Privacy Policy

This Privacy Policy has been prepared to explain how [Company Name] ("Platform") collects, uses, shares, and protects your personal data when you use the digital talent and casting services provided through the Platform. By using the Platform, you acknowledge that you have read and understood the data processing practices described in this Policy. For detailed legal information regarding the processing of your personal data, please also review our KVKK Information Notice.

1. Data We Collect

Depending on your use of the Platform, we may process your personal data in the following categories:

Identity Information

  • First name, last name, and other identity information you provide when creating an account.
  • Age or date of birth (solely for the purpose of verifying the 18+ age requirement).

Contact Information

  • Email address.
  • Phone number and city information that you voluntarily provide.

Profile and Content Information

  • Profile photos (up to 10 photos).
  • Introduction video (1 video, MP4 format, maximum 50 MB).
  • Biography, talent category (actor, model, dancer, singer, voice actor, face model), and other information you choose to share on your profile.

Messaging Content

  • The content of your communications and messaging records with other users through the Platform.
  • Notes you add to the announcement board (Pinboard).

Payment Information

  • Transaction records related to your token purchases (amount, date, purchased package, and transaction status).
  • Your card information is NOT stored in the Platform's systems. Payment transactions are processed through authorized payment service providers, iyzico and Stripe; your card information is processed only by these providers.

Technical Data

  • IP address, browser type, and session information processed for session management and security purposes.
  • Data obtained through essential cookies required to provide the service (for details, please see our Cookie Policy).

2. How We Collect Your Data

We primarily collect your personal data through the following methods:

  • Directly from you: Through registration forms, profile editing, photo/video uploads, messaging, and support requests.
  • Automatically: Through essential cookies and server logs during your use of the Platform.
  • From third-party services: If you choose to sign in with Google (OAuth), through basic account information shared by Google, such as your name and email address.

3. Purposes of Processing Your Data

We process your personal data for the following purposes:

  • Creating, managing, and verifying your account and identity.
  • Providing the service of matching talent profiles with industry professionals.
  • Providing user-to-user messaging and application functionality for listings.
  • Processing and maintaining records of token purchases and payment transactions.
  • Ensuring Platform security and preventing abuse, fraud, and unauthorized use.
  • Communicating with you regarding service-related notifications and support matters.
  • Fulfilling our legal obligations and responding to lawful requests.

4. Sharing with Third Parties

Your personal data is not sold or rented to third parties for marketing purposes. Your data is shared only with the service providers listed below to the extent necessary to provide the services and fulfill our obligations:

  • iyzico (Türkiye): Processing token payments made with Turkish cards.
  • Stripe (United States): Processing token payments made with international cards.
  • Google (United States): Authentication when you choose to use Google Sign-In (OAuth).
  • SmarterASP (United States): Hosting services for the Platform.
  • Authorized public authorities and institutions: To the extent required by applicable law when there is a legal obligation or valid legal request.

5. International Data Transfers

Some of the service providers listed above are located outside Türkiye. Accordingly, your personal data may be transferred internationally within the following scope:

  • When payments are processed through Stripe, relevant data may be transferred to the United States.
  • When you choose to sign in with Google, identity information may be transferred to the United States.
  • The SmarterASP servers hosting the Platform are located in the United States.

International transfers are carried out in accordance with the applicable provisions of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where required, based on your explicit consent. Further information is provided in our KVKK Information Notice.

6. Data Retention Periods

We retain your personal data for as long as necessary for the purposes for which it is processed and for the periods required by applicable legislation:

  • Your account and profile information is retained while your account remains active. When you close your account, such information will be deleted or anonymized within a reasonable period, subject to applicable legal retention obligations.
  • Payment and transaction records are retained for the periods required under applicable tax and commercial legislation.
  • Pinboard notes are automatically deleted 30 days after they are created.
  • Messaging content is retained for a reasonable period as necessary to provide the service and resolve potential disputes.

7. Data Security Measures

We implement appropriate technical and administrative measures to protect your personal data, including:

  • HTTPS/TLS encryption for data transmission.
  • Passwords are stored using irreversible hashing; your passwords are never stored in plain text.
  • Access controls and session security measures designed to prevent unauthorized access.
  • Payment card information is never stored by the Platform; such information is processed only by payment service providers that maintain applicable PCI-DSS compliance.

We remind you that no method of transmission or storage can guarantee 100% security. You are responsible for using a strong password and keeping your login credentials confidential.

8. Your Rights

With respect to your personal data, you have the right to access your data, request its correction or deletion, object to its processing, and exercise the other rights specified under Article 11 of the KVKK. The scope of these rights and the procedures for exercising them are explained in detail in our KVKK Information Notice. You may submit your requests through the communication channels specified in the "Contact" section below.

9. Children's Data

The Platform is intended exclusively for individuals who are 18 years of age or older. Individuals under the age of 18 may not register for or use the Platform's services. If we determine that personal data belonging to an individual under the age of 18 has been processed, we will delete the relevant data as soon as reasonably practicable. If you believe that data belonging to a child has been provided to us, please contact us.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Material changes will be appropriately announced through the Platform before they take effect. The effective date of the current version of this Policy is indicated at the top of this page. We recommend that you review this page periodically to stay informed about any changes.

11. Contact

For any questions, requests, or inquiries regarding our privacy practices or your personal data, you may contact us through the following channels:

  • Data Controller: Eysstalent
  • Address: Kültür Mahallesi, 3818 Sokak, Yağmur Apt. No: 7/1, 2025 Kepez / Antalya, Türkiye
  • Email: support@eysstalent.com
  • Additional Contact Emails: noreply@eysstalent.com, media@eysstalent.com

Effective Date: September 26, 2026