Castflow holds what keeps your agency running: your talents' profiles, their photos, their selftapes, your exchanges with productions. This page states who can access it, where it lives, how you get it back, and what would happen if we were no longer here. No jargon, no grey areas.
The four questions we get in every demo
We commit to 90 days' notice before the service is discontinued. Throughout those 90 days the app stays available and export stays active. After the agreement ends (shutdown, termination or non-payment), you keep 60 days of read and export access to all of your data, in a structured, commonly used format.
Section 3.5 of our terms of service, not just a sentence on this page.
Two people. Castflow's two system administrators have technical access to an agency's data, and only to answer a support request, investigate an incident or meet a legal obligation. Every access is logged. The names of those people are provided to any agency that asks.
The content of retained emails is accessible to the technical lead alone.
The roles are written down: your agency is the enterprise responsible for its talents' information, Castflow is a service provider under section 18.3 and acts only on your instructions. The data processing agreement is entered into when the account is created. We supply the notice and consent form templates.
Any incident affecting your information is reported to you within 48 hours of our becoming aware of it.
No. You export your data whenever you want, with no request to file and no fee. The end of a subscription, including for non-payment, does not entitle us to withhold personal information.
We never hold your data as security for an amount owed.
Data ownership
“The User retains all rights in the content it uploads (profiles, scripts, breakdowns, photos, videos, documents). The Company acquires only a limited, non-exclusive, revocable licence, strictly necessary to operate the service on the User's behalf, which ends with the agreement.”
Your scripts, breakdowns, profiles, photos and videos are not used to train, develop or fine-tune any artificial intelligence model. Our analysis providers are contractually bound to no training and no retention.
We sell no personal information and disclose none to advertisers or data brokers. No third-party audience measurement tool is installed in the platform.
A profile is visible only to the agency that created it. Photos, videos and selftapes are private, reachable only through time-limited signed links. Sending one to a recipient takes an explicit action on your part.
Export guarantee
Spreadsheet, document, or a send to your own Google Drive. No request to file, no fee, no waiting period.
Termination by you, by us, or non-payment: you keep 60 days of read and export access to all of your data, in a structured, commonly used format.
An unpaid balance does not block export. No circumstance entitles us to withhold personal information to secure payment of an amount owed.
Once the window closes, data is permanently deleted within 30 days. A deletion attestation is provided on request.
If Castflow disappears
We are a young Québec company, and you are trusting us with the roster your agency lives on. The question deserves a dated timeline rather than a reassuring phrase.
You are notified by email and in the app at least 90 days before the service stops.
The app stays available and export stays active for the whole period. No export function is removed before the end.
A further 60 days of read and export access, after the service has stopped.
Data is permanently deleted within the following 30 days. Attestation on request.
Our backups are encrypted and our restore procedure is tested. Your data does not depend on a proprietary format: what you export is a standard spreadsheet, readable by any other tool.
Privacy, in plain words
The database, the files, the photos, the videos and the selftapes are hosted in Montréal, in the Canadian region of Amazon Web Services, and do not leave it at rest.
Your talents' health information (allergies and phobias), their banking details and their passport numbers never leave that infrastructure. None of it is sent to an analysis provider: matching a role's constraints against declared allergies is done by our own systems, here.
The text of casting calls and the profile elements needed for matching, after sensitive fields are automatically stripped. The content of emails sent from an @castflow.co address. Your agency's billing details. Google account data, if you connect one.
Each disclosure is preceded by a privacy impact assessment and governed by a written contract, and a summary of those assessments is provided on request.
Castflow performs no facial recognition and no biometric processing, and makes no automated decisions: choosing which talents to submit to a production is always done by someone at your agency.
Version 2.0, effective September 10, 2026
Any substantive change to our terms or our privacy notice is announced by email and in the app at least 30 days before it takes effect. If it does not suit you, you may terminate at no cost and keep your export rights.
We answer in writing, citing the applicable provision. The summary of our privacy impact assessments and the names of the people with access to the data are provided on request.
Request a demo Write to our privacy officerWAITLIST