Privacy Policy

Your personal data is controlled by the administrator of the postmodels.com service. You can contact the administrator about anything in this policy at [email protected]. When this policy says "PostModels", "we" or "us", it means the administrator of the postmodels.com service.

PostModels is a casting marketplace. Adult models create profiles and apply to paid castings. Brands, agencies and studios publish castings, review applicants, book models and pay through the platform. Some data is processed because you are a model, some because you are a member of a brand account, and some for every visitor.

We collect only what we need to run the marketplace safely.

• Account data: email address, password (stored as a salted hash), account type, plan and settings.
• Model profile data: display name, city and country, approximate location for distance search, gender if you choose to add it, height, measurements, sizes, hair and eye color, skills, languages, rates, availability, biography and the categories of work you want.
• Photos and videos: the portfolio images and clips you upload, and the comp card generated from your profile.
• Social data: the social media handles you add, follower counts and average views, and the link you use to verify them.
• Verification data: the result of the ID and age check, the date it was done and a reference from the verification provider. Your government ID is processed by the verification provider. Your birth date is kept private and is never shown to brands or the public.
• Brand data: organization name, website, business email domain, team members and their roles, client workspace names, castings, roles, requirements, budgets and usage rights.
• Messages: conversations between models and brand accounts on PostModels, and messages you send to support.
• Booking and payment data: bookings, booking agreements, fees, platform fees, payout status, subscription and invoice details. Card numbers and bank details are collected and stored by our payment processor, not by us. We receive limited data such as the card brand, last four digits and payment status.
• Reports: reports you submit and reports about you, with the reasons and outcomes.
• Usage data: pages viewed, actions taken in the app, device and browser type, IP address, approximate location from IP, and timestamps. We use this to keep the service secure and to count plan usage.
• Cookies: we use essential cookies only, for sign-in sessions, security tokens and your preferences such as the yearly or monthly toggle. We do not use advertising cookies or advertising pixels, and we do not sell or share your data for targeted advertising.
• Preview data: if you try the anonymous profile or casting preview, the values you type are kept in your session only and are not saved to an account unless you sign up.

Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on these legal bases.

When we rely on legitimate interest, we have balanced our interest in running a safe and working marketplace against your rights. You can object at any time, as described below.

• Models: your public profile shows your display name, city, photos, videos, measurements, sizes, skills, rates, availability and verified social stats, plus a Verified badge. Your email, birth date, ID and payout details are never shown. Contact details are hidden until you choose to share them in a conversation.
• Brands: your casting shows the brand name, the casting details and the usage rights. Applicants see the casting and the messages you send them.
• Shortlist links: agencies and studios can share a view-only shortlist with their clients. The link shows the profile data listed above and the notes the agency added.

We do not sell personal data. We share data only with the categories of recipients below, and only what each one needs.

• Hosting provider: stores and runs the service and its databases.
• Payment processor: handles subscription payments, booking payments, held funds and payouts, including its own identity and fraud checks required by law.
• Identity verification provider: checks government ID and age for models.
• Email delivery provider: sends sign-up codes, notifications and receipts.
• Other users: as described in section 4, as part of the service you asked for.
• Professional advisers: lawyers, accountants and auditors, under confidentiality.
• Authorities: when the law requires it, or to protect people from harm, including reports of content involving anyone under 18.
• A buyer or successor: if the service is sold or reorganized, your data may transfer to the new operator under this policy.

Each service provider acts on our instructions under a written agreement and may not use your data for its own purposes, except where the law requires it to, such as the payment processor's own anti-fraud obligations.

PostModels serves users in many countries, and our providers may process data outside the country where you live, including in the United States and the European Union. When data protected by the GDPR is transferred to a country without an adequacy decision, we use the safeguards the law provides, such as the European Commission's standard contractual clauses, and we check that the provider protects the data to the same standard.

• Account and profile data: while your account is open. When you delete your account, your public profile is removed right away and the rest is deleted within 30 days, except the items below.
• Booking agreements, bookings, invoices and payment records: as long as tax and accounting law requires, usually up to 7 years.
• Verification results: for the life of the account and up to 3 years after, so we can prevent banned users from returning and show that we checked age.
• Messages: while either participant's account is open, and up to 1 year after, unless they are part of a report or dispute.
• Reports and enforcement records: up to 3 years, longer if needed for a legal claim.
• Security logs: up to 12 months.
• Preview data: until your browser session ends.

Depending on where you live, you have some or all of these rights.

• Access: ask for a copy of the personal data we hold about you.
• Correction: fix data that is wrong or incomplete. Most profile data you can edit yourself.
• Deletion: ask us to delete your data. You can also delete your account in settings.
• Restriction: ask us to limit how we use your data while a question is resolved.
• Portability: receive the data you gave us in a common, machine-readable format.
• Objection: object to processing based on legitimate interest, including matching notifications.
• Withdraw consent: where we rely on consent, withdraw it at any time without affecting earlier processing.
• Complaint: if you are in the EU, the UK or a country with a similar law, you can complain to your local data protection authority. We would like the chance to help first.

To use any right, email [email protected] from the address on your account. We may ask you to confirm your identity. We reply within one month, or within the time your local law sets.

If you live in California or another US state with a consumer privacy law, such as Colorado, Connecticut, Virginia, Utah, Texas or Oregon, you have the right to know what personal information we collect, use and disclose, to access it, to correct it, to delete it and to receive it in a portable format.

• We do not sell personal information, and we do not share it for cross-context behavioral advertising.
• We do not use sensitive personal information, such as government ID data, for anything other than verifying identity and age, keeping the service safe and meeting legal duties.
• We do not discriminate against you for using your privacy rights.
• You can use an authorized agent to make a request. We may ask the agent for proof of permission and ask you to confirm your identity.
• If we deny a request, you can appeal by replying to our answer. We review the appeal and respond in writing.

The categories of personal information we collect are those listed in section 2. The sources are you, other users who interact with you, our verification provider and payment processor, and your device. The purposes are those in section 3, and the recipients are those in section 5.

PostModels is only for adults aged 18 and older. Models must pass ID and age verification before their profile is published. Castings cannot target anyone under 18. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete the data, except what we must keep to meet legal duties. If you believe this has happened, email [email protected].

We use encrypted connections, encryption at rest, salted password hashes, limited and logged staff access, regular backups and monitoring. Card details are handled by our payment processor. No system is perfectly secure, so we also ask you to use a strong, unique password and to keep your sign-in codes private. Read more on our security page.

We send emails needed to run your account: sign-up codes, booking updates, payment receipts, security alerts and important changes to these policies. Models with an active plan may receive emails about castings that match their profile. You can turn off matching emails and optional updates in your settings. Account and security emails cannot be turned off while your account is open.

We may update this policy when the service or the law changes. We change the date at the top and, for significant changes, we tell you by email or in the app before the change takes effect. The version on this page is the one that applies.

Email the administrator of the postmodels.com service at [email protected] about privacy questions, requests and complaints. See also our terms of service and contact page.