

3.1 Public Information

Your profile information (name, bio, location, portfolio, categories) is visible to other Scoutcast users to facilitate professional connections. You control what information you include in your profile.

3.2 Service Providers (Operators under POPIA)

We share information with trusted third-party service providers who help us operate the Platform:

Provider	Purpose	Data Shared
Supabase	Database hosting & authentication	Account data, content, usage data
Cloudflare R2	Media storage (photos, videos)	Uploaded media files
Expo	Push notifications	Device tokens, notification content
Stripe	Payment processing (International)	Payment details (processed directly by Stripe)
PayFast	Payment processing (South Africa)	Payment details (processed directly by PayFast)
PostHog	Analytics (anonymized)	Usage patterns, feature interactions

3.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Scoutcast, our users, or the public.

3.4 We DO NOT:

• Sell your personal information to advertisers or data brokers
• Share your private messages with anyone except the recipient
• Provide your contact details (phone, email) to other users without consent
• Use your content for advertising without explicit permission

4. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted via HTTPS/TLS encryption
• Password Security: Passwords are hashed using industry-standard algorithms
• Row-Level Security: Database access controls ensure users can only access their own data
• Secure Authentication: Multi-factor authentication available
• Regular Audits: Periodic security assessments and vulnerability testing

Note: No system is 100% secure. While we take all reasonable measures to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active. When you delete your account:

• Your profile is immediately deactivated and hidden from other users
• Personal data is permanently deleted within 30 days
• Uploaded media is deleted from storage within 30 days
• Messages sent to other users may be retained but anonymized ("Deleted User")

6. Your Rights Under POPIA

Right	Description
Access	Request a copy of the personal information we hold about you
Correction	Request correction or update of inaccurate or incomplete information
Deletion	Request deletion of your personal information (subject to legal retention requirements)
Objection	Object to processing of your personal information for direct marketing
Restriction	Request restriction of processing in certain circumstances
Data Portability	Request your data in a machine-readable format
Withdraw Consent	Withdraw consent for processing where consent was the legal basis
Complaint	Lodge a complaint with the Information Regulator of South Africa

How to Exercise Your Rights

• In-App: Use Settings → Account → Privacy to manage your data
• Email: Contact privacy@scoutcast.app

We will respond to valid requests within 30 days as required by POPIA.

6A. Your Rights Under GDPR (EU/UK Users)

Legal Basis for Processing

We process your personal data under the following legal bases:

Legal Basis	Purpose
Contractual Necessity	To provide the Scoutcast service, manage your account, process payments
Legitimate Interests	To improve our services, prevent fraud, ensure platform security
Consent	Marketing communications, optional analytics, location services
Legal Obligation	Tax records, fraud prevention, responding to legal requests

Your GDPR Rights

Right	Description
Right of Access	Obtain confirmation of whether we process your data and receive a copy
Right to Rectification	Have inaccurate personal data corrected without undue delay
Right to Erasure ("Right to be Forgotten")	Request deletion of your personal data in certain circumstances
Right to Restriction	Request we limit processing of your data in certain circumstances
Right to Data Portability	Receive your data in a structured, machine-readable format
Right to Object	Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent	Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint	File a complaint with your local Data Protection Authority

International Data Transfers (GDPR)

Your data may be transferred to and processed in South Africa and other countries outside the EEA. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules where implemented by our processors

Data Protection Contacts (EU/UK)

For GDPR-related inquiries, contact us at privacy@scoutcast.app with "GDPR Request" in the subject line.

We will respond within 30 days (extendable by 60 days for complex requests).

Supervisory Authorities

You have the right to lodge a complaint with your local supervisory authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• EU: Contact your national Data Protection Authority

6B. Your Rights Under CCPA (California Residents)

Categories of Personal Information Collected

Category	Examples	Collected
Identifiers	Name, email, phone, IP address	Yes
Personal Information (CA Civil Code §1798.80)	Name, address, phone	Yes
Protected Classifications	Age, gender (optional)	Yes
Commercial Information	Subscription history, payments	Yes
Internet Activity	Browsing history, interactions	Yes
Geolocation Data	City-level location	Yes (with consent)
Professional Information	Job title, skills, portfolio	Yes
Inferences	Preferences, recommendations	Yes
Sensitive Personal Information	N/A - Not collected	No

Your CCPA/CPRA Rights

Right	Description
Right to Know	Request what personal information we collect, use, disclose, and sell
Right to Delete	Request deletion of your personal information (with certain exceptions)
Right to Correct	Request correction of inaccurate personal information
Right to Opt-Out of Sale/Sharing	Direct us not to sell or share your personal information
Right to Limit Use of Sensitive PI	Limit use of sensitive personal information (if collected)
Right to Non-Discrimination	Not be discriminated against for exercising your privacy rights

How to Exercise Your CCPA Rights

• Online: Email privacy@scoutcast.app with "CCPA Request" in the subject line
• In-App: Settings → Account → Privacy → Download My Data / Delete My Account

We will verify your identity before processing requests. We will respond within 45 days (extendable by 45 days if necessary).

Authorized Agents

You may designate an authorized agent to make requests on your behalf. We require written authorization and identity verification from both you and the agent.

Financial Incentives

We do not offer financial incentives for the collection, sale, or deletion of personal information.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze usage patterns. You can manage cookie preferences in your browser or device settings.

Types of Cookies We Use

Type	Purpose	Duration
Essential	Authentication, security, basic functionality	Session/Persistent
Functional	Remember preferences, language settings	1 year
Analytics	Understand usage patterns (anonymized)	2 years

Note: We do not use advertising or tracking cookies. We do not sell data to advertisers.

8. Children's Privacy

We do not knowingly collect personal information from individuals under 18 years of age. If we discover that a user is under 18, the account will be immediately terminated and all personal information deleted.

9. International Data Transfers

Your information may be transferred to and stored on servers located outside South Africa. We ensure appropriate safeguards are in place, including standard contractual clauses and compliance with POPIA cross-border transfer requirements (Section 72).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of Scoutcast after changes constitutes acceptance of the updated policy.

11. Data Controller & Information Officer

In accordance with POPIA, GDPR, and CCPA, we have designated responsible officers for data protection compliance.

Supervisory Authorities

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with:

By using Scoutcast, you acknowledge that you have read and understood this Privacy Policy
and agree to the collection, use, and sharing of your information as described.

© 2026 Scoutcast (PTY) LTD. All rights reserved.