Privacy Policy

Last Updated: October 19, 2025

At TOTL Agency ("we," "our," or "us"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform and services.

By using TOTL Agency, you consent to the practices described in this Privacy Policy.

1. Information We Collect

Information You Provide

When you register and use our Services, we collect information you provide directly:

Account Information: Name, email address, password, phone number
Profile Information: Bio, experience, measurements (for talent), company details (for clients)
Portfolio Content: Photos, videos, and descriptions you upload
Communications: Messages, application letters, and other communications through the platform
Payment Information: If we process payments, we collect billing information (handled securely through third-party processors)

Information Collected Automatically

We automatically collect certain information when you use our Services:

Usage Data: Pages viewed, features used, time spent, click patterns
Device Information: IP address, browser type, operating system, device identifiers
Location Data: General location based on IP address
Cookies: Session cookies, preference cookies, analytics cookies

Information from Third Parties

We may receive information from:

Authentication providers (if you sign in with third-party services)
Analytics services (Google Analytics, Sentry error tracking)
Other users who interact with you on the platform

2. How We Use Your Information

We use the information we collect to:

Provide Services: Create and manage your account, facilitate bookings, process applications
Communications: Send transactional emails (application updates, booking confirmations)
Personalization: Recommend relevant gigs, improve user experience
Platform Improvement: Analyze usage patterns, fix bugs, develop new features
Security: Detect fraud, prevent abuse, enforce our Terms of Service
Legal Compliance: Comply with applicable laws and regulations
Marketing: Send newsletters and promotional content (with your consent)

3. How We Share Your Information

We may share your information in the following circumstances:

With Other Users

Talent profiles and portfolios are visible to clients
Client company information is visible to talent
Application details are shared between talent and clients

With Service Providers

Hosting and infrastructure (Vercel, Supabase)
Email delivery (Resend)
Analytics and monitoring (Sentry, Google Analytics)
Payment processing (if applicable)

For Legal Reasons

We may disclose information if required by law or to:

Comply with legal obligations or court orders
Protect our rights, property, or safety
Prevent fraud or abuse
Investigate violations of our Terms

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures to protect your information:

Encrypted data transmission (SSL/TLS)
Secure password hashing
Row-level security on database
Regular security audits and monitoring
Access controls and authentication

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Opt-Out: Unsubscribe from marketing emails (transactional emails will continue)
Data Portability: Request your data in a portable format
Restrict Processing: Limit how we use your data

To exercise these rights, contact us at privacy@thetotlagency.com.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. We may retain certain information after account closure for legal, regulatory, or legitimate business purposes, such as fraud prevention, resolving disputes, or enforcing our Terms.

7. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

8. International Users

TOTL Agency is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our Services, you consent to such transfer and processing.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Remember your preferences and settings
Keep you logged in
Analyze how you use our Services
Improve performance and user experience

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Services.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect and how we use it
Right to request deletion of your personal information
Right to opt-out of the sale of personal information (we do not sell your data)
Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@thetotlagency.com with "California Privacy Rights" in the subject line.

11. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

To exercise these rights, contact our Data Protection Officer at dpo@thetotlagency.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of material changes by email or by posting a notice on our platform. The "Last Updated" date at the top indicates when this policy was last revised.

13. Third-Party Services

We use the following third-party services that may collect information:

Supabase: Database and authentication (privacy policy: supabase.com/privacy)
Vercel: Hosting and deployment (privacy policy: vercel.com/legal/privacy-policy)
Resend: Email delivery (privacy policy: resend.com/legal/privacy-policy)
Sentry: Error tracking and monitoring (privacy policy: sentry.io/privacy)

These third-party services have their own privacy policies governing their use of your information.

14. Do Not Track Signals

Some browsers support "Do Not Track" signals. Currently, we do not respond to Do Not Track signals, as there is no industry standard for compliance. We will continue to monitor developments in this area.

15. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

TOTL Agency - Privacy Team
Email: privacy@thetotlagency.com
Data Protection Officer: dpo@thetotlagency.com
General Support: support@thetotlagency.com
Website: www.thetotlagency.com

For GDPR-related inquiries (European users), please contact our Data Protection Officer at dpo@thetotlagency.com.

For CCPA-related inquiries (California residents), please email privacy@thetotlagency.com with "California Privacy Rights" in the subject line.

By using TOTL Agency, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.

TOTL Agency

TOTLAgency

Calibrating the experience…