Privacy Policy

We collect only what we need to run accounts, castings, bookings and payments.

• Account data, such as name, email address, sign-in codes and your role as a brand or a model
• Company data for brands, such as company name, billing details and team members you invite
• Model profile data, such as photos, portfolio, measurements, sizes, location, availability and the categories you work in
• Identity document and a selfie for age and identity verification, processed by our identity verification provider
• Booking data, such as castings, applications, messages, Model Booking Agreements, usage riders and model releases
• Payment data, handled by our payment operator; we do not store full card numbers
• Payout details for models, used only to pay out completed bookings
• Technical logs, such as IP address, browser type, pages requested and error records, used for security and to keep the service working

No data from minors

ModelContracts is only for adults 18 and over. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we close it and delete the data, except what we must keep to prevent the same person from signing up again. If you believe a minor has an account, write to support@modelcontracts.com.

• To create and run your account and verify that every user is an adult with a real identity
• To show model profiles to brands and let brands post castings and book models
• To generate, store and share contracts and model releases between the two parties of a booking
• To process subscriptions, agency fees, invoices and model payouts
• To send service emails, such as sign-in codes, booking updates and receipts
• To prevent fraud, scams and abuse, and to keep the platform safe
• To meet legal, tax and accounting duties

Legal bases for users in the EU and UK

If the GDPR applies to you, we rely on these legal bases. Performance of a contract covers your account, bookings, payments and payouts. Legal obligation covers tax, accounting and records we must keep. Legitimate interests cover security, fraud prevention and improving the service. Consent covers any optional processing we ask you about, and you can withdraw it at any time. Identity document checks rely on contract performance and legitimate interests in keeping minors and fake accounts off the platform.

We do not sell personal data and we do not share it for cross-context behavioral advertising. We share data only with the categories of recipients below, and only as far as each one needs it.

• Hosting provider, which stores the service and its data
• Payment operator, which processes subscriptions, agency fees and payouts
• Email delivery provider, which sends service emails
• Identity verification provider, which checks age and identity documents
• The other party of a booking, which sees the profile, contract and release details needed for that booking
• Public authorities, when the law requires it

International transfers

Our recipients may process data outside your country, including in the United States. Where the GDPR applies, transfers rely on adequacy decisions or standard contractual clauses.

We use only strictly necessary cookies: a session cookie that keeps you signed in, a CSRF cookie that protects forms, and a preferences cookie that remembers settings such as billing period. We measure traffic without cookies and without tracking you across sites. We do not use advertising pixels. Because we use only necessary cookies, the site does not show a cookie banner.

• Account and profile data, for as long as your account is open, then deleted within 30 days of closing it
• Identity verification results, for as long as your account is open; the provider keeps document images only as long as its checks require
• Contracts, model releases and booking records, for the time needed to prove the agreed usage rights and to meet legal duties
• Invoices and payment records, for the period required by tax and accounting law
• Technical logs, for a short period needed for security, usually up to 90 days

If you live in California, the CCPA as amended by the CPRA gives you the right to know what personal information we collect, use and disclose, to access it, to correct it, to delete it, and to limit the use of sensitive personal information. We do not sell or share personal information as those laws define it, so there is nothing to opt out of. We do not discriminate against you for using these rights. Residents of other US states with privacy laws have similar rights, and we honor them the same way.

Your rights in the EU and UK

If the GDPR applies to you, you have the right to access your data, correct it, delete it, restrict or object to processing, take your data with you, and withdraw consent. You can also complain to your local data protection authority.

How to use your rights

Email support@modelcontracts.com from the address on your account. We may ask you to confirm your identity before we act. You can also edit most profile and account data yourself in your panel, and you can close your account in account settings.

Data travels over encrypted connections. Access inside our team is limited to people who need it for their work. Identity documents are handled by the verification provider and are not shown to brands. You can read more about how we keep bookings safe on our modeling agency scams page, and see the full booking rules in our terms of service.

Changes to this policy

When we change this policy, we update the date at the top. If a change is significant, we tell account holders by email before it takes effect.