Privacy Policy

For Your Show ("we", "us") helps theatre companies and performers manage auditions, callbacks, rehearsals and performances. This policy explains what personal data we collect, why we collect it, who we share it with, and the choices and rights you have over it.

What we collect

Depending on how you use For Your Show, we collect:

• Account and profile data — name, email address, date of birth, gender, pronouns, bio, and location.
• Audition data — the applications, answers, availability, headshots and scorecards you submit or that are recorded when you apply for or run an audition.
• Social sign-in data — if you sign in with Google, Facebook, Microsoft or Apple, the name, email and avatar those providers share with us.
• Passkeys — a device-bound credential reference if you register a passkey; we never see or store your biometric data itself.
• Usage data — things like sign-in activity and outbound link clicks (e.g. a company's website or ticketing link), used for security and to help companies understand engagement with their listings.

Why we process it

• To provide the service (contract) — creating your account, running auditions, scheduling rehearsals and performances, and showing your public profile if you choose to publish one.
• Security and abuse prevention (legitimate interest) — bot protection on sign-in/sign-up, fraud/spam detection on company listings, and an audit log of account changes that includes your IP address at the time, kept for 90 days.
• Communications you ask for (consent/contract) — transactional email (audition invitations, schedule changes, account notices) and any outreach you've opted into.

Who we share it with

We don't sell your data. We share it only as needed to run the service:

• Theatre companies you apply to or that invite you — they see the application, availability and scorecard data relevant to their own audition.
• Postmark — sends transactional email on our behalf.
• Amazon Web Services / MinIO — stores uploaded media such as headshots.
• Cloudflare and imgproxy — sit in front of the app and serve resized images; neither retains your account data.
• Cloudflare Turnstile — a bot check on the sign-in and sign-up forms. Your browser loads a Cloudflare script and shares technical details (such as your IP address and browser signals) with Cloudflare so it can tell people from automated traffic.
• Google, Facebook, Microsoft and Apple — only if you choose to sign in with one of them.

Children and guardians

Performers under 18 can take part with a parent or guardian holding account access — guardians can review and manage the minor's account until access is handed over at the age the law in their region requires.

Cookies

We only use strictly necessary cookies — to keep you signed in and to protect forms from cross-site request forgery. We don't use analytics or advertising cookies.

Your rights

• Access — download a copy of your data any time from Settings → Export my data.
• Rectification — update your profile, location and other details directly in Settings.
• Erasure — request account deletion from Settings → Danger zone. Your account is deactivated immediately and anonymized after a 14-day grace period, giving you time to change your mind. How to delete your data.
• Objection/restriction — contact us using the details below and we'll act on your request.

Contact us

Questions about this policy or your data can be sent to [email protected].