Privacy Policy

1. Data We Collect

• Personal information (name, email address, phone number).
• User content (scripts, photos, videos, audio, and documents you upload).
• Usage data (feature interactions and app activity).
• Approximate location based on IP for security and analytics.

2. How We Use Data

• Provide, maintain, and improve the platform.
• Process payments and subscriptions.
• Power AI features like script parsing and voice features.
• Respond to support and account requests.

We do not sell or rent personal data for third-party marketing.

3. Sharing and Processors

Your data may be processed by service providers used to operate the product, including:

• Google services (Firebase, Gemini, Cloud Vision, and TTS tooling).
• Stripe for payment processing.
• ElevenLabs for Voice Mirror: when you use Voice Mirror, your recorded audio is sent to ElevenLabs' Speech-to-Speech API to generate a synthetic voice performance. ElevenLabs acts as a data processor under a data processing agreement and does not retain your audio after processing. Categories of data shared: voice audio recordings.
• Speech/OCR providers used for voice generation and document extraction.
• Microsoft Clarity for session recordings and heatmaps; input fields are masked by default and no passwords or payment details are captured.
• Plausible Analytics for cookieless, privacy-friendly page view and event counting; no personal data or cookies are used.

4. Cookies

ActorBook uses a small number of cookies and similar browser storage mechanisms:

• Authentication: Firebase stores your login session in browser local storage so you stay signed in between visits. This is strictly necessary for the app to function.
• Session recording (Microsoft Clarity): Clarity sets cookies to record anonymized session replays and aggregate heatmaps. Input fields (including passwords and payment details) are masked and never captured. Sessions may be associated with your account ID for support and debugging purposes. You can opt out at Microsoft's privacy dashboard.
• Analytics (Plausible): Plausible Analytics does not use cookies or collect personal data. It counts page views and events in aggregate only.
• Payments (Stripe): Stripe may set cookies for fraud prevention and checkout flow continuity. These are strictly necessary for payment processing.

To disable non-essential cookies, you can use your browser's cookie settings or a browser extension such as uBlock Origin. Note that disabling cookies may affect app functionality.

5. Retention and Security

We retain personal data for as long as your account is active. When you delete your account or request deletion, we remove personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes. Data is stored using Firebase services. We apply reasonable technical and organizational safeguards, but no internet transmission or storage method is 100% secure.

6. Your Rights

You may request access, correction, or deletion of your personal data. You can delete your account in app settings or contact support at info@actorbook.studio. We process verified deletion requests within 30 days.

7. Google API Services and Limited Use

ActorBook integrates with Google Calendar so actors can view, create, and update audition events alongside their rehearsal materials. The following terms apply specifically to data received from Google APIs.

• Scope requested: https://www.googleapis.com/auth/calendar.events. We use this scope to read events for display in ActorBook and to create or update audition-related events at your direction.
• Limited Use: ActorBook's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not use Google user data to develop, improve, or train generalized AI or machine-learning models. Calendar event content is not sent to Gemini or any other AI model for training or for features beyond the immediate calendar action you initiate.
• We do not transfer Google user data to third parties except as necessary to provide or improve the Calendar feature, to comply with applicable law, or as part of a merger or acquisition (with continued obligations under this policy).
• We do not use Google user data for serving advertisements, including retargeted or personalized ads, and we do not sell Google user data.
• We do not allow humans to read Google user data unless you give explicit consent for specific events, security investigations require it, or the data is aggregated and used for internal operations in compliance with applicable privacy regulations.
• Storage & Protection: Google Calendar data is transmitted over TLS and stored in Firebase with access controls scoped to your individual account. We do not log or cache raw calendar event content beyond what is required to display and reconcile your audition events, and no Google user data is stored on third-party servers outside the Firebase infrastructure used to operate ActorBook.
• Retention & Deletion: ActorBook stores only the minimum calendar metadata needed to display and reconcile audition events (event ID references and the audition links you create). When you disconnect Google Calendar from ActorBook or delete your account, we remove these references within 30 days. You can revoke ActorBook's access at any time at myaccount.google.com/permissions.

8. Voice Mirror — Biometric Voice Data

Voice Mirror is an optional feature that records your voice and uses ElevenLabs' speech-to-speech technology to generate a synthetic voice performance for use in your rehearsals. Use of this feature requires explicit consent, which you must grant before any recording begins.

• Data collected: Voice audio recordings made by you within the rehearsal screen.
• Processor: ElevenLabs, Inc. Your audio is transmitted to ElevenLabs' API for processing. ElevenLabs does not retain your audio after the speech-to-speech conversion is complete.
• Retention: The generated synthetic audio output is stored in your ActorBook account for up to 90 days and is then automatically deleted. You may delete your cached outputs at any time from the rehearsal screen.
• Consent and revocation: Your consent is required before any Voice Mirror recording. You may revoke consent at any time in Settings → Privacy. Revoking consent immediately deletes all cached Voice Mirror outputs from your account and prevents further processing.
• Applicable law: This feature involves the biometric capture of your voice. Depending on your location, this may be governed by the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14), the Tennessee Protecting Consumers from Deceptive AI Act (ELVIS Act), California Civil Code §3344, or New York Civil Rights Law §§50-51.

Voice Mirror cached outputs are automatically deleted from our storage 90 days after creation. You may revoke Voice Mirror consent at any time in Settings → Privacy, which also deletes any cached outputs immediately.