Privacy Policy

Last Updated: October 24, 2026

Last Updated: October 24, 2026

Distinkt Talent Agency LLC ("Distinkt," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use distinkt.com, our related applications, and our talent agency and platform services.

Distinkt operates as both a licensed talent agency and a digital platform connecting talent, clients, and industry professionals. Because our services involve professional profiles, casting materials, project communications, identity verification, payments, and agency-related records, this policy also includes role-specific protections for performers, clients, and other creative professionals.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, Section 13 sets out additional information required by the GDPR and UK GDPR and, where it conflicts with the rest of this policy, controls.

1. Personal Information We Collect

We collect personal information depending on how you use the platform and which role you have.

Information You Provide

We may collect:

  • Account information, including name, email address, phone number, login credentials, and account preferences
  • Profile information, including professional biography, skills, experience, availability, rates, representation status, union or guild affiliation, and location
  • Portfolio materials, including images, reels, work samples, resumes, credits, audition materials, and other creative submissions
  • Client information, including company name, role, project briefs, casting needs, budgets, timelines, and engagement preferences
  • Communications, including messages, support requests, notes, uploaded documents, and correspondence with Distinkt
  • Payment and transaction information, including payment method details processed by payment providers, invoices, commissions, and accounting records
  • Verification information, including identity verification status, professional references, work history, and eligibility information

Identity Verification

To maintain trust and safety, we may use Persona or another verification provider to verify identity or account eligibility.

We do not intentionally store copies of government ID documents or biometric identifiers unless specifically required for a legal, compliance, or dispute-resolution purpose. We generally retain verification status, verification tokens, timestamps, and related audit records.

Persona's own privacy practices are described at: https://withpersona.com/legal/privacy-policy

Information Collected Automatically

When you use the platform, we may collect:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Referral URLs
  • Pages viewed
  • Features used
  • Session activity
  • Approximate location derived from IP address
  • Cookies, pixels, local storage, and similar technologies
  • Error logs and security events

Information From Third Parties

We may receive information from:

  • Identity verification providers
  • Payment processors
  • Connected social media accounts you authorize via OAuth (such as Google/YouTube, Meta/Instagram, and TikTok), as described in Section 27
  • Clients, talent, or representatives involved in platform engagements
  • Public professional sources, where lawful and relevant
  • Service providers that help operate, secure, or improve the platform
  • Guild, union, production, or compliance sources where relevant to an engagement

2. How We Use Personal Information

We use personal information to:

  • Create and manage accounts
  • Review applications and authorize platform access
  • Operate Distinkt's talent agency and platform services
  • Create, display, and manage talent and client profiles
  • Match talent with opportunities
  • Support casting, project, and engagement workflows
  • Facilitate communications between users
  • Process payments, invoices, commissions, and related records
  • Verify identity, eligibility, and account integrity
  • Provide customer support
  • Improve platform functionality, security, and reliability
  • Generate operational analytics and platform insights
  • Prevent fraud, abuse, unauthorized access, and policy violations
  • Enforce agreements and policies
  • Comply with legal, tax, accounting, guild, union, agency, and regulatory obligations
  • Evaluate, negotiate, and complete corporate transactions, as described in Section 4

If you are in the EEA, UK, or Switzerland, the legal bases on which we rely for each of these purposes are set out in Section 13.

3. AI, Matching, and Automated Processing

Distinkt may use automated systems, including AI-assisted tools, to support platform operations such as:

  • Search and discovery
  • Matching talent with relevant opportunities
  • Organizing profile and project metadata
  • Recommending workflows or potential fits
  • Detecting fraud, spam, abuse, or platform misuse
  • Improving internal tools and operational efficiency

Operational AI processing is intended to support employment, casting, agency, and platform facilitation. It does not replace final human judgment for agency representation, hiring, casting, or contractual decisions. If you are in the EEA, UK, or Switzerland, your rights regarding automated decision-making are described in Section 13.

Distinkt does not use audition materials, self-tapes, recorded performances, voice recordings, images, likeness materials, or performer content to train generative AI models, create synthetic performances, create digital replicas, or license performer likeness data for AI training without separate, explicit consent.

Distinkt does not use data received from Google APIs (including YouTube channel and video data) or other connected social media accounts to develop, improve, or train generalized or generative AI/ML models.

4. How We Disclose Personal Information

We may disclose personal information in the following circumstances.

Platform Operations

We may disclose relevant profile, portfolio, project, and communication information between talent, clients, representatives, and Distinkt staff to facilitate opportunities, casting, negotiation, agency services, and platform operations.

Service Providers

We may disclose information to vendors that help us operate the platform, including:

  • Hosting and infrastructure providers
  • Identity verification providers
  • Payment processors
  • Email and messaging providers
  • Analytics providers
  • Customer support tools
  • Security, fraud prevention, and monitoring providers
  • Social media and OAuth integration providers (such as Google/YouTube, Meta/Instagram, and TikTok), limited to the data and scopes you authorize
  • Legal, accounting, and compliance advisors

Service providers are authorized to use personal information only as needed to provide services to us or as otherwise permitted by law. Where these providers process personal data on our behalf, they act as our processors under written data processing agreements. For individuals in the EEA, UK, or Switzerland, additional information on processors and sub-processors is in Section 13.

Legal and Compliance

We may disclose information when necessary to:

  • Comply with law, regulation, subpoena, court order, or legal process
  • Protect the rights, safety, and property of Distinkt, users, clients, talent, or others
  • Enforce our agreements and policies
  • Investigate fraud, abuse, or security incidents
  • Maintain tax, accounting, agency, guild, union, or production records

Business Transfers and Change of Control

If Distinkt or any entity that owns or controls Distinkt is involved in a merger, acquisition, financing, reorganization, change of control, bankruptcy, receivership, sale of all or part of its business or assets, or similar transaction, personal information may be disclosed to prospective counterparties and their advisors during due diligence, under confidentiality obligations, and may be transferred to or remain with a successor entity as part of that transaction.

Any successor or acquiring entity will be required to honor the commitments in this Privacy Policy for personal information collected before the transaction, including our performer AI and likeness protections (Sections 3, 16, 17, 18, and 21), our audition material protections, and any opt-out, restriction, or deletion requests you have made. If a successor intends to use your personal information in a way that is materially different from this Privacy Policy, you will be notified in advance and, where required by law, asked for your consent or given the opportunity to delete your account and information.

Under applicable privacy laws, including the California Consumer Privacy Act, a transfer of personal information as part of such a transaction is not a “sale” of personal information, provided the information continues to be used consistently with this Privacy Policy. Nothing in this section limits any rights you have under applicable law, including rights in your name, image, likeness, voice, or performances.

With Consent

We may disclose information for other purposes with your consent or at your direction.

5. No Data Brokerage

Distinkt is not a data broker. We do not sell or license personal information to third parties as a standalone product.

We do not sell user profiles, contact information, portfolio materials, behavioral data, audition materials, or performer likeness information to advertisers, marketers, data brokers, or AI training providers.

Some privacy laws define "sell" or "share" broadly, including certain advertising or cross-context behavioral advertising practices. Distinkt's cookie and analytics practices are described in our Cookie Policy and can be controlled through available cookie preference tools.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep users logged in
  • Remember preferences
  • Support security and fraud prevention
  • Measure platform performance
  • Understand feature usage
  • Improve user experience
  • Support analytics, where permitted

Some cookies are necessary for the platform to work. Optional analytics or marketing cookies are used only where permitted by your settings and applicable law.

For more information, see our Cookie Policy.

7. Payments and Financial Data

Payment information is processed by authorized payment providers. Distinkt does not intentionally store full payment card numbers unless required and supported by a compliant payment provider.

We may retain transaction records, invoices, payment confirmations, commission records, tax records, and accounting documentation for legal, business, tax, and agency compliance purposes.

Commission structures, including talent commissions where applicable, are business terms and do not constitute a sale of personal information.

8. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

Retention periods may vary based on the type of information, user role, legal obligations, agency obligations, payment obligations, guild or union requirements, dispute needs, and security requirements.

Examples include:

Data Type Typical Retention
Account information While account is active, plus a reasonable period after closure
Profile and portfolio materials While account is active or as needed for active opportunities
Communications As needed for operations, support, disputes, and compliance
Financial and commission records Generally 7 years or longer if required
Tax and accounting records As required by law
Identity verification status While account is active or as needed for compliance
Security logs As needed for security, fraud prevention, and diagnostics
Audition materials As needed for the relevant casting opportunity, legal obligations, dispute handling, or applicable engagement requirements
OAuth access and refresh tokens While the integration is active or until the credentials expire, are revoked, or are no longer reasonably needed; see Section 27
Imported social media metadata While the connected content remains in your portfolio or analytics history; removal behavior varies by platform and user role, as described in Section 27

We may retain deidentified, aggregated, or anonymized information where it cannot reasonably be used to identify you.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including:

  • Encryption in transit
  • Access controls
  • Authentication requirements
  • Monitoring and logging
  • Vendor review
  • Security reviews
  • Incident response procedures

No system is completely secure. You are responsible for protecting your account credentials and notifying us promptly of suspected unauthorized access.

10. International Users

Distinkt is based in the United States. If you access the platform from outside the United States, your information may be transferred to, processed in, and stored in the United States or other jurisdictions where we or our service providers operate.

Privacy laws in those jurisdictions may differ from the laws in your location. Where required, we use appropriate safeguards for international transfers. If you are located in the EEA, UK, or Switzerland, the specific transfer mechanisms we rely on are described in Section 13.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Request access to personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of personal information
  • Request a copy of your information
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent
  • Opt out of certain sales or sharing of personal information, where applicable
  • Limit certain uses or disclosures of sensitive personal information, where applicable
  • Not be discriminated against for exercising privacy rights

To exercise privacy rights, contact: privacy@distinkt.com

We may need to verify your identity before completing a request. We may deny or limit requests where permitted by law, including where retention is required for legal, security, tax, accounting, agency, guild, contract, dispute, or fraud prevention purposes.

Residents of California (Section 12) and individuals in the EEA, UK, or Switzerland (Section 13) have additional rights described in those sections.

12. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), applies to Distinkt, you may have the rights described below.

Categories of Personal Information Collected

In the preceding 12 months, we may have collected the following categories of personal information:

CCPA Category Examples
Identifiers Name, email, phone number, IP address, account identifiers
Customer records information Contact details, payment-related records, account information
Protected classification information Union or guild status where voluntarily provided or relevant
Commercial information Transactions, invoices, commissions, project engagement records
Internet or network activity Log data, pages viewed, feature usage, cookies
Geolocation data Approximate location from IP address
Audio, visual, or similar information Portfolio media, self-tapes, reels, headshots, submitted creative materials
Professional or employment information Credits, resumes, skills, representation status, work history
Education information Training, schools, certifications, where provided
Inferences Preferences, matching signals, platform recommendations
Sensitive personal information Account login credentials, government ID verification status, financial information, union or guild-related information where applicable

Sources of Personal Information

We collect personal information from:

  • You
  • Your account activity
  • Clients, talent, representatives, or other users
  • Service providers
  • Verification and payment providers
  • Connected social media accounts you authorize (Google/YouTube, Meta/Instagram, TikTok)
  • Public professional sources where lawful and relevant
  • Legal, agency, compliance, production, or guild-related sources where applicable

Business Purposes for Collection and Disclosure

We collect and disclose personal information for the purposes described in this policy, including platform operation, agency services, matching, payments, security, compliance, analytics, and support.

Sale or Sharing

Distinkt does not sell personal information as a standalone product and does not sell or license user data to data brokers.

If any optional analytics or advertising technology is considered a "share" under California law, users may control those technologies through cookie preference tools and any applicable opt-out mechanisms.

Under the CCPA, the transfer of personal information as an asset in a merger, acquisition, bankruptcy, or other transaction in which a third party assumes control of all or part of the business is not a sale or sharing of personal information. Any successor will honor opt-out requests you made to Distinkt before the transaction, as described in Section 4.

Sensitive Personal Information

We use sensitive personal information only as reasonably necessary to provide services, verify identity, maintain security, comply with legal obligations, process payments, support agency obligations, or as otherwise permitted by law.

Exercising California Rights

California residents may contact privacy@distinkt.com to request access, deletion, correction, portability, opt-out, limitation, or additional information.

We will not discriminate against you for exercising applicable privacy rights.

13. European Economic Area, United Kingdom, and Switzerland

This section supplements the rest of this Privacy Policy and provides additional information required under the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the Swiss Federal Act on Data Protection (FADP). It applies to individuals located in the European Economic Area, the United Kingdom, and Switzerland. Where it conflicts with another part of this policy, this section controls for those individuals.

13.1 Data Controller and Contact

Distinkt Talent Agency LLC, Los Angeles, California, USA, is the controller responsible for your personal data.

Distinkt is established outside the EEA, UK, and Switzerland. For all privacy matters, including questions about this section, regional representation, and requests to exercise your rights, contact us at privacy@distinkt.com.

We only process your personal data where we have a legal basis to do so. The table below maps the purposes in Section 2 to the legal basis we rely on and the data involved.

Purpose Legal basis Personal data used
Create and manage your account; provide our talent agency and platform services; create and display talent and client profiles; match talent with opportunities; support casting, project, and engagement workflows; facilitate communications; process payments, invoices, and commissions Performance of a contract (Art. 6(1)(b)) — necessary to provide the services you sign up for Account information; profile information; portfolio materials; client information; communications; payment and transaction information
Connect external social accounts via OAuth (Section 27); send optional marketing communications; set optional analytics or marketing cookies; process special category data (Section 13.3); any AI, digital replica, synthetic media, or likeness use beyond operational matching Consent (Art. 6(1)(a); Art. 9(2)(a) for special category data) — you may withdraw at any time OAuth tokens and imported metadata; marketing contact details; cookie and device identifiers; union or guild affiliation; likeness materials where a specific AI/replica use is requested
Operate search, discovery, and matching; recommend opportunities and workflows; secure the platform and prevent fraud, spam, and abuse; perform operational analytics and product improvement (using deidentified data where practicable); administer our business; evaluate, negotiate, and complete corporate transactions such as a merger, acquisition, financing, or change of control (Section 4); establish, exercise, or defend legal claims Legitimate interests (Art. 6(1)(f)) Usage data (IP address, device, session activity, approximate geolocation); profile and project data used for matching; security and error logs; communications relevant to a dispute; business records reviewed in transaction due diligence
Retain tax, accounting, payment, and commission records; respond to lawful requests from authorities; maintain agency, guild, or union records where legally required; meet identity and eligibility obligations Legal obligation (Art. 6(1)(c)) Transaction, commission, and tax records; identity verification status; records responsive to legal process

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms before processing, taking account of the limited impact of the processing and the safeguards and controls we provide. You have the right to object to this processing at any time (see Section 13.6).

Our use of personal data for matching and discovery is operational only. As stated in Sections 3 and 18, we do not train generative AI models, create synthetic performances, or create digital replicas using performer content under legitimate interests or any other basis — that processing requires your separate, explicit consent.

13.3 Special Category Data (Article 9)

Some information you may provide is "special category data" under the GDPR. In particular, union or guild membership is special category data, and we collect it because it is directly relevant to agency representation, casting eligibility, and compliance.

We process union or guild affiliation on the basis of your explicit consent (Art. 9(2)(a)). You are not required to provide it, and you may withdraw your consent at any time, although doing so may limit our ability to surface union-covered opportunities to you.

Headshots, reels, self-tapes, and voice recordings are processed as ordinary personal data for the purposes of display, profile presentation, and matching. We do not process this content using facial-recognition, voice-recognition, or other techniques intended to uniquely identify you, and we therefore do not treat it as biometric special category data. If we ever introduce a feature that would process this content for identification purposes, we will seek fresh explicit consent and update this policy before doing so.

13.4 Automated Decision-Making and Matching (Article 22)

Our matching tools surface and recommend potential fits between talent and opportunities. They support, but do not replace, human judgment. Final decisions about agency representation, casting, hiring, and contractual terms involve human review and are not made solely by automated means.

To the extent any processing produces legal or similarly significant effects on you through solely automated means, you have the right to obtain human intervention, to express your point of view, to contest the decision, and to receive an explanation of the logic involved. To exercise these rights, contact privacy@distinkt.com.

13.5 International Transfers (Articles 44–49)

Distinkt is based in the United States, and your personal data will be transferred to and processed in the US and potentially other countries that may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on a lawful transfer mechanism, including:

  • The European Commission's Standard Contractual Clauses (SCCs) for transfers from the EEA;
  • The UK International Data Transfer Agreement (IDTA) or the UK Addendum to the SCCs for transfers from the UK;
  • The relevant Swiss SCC arrangements for transfers from Switzerland;

together with any supplementary technical and organizational measures required to protect the data. We execute these mechanisms with our processors and for transfers within our own operations.

We are not currently certified under the EU-U.S. Data Privacy Framework. You may request a copy of the relevant transfer safeguards by contacting privacy@distinkt.com.

13.6 Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict processing in certain circumstances;
  • Object to processing based on legitimate interests, and to object at any time to processing for direct marketing;
  • Data portability — receive data you provided in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible;
  • Withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing before withdrawal;
  • Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (see Section 13.4).

To exercise any of these rights, contact privacy@distinkt.com. We may need to verify your identity before responding, and we will respond within the time limits required by applicable law. We may decline or limit a request where an exemption applies, for example where retention is required for legal, tax, accounting, security, dispute, or fraud-prevention purposes.

13.7 Right to Lodge a Complaint

If you believe our processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, place of work, or the place of the alleged infringement:

We would, however, appreciate the chance to address your concerns before you approach a supervisory authority, so please consider contacting us first at privacy@distinkt.com.

13.8 Retention

We retain personal data for the periods described in Section 8 and only for as long as necessary for the purposes for which it was collected, consistent with the GDPR's storage-limitation principle, after which it is deleted, anonymized, or retained only where a legal obligation requires it.

13.9 Processors and Sub-processors

We use third-party service providers to process personal data on our behalf, including for hosting and infrastructure, content delivery and media storage, identity verification, payment and accounting, messaging and notifications, analytics, and security. Where required by applicable law, we enter into appropriate data-protection terms with providers that process personal data on our behalf. A current list of relevant sub-processors is available by contacting privacy@distinkt.com.

14. Age Restrictions

Distinkt is intended only for users who are at least 18 years old.

We do not knowingly collect personal information from children or from individuals under 18. Individuals under 18 may not create accounts, submit profiles, upload materials, or use the platform.

If we learn that we collected personal information from an individual under 18, we will take appropriate steps to delete or restrict that information unless retention is legally required.

15. Account Closure and Deletion

You may request account closure by contacting support@distinkt.com or privacy@distinkt.com.

After closure, we may retain certain information as needed to:

  • Complete active engagements
  • Maintain accounting, tax, payment, and commission records
  • Comply with legal, agency, guild, union, or production obligations
  • Resolve disputes
  • Enforce agreements
  • Prevent fraud or abuse
  • Maintain security records
  • Protect legal rights

Where appropriate, we may delete, deidentify, or restrict access to information instead of retaining it in active systems.

16. User Content and Portfolio Materials

You retain ownership of portfolio materials, audition materials, reels, images, resumes, work samples, and other content you provide.

Distinkt uses user content only as needed to provide platform and agency services, including profile display, matching, casting review, communications, opportunity facilitation, and compliance.

Distinkt does not use performer content to train generative AI models or create synthetic performances without separate explicit consent.

17. Audition Materials and Self-Tapes

Audition materials, self-tapes, sides, recorded performances, and casting submissions receive heightened protection.

Unless otherwise required for a specific engagement or legal obligation:

  • Audition materials are used only for the casting or opportunity for which they were submitted
  • Access is limited to appropriate Distinkt personnel, clients, casting decision-makers, or authorized representatives
  • Materials are not used for unrelated projects without permission
  • Materials are not used for AI training, digital replicas, or synthetic media generation
  • Users may request deletion of audition materials at privacy@distinkt.com

For SAG-AFTRA or other guild-covered engagements, applicable collective bargaining agreements or production requirements may impose additional rules.

18. AI, Digital Replicas, and Likeness Protections

Distinkt recognizes that performers and creative professionals retain important rights in their name, image, likeness, voice, performance, and creative work.

Distinkt will not knowingly:

  • Create digital replicas of performers without explicit consent
  • Generate synthetic performances using performer content without explicit consent
  • Train generative AI models on performer content without explicit consent
  • License performer content to third parties for AI training without explicit consent
  • Use likeness rights for merchandising or unrelated commercial promotion without separate permission

If a client requests AI, digital replica, synthetic media, or similar rights as part of an engagement, Distinkt will seek to ensure that the request is clearly disclosed and separately documented.

19. Aggregate and Deidentified Data

We may create aggregate or deidentified data from platform activity, including usage trends, marketplace insights, or operational performance data.

Aggregate or deidentified data is not intended to identify a specific person, client, project, performer, transaction, or engagement.

Distinkt does not include sensitive deal terms, individual compensation terms, confidential casting details, private communications, or identifiable performer content in public aggregate reporting.

20. Market Intelligence and Rate Information

Distinkt may use aggregate, deidentified, or anonymized information to understand market trends, platform performance, talent categories, engagement types, and general compensation ranges.

Market intelligence is for informational and operational purposes only. It does not override union minimums, guild agreements, individual contracts, or applicable law.

For union-covered work, applicable union or guild minimums and rules control.

21. Performer-Specific Protections

Performers may provide sensitive professional and creative information, including:

  • Headshots
  • Reels
  • Voice recordings
  • Self-tapes
  • Credits
  • Union or guild affiliation
  • Availability
  • Compensation expectations
  • Likeness-related materials

Distinkt uses this information to provide agency, casting, matching, profile, and platform services.

Performer content is not sold to data brokers, licensed for AI training, or used to create digital replicas without separate explicit consent.

For performers covered by SAG-AFTRA or other guild agreements, Distinkt may maintain information needed to support agency, compliance, engagement, payment, and recordkeeping obligations.

This may include:

  • Union or guild status
  • Engagement records
  • Session or employment details
  • Payment and commission records
  • Holding fee or exclusivity information
  • Residual-related records where applicable
  • Production or client information relevant to compliance

Where guild agreements, production contracts, or applicable law impose stricter requirements, those requirements control.

23. Non-Union Performer Protections

Non-union performers receive core privacy and likeness protections, including:

  • Audition materials used only for intended casting purposes
  • No generative AI training on performance content without explicit consent
  • No digital replica creation without explicit consent
  • Ability to request deletion or restriction of audition materials where legally permitted
  • Disclosure of material AI, synthetic media, or likeness requests where applicable

Non-union engagement terms may differ from guild-covered terms, but Distinkt's baseline privacy and likeness protections still apply.

24. Client and Company Data

Clients may provide business information, including:

  • Company name
  • Contact information
  • Project briefs
  • Casting needs
  • Budgets and timelines
  • Engagement preferences
  • Communications with Distinkt and talent

We use client information to provide platform services, facilitate engagements, support talent matching, manage communications, process transactions, and maintain compliance records.

Client confidential information is handled according to applicable agreements and platform policies.

25. Communications

We may use your contact information to send:

  • Account messages
  • Security alerts
  • Policy updates
  • Project or opportunity notifications
  • Support messages
  • Administrative emails
  • Service announcements
  • Optional marketing communications, where permitted

You may opt out of marketing emails, but we may still send non-marketing messages necessary for account, security, legal, or service purposes.

The platform may link to third-party websites, services, payment processors, identity verification providers, social media platforms, client websites, or external resources.

This Privacy Policy does not govern third-party privacy practices. Review third-party policies before providing information to them.

27. Connected Social Media Accounts (OAuth Integrations)

Distinkt lets you connect external accounts to display your work, sync content, provide verified performance information, improve your professional profile, and support relevant brand-search and project-matching features. Connecting an account is optional and requires you to authorize Distinkt through the provider's OAuth process.

Distinkt acts as a controller of the connected-account data that you authorize us to receive and use for our own platform and agency purposes. You may disconnect an account at any time through Portfolio → Social Connections. Disconnecting stops future collection through that connection. Content or analytics already imported into Distinkt may be removed, retained in your portfolio until you remove it, or retained for a limited period in operational or historical analytics records, depending on the platform, your role, and the feature involved.

YouTube (Google API Services)

When you connect your YouTube account, we use OAuth 2.0 with the youtube.readonly scope to access:

  • Your YouTube channel metadata (channel ID, title, custom URL, thumbnail, subscriber count, video count)
  • Your public uploaded videos (id, title, description, thumbnail, duration, view count, like count, comment count, published date, tags)

We use this data to let you display and select YouTube videos for your Distinkt portfolio, provide verified content-performance information, and support portfolio, brand-search, and project-matching decisions. We do not modify, post, delete, or upload anything to your YouTube account. We do not use this data for advertising or to develop, improve, or train generalized or generative AI/ML models.

Distinkt's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use also complies with the YouTube API Services Terms of Service.

You can revoke Distinkt's access at any time:

When you disconnect YouTube through Distinkt, we disable the connection, stop future collection, and remove active OAuth credentials from the current role-aware connection. Imported YouTube content or metadata may remain in your portfolio until you remove it or close your account. You may also revoke Distinkt's authorization through your Google account.

TikTok

When you connect TikTok, we use OAuth 2.0 with the user.info.basic, user.info.profile, user.info.stats, and video.list scopes to access your authorized profile information, account statistics, and public videos. This may include your username, display name, profile image, follower and following counts, video count, and available video metadata and performance metrics such as views, likes, comments, and shares.

We use this data to let you display and select TikTok content for your portfolio, provide verified content-performance information, and support brand-search and project-matching decisions. Where available, you may control ongoing connected-platform analytics collection through Distinkt's analytics-sharing controls. We do not post to, modify, delete content from, or read private messages from your TikTok account. We do not use TikTok data for advertising or to develop, improve, or train generalized or generative AI/ML models.

You can revoke Distinkt's access at any time:

  • In Distinkt: Portfolio → Social Connections → TikTok → Disconnect
  • In TikTok: TikTok app → Settings and privacy → Security and login → Manage app permissions

When you disconnect TikTok through Distinkt, we mark the connection inactive and stop future collection. Depending on your role and whether content was selected for a portfolio, certain imported content or historical analytics records may remain until you remove them, close your account, or they are removed under our retention practices. You may also revoke Distinkt's authorization through TikTok.

Instagram (Meta)

When you connect an Instagram professional account, Distinkt uses the Instagram API with Instagram Login. You initiate the connection and authorize the instagram_business_basic and instagram_business_manage_insights permissions.

We use instagram_business_basic to retrieve information from the professional account you connect, including available account identifiers, username, name, biography, website, profile image, follower and following counts, media count, and media such as posts, reels, and carousel items. Media information may include identifiers, captions, media type, media or thumbnail URLs, permalinks, and timestamps.

We use instagram_business_manage_insights to retrieve available account and media performance information. Depending on what Instagram makes available for the connected account and content, this may include reach, views, accounts engaged, total interactions, likes, comments, shares, saves, and related aggregated performance figures.

We use Instagram data to confirm and display the connected account, let you select Instagram content for your Distinkt portfolio, provide verified portfolio and performance analytics, and support brand-search and project-matching decisions. We do not post to, modify, or delete content from your Instagram account, and we do not read private messages or manage comments. We do not use Instagram data for advertising or to develop, improve, or train generalized or generative AI/ML models.

This is a user-initiated Instagram Login connection. Distinkt does not use Facebook Login for this integration, require you to connect a Facebook Page, or use a Meta system-user token.

You can disconnect Instagram through Portfolio → Social Connections → Instagram → Disconnect. This disables the Distinkt connection and stops future collection. For creator accounts, Instagram-backed portfolio items imported through the integration are removed when the connection is disconnected, while manually added Instagram entries remain. Removal behavior for other talent roles may differ, and previously generated historical analytics records may be retained for the limited periods described in Section 8.

Instagram Login does not provide Distinkt with a server-side revocation operation for this connection. To revoke the provider authorization itself, remove Distinkt from the connected apps or websites area of your Instagram account settings.

Data We Never Request

Distinkt does not request scopes for posting, deleting, modifying, sending direct messages, or accessing private content on any connected social media platform. If a future feature requires additional scopes, we will request fresh consent from you and update this policy before any new scopes are used.

Token Storage and Security

OAuth credentials are transmitted using encryption in transit and stored in access-controlled systems protected by our infrastructure and database security measures. Access is limited to authorized services and personnel who need it to operate, secure, or troubleshoot the integrations.

When you disconnect an integration, Distinkt marks the connection inactive and stops using its credentials for future collection. Where the provider supports server-side revocation, we may also request that the provider revoke the credential. Disabled connection and credential records may be retained for a limited period for security, audit, troubleshooting, legal, or dispute-resolution purposes, after which they are deleted or otherwise removed according to our retention practices. You may separately revoke Distinkt's authorization through the applicable provider's account settings.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we will update the "Last Updated" date and may provide additional notice through the platform, email, or other appropriate means.

Continued use of the platform after an updated policy becomes effective means you acknowledge the updated policy.

29. Contact Us

For privacy questions or requests, contact:

Distinkt Talent Agency LLC Los Angeles, California Email: privacy@distinkt.com

For legal notices, contact:

Email: legal@distinkt.com

For support, contact:

Email: support@distinkt.com