Privacy Policy | Sertified

Sertified Media Group, LLC ("Company," "we," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share your personal information in connection with our services, websites, mobile applications, and other digital platforms (collectively, the "Services").

1. WHO WE ARE

We are Sertified Media Group, LLC, located at 1845 Clayton Ave, Pittsburgh, PA 15214. You can reach us at support@sertified.app or by phone at 916-793-6029.

2. INFORMATION WE COLLECT

We may collect the following types of personal data: a. Identity and contact details: Name, email, phone number, address, tax ID, etc. b. Application-related data: Age, gender, physical characteristics (e.g., height, weight), photos, reels, skills, experience c. Minor and parental data: Child's name, age, contact and consent details of parent/legal guardian d. Pet-related data: Pet's name, breed, photos e. Payment-related info: Payment dates, bank account numbers (processed via Stripe only) f. Legal and procedural data: Any contracts, rulings, or court documents associated with the user g. Technical and usage data: Device identifiers, cookies, app activity logs, analytics tags (e.g., Firebase, Google Analytics)

3. HOW WE COLLECT INFORMATION

We collect personal information directly from you, from collaboration platforms, or from your publicly available profiles. For children under 18, we require verified parental consent. Consent may be collected via digital signature, email verification, or in-app mechanisms.

4. HOW WE USE YOUR INFORMATION

We use your data to: a. Provide access to job listings or casting calls b. Operate, improve, and customize our Services c. Process and manage payments (via Stripe) d. Maintain audit logs and access controls e. Communicate with you regarding service updates or account issues f. Comply with legal and regulatory obligations g. Analyze traffic and user engagement via cookies and analytics platforms h. Conduct fraud prevention and protect system security

5. LEGAL BASES FOR PROCESSING

We process your information where: a. You give consent (e.g., submitting your profile, your child's or pet's info) b. It is necessary to fulfill a contract with you c. We have a legitimate interest (e.g., legal defense, fraud prevention)

6. DATA SHARING AND DISCLOSURE

We share your data only as necessary, including with: a. Clients and casting directors b. Production and IT personnel c. Stripe (for payment processing) d. Red Security Global Corporation (security and audit support) e. Subprocessors under strict agreements (list available upon request at support@sertified.app; updates will be posted in the app) f. Courts, legal authorities, and regulators If data is transferred outside the U.S. or EEA, we use legally recognized safeguards such as Standard Contractual Clauses or adequacy decisions. We are not responsible for the privacy or security practices of third-party service providers, including but not limited to Stripe, Firebase, or external casting platforms. Use of these services is subject to their respective privacy policies.

7. DATA RETENTION

a. Application data is retained until consent is withdrawn or account is deleted b. Contractual and payment data is retained for up to 10 years for tax/legal compliance c. Inactive accounts are purged after 12–18 months of inactivity d. Deleted accounts are removed within 30–90 days e. Audit logs are retained for 12 months and may be reviewed periodically by security personnel

8. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to: a. Access, correct, or delete your personal data b. Object to or restrict processing c. Request data portability (available formats: CSV or JSON, including basic metadata and timestamps) d. Withdraw consent at any time via in-app settings or by emailing support@sertified.app e. File a complaint with a regulatory authority You may exercise these rights by contacting us via the email or address provided.

9. CHILDREN'S PRIVACY (COPPA COMPLIANCE)

We are committed to protecting the privacy of children and comply with the Children's Online Privacy Protection Act (COPPA), the California Age-Appropriate Design Code Act (CAADCA), and the California Consumer Privacy Act (CCPA) as they relate to minors. a. Age Verification: During account registration, we collect date of birth to determine whether a user is under 13 or under 18. Users under 18 are flagged as minors and subject to enhanced privacy protections. b. Parental/Guardian Consent: We do not knowingly collect, use, or disclose personal information from children under 13 without first obtaining verifiable parental consent. For users aged 13–17, we require parental or guardian verification before the account becomes active. Consent is collected via our in-app parental verification process and verified by our administrative team. c. Information Collected from Minors: With parental consent, we may collect: name, age, gender, physical attributes (height, eye color, hair color, body type, skin color), city/location, photos, demo reels, and bio. We collect only information reasonably necessary to participate in casting opportunities. d. How Minor Data Is Used: Minor data is used solely for the purpose of matching talent with casting opportunities. We do NOT use minor data for targeted advertising, behavioral profiling, automated decision-making, or any purpose unrelated to the core Services. e. Parental Rights: Parents and legal guardians have the right to: • Review all personal information collected from their child • Request correction of inaccurate information • Request deletion of their child's account and all associated data • Revoke consent at any time, which will result in account deactivation • Opt out of any future data collection To exercise these rights, contact us at support@sertified.app or call 916-793-6029. f. Data Minimization: We apply the principle of data minimization for all minor accounts. We do not condition a child's participation on providing more personal information than is reasonably necessary. g. Default Privacy Settings: Per CAADCA requirements, all accounts for users under 18 default to the highest available privacy settings. Minor profiles are not publicly searchable outside the platform and are only visible to verified creators and administrators. h. No Data Sale: We do not sell the personal information of any user under 16. For users under 13, we require parental opt-in before any data sharing beyond what is necessary to operate the Services. i. Retention and Deletion: Minor data is subject to the same retention policies as adult data (see Section 7), with the additional provision that parental deletion requests are processed within 30 days. Upon account deletion, all photos, videos, and personal data are permanently removed. j. If you believe a child under 13 has provided personal information without parental consent, contact us immediately at support@sertified.app and we will delete the information within 48 hours.

10. DATA PROTECTION IMPACT ASSESSMENT (DPIA)

In compliance with the California Age-Appropriate Design Code Act (CAADCA / AB 2273), Sertified Media Group, LLC conducts Data Protection Impact Assessments (DPIAs) before launching or materially modifying any feature, product, or service that is likely to be accessed by users under 18. Our DPIAs evaluate: a. The purpose and necessity of data processing activities involving minors b. Risks to the rights and well-being of minor users c. Whether data collection is proportionate and minimized d. The effectiveness of safeguards, including parental consent mechanisms, default privacy settings, and data access controls e. Whether any design elements could be considered "dark patterns" that encourage minors to share more data than necessary f. The impact of profiling or algorithmic processing on minor users (currently: none) DPIA records are maintained internally and are available for review by California regulators upon request. A summary of our DPIA findings is available upon written request to support@sertified.app. We review and update our DPIAs annually or whenever a material change is made to features accessible to minors.

11. CCPA / CPRA DISCLOSURES (CALIFORNIA PRIVACY RIGHTS)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. a. Categories of Personal Information Collected: We collect identifiers (name, email, phone), physical characteristics (height, weight, eye/hair/skin color, body type, ethnicity, gender), professional information (skills, experience, demo reels), photos and videos, geolocation data (city), financial information (processed via Stripe), and internet/app activity data. b. Sensitive Personal Information: Under CPRA, the following data we collect is classified as sensitive personal information: racial or ethnic origin, physical characteristics and measurements, and photographs. This data is collected and used solely for casting opportunity matching at your direction. You have the right to limit the use of your sensitive personal information to purposes necessary to provide the Services. c. Purpose of Collection: All categories are collected for the purpose of operating the casting platform, matching talent with opportunities, processing payments, and communicating with users. d. Data Sharing: We share personal information with casting directors/creators (for hiring), Stripe (for payments), and security/audit personnel. We do NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising. e. Your California Privacy Rights: • Right to Know: Request what personal information we've collected, used, disclosed, or sold in the preceding 12 months • Right to Delete: Request deletion of personal information we've collected • Right to Correct: Request correction of inaccurate personal information • Right to Opt-Out: Opt out of the sale or sharing of personal information (note: we do not currently sell data) • Right to Limit Use of Sensitive Data: Limit our use of sensitive personal information to what is necessary for the Services • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights f. How to Submit a Request: You may submit a verifiable consumer request by emailing support@sertified.app, calling 916-793-6029, or using the "Privacy & Data Requests" option in your app Settings. We will verify your identity before processing any request and respond within 45 days. g. Authorized Agents: You may designate an authorized agent to make a request on your behalf by providing written authorization and verifying your identity. h. Annual Statistics: We will publish annual statistics on data requests received, complied with, and denied in our Privacy Center (available in app Settings).

12. BIOMETRIC DATA & PHOTO CONSENT

a. No Biometric Processing: Sertified does NOT use facial recognition technology, biometric identifiers, biometric information, or any automated processing of facial geometry on user photos or videos. Photos and videos uploaded to the platform are stored and displayed as-is for human review by casting directors and administrators only. b. Photo and Video Consent: By uploading photos and videos to the platform, you consent to their storage, display to verified casting directors and administrators, and potential inclusion in PDF comp cards generated at your request or an authorized administrator's request. c. Third-Party Sharing of Visual Media: Your photos and videos may be shared with third-party casting directors and production companies for the sole purpose of evaluating your suitability for casting opportunities. You retain the right to remove your photos and videos at any time via your Edit Profile page, which will remove them from future sharing. d. Minor Photo Consent: For users under 18, the parent or legal guardian provides consent for photo and video uploads on the minor's behalf as part of the parental verification process. Parents may request removal of all visual media at any time. e. Future Changes: If we ever introduce any form of biometric processing, facial recognition, or AI-based image analysis, we will provide explicit prior notice, obtain separate written consent (or parental consent for minors), and update this Privacy Policy accordingly. Users subject to state biometric privacy laws (including Illinois BIPA, Texas CUBI, and Washington state law) will receive additional disclosures and consent mechanisms as required. f. Compliance: This section is provided in accordance with applicable biometric privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and comparable state laws.

13. ANTI-DISCRIMINATION & EQUAL OPPORTUNITY

a. Voluntary Disclosure: All personal characteristics collected by Sertified — including but not limited to race, ethnicity, gender, age, body type, skin color, hair color, eye color, and height — are provided voluntarily by the user for the express purpose of matching talent with casting opportunities. b. Platform Role: Sertified operates as a technology platform and marketplace. We do not make hiring, casting, or employment decisions. Casting directors and production companies who use the platform are solely responsible for their own compliance with Title VII of the Civil Rights Act, the Age Discrimination in Employment Act (ADEA), the Americans with Disabilities Act (ADA), California's Fair Employment and Housing Act (FEHA), and all other applicable federal, state, and local anti-discrimination laws. c. No Employment Relationship: Sertified does not serve as an employer, staffing agency, or talent agency. Users of the platform — both talent and creators — are independent parties. No employment, agency, or joint venture relationship is created through use of the Services. d. Reporting Discrimination: If you believe you have been subject to unlawful discrimination by a casting director or production company through the platform, please report it to support@sertified.app. We take all reports seriously and may take action including suspending or banning the offending party. e. Bona Fide Occupational Qualifications: The entertainment industry recognizes that certain physical characteristics may constitute bona fide occupational qualifications (BFOQs) for specific roles. Casting requirements posted on the platform reflect the creative decisions of the production company and are not endorsements by Sertified.

14. SECURITY & DATA BREACH NOTIFICATION

We implement security measures including: a. Firebase infrastructure with encrypted storage b. Role-based access permissions with periodic audits c. Audit logs maintained for 12 months d. Encryption of data in transit (TLS/SSL) and at rest e. Periodic security reviews and vulnerability assessments Data Breach Notification Procedures: In the event of a data breach involving personal information, Sertified will: • Investigate and contain the breach as quickly as possible • Notify affected California residents within 72 hours as required by California Civil Code § 1798.82 • Notify the California Attorney General if more than 500 California residents are affected • Notify all other affected users within the timeframes required by their state of residence • Provide clear information about what data was affected, what we are doing to address it, and steps users can take to protect themselves • For breaches involving minor data, we will additionally notify the parent or legal guardian on file within 48 hours • Maintain a breach response log for compliance and audit purposes If you believe your account or data has been compromised, contact us immediately at support@sertified.app or call 916-793-6029.

15. COOKIES AND TRACKING

We use cookies and analytics tools to understand how our Services are used and to improve user experience. a. Types of Cookies and Tracking Technologies Used: • Essential Cookies: Required for core platform functionality (authentication, session management, security). These cannot be disabled. • Analytics Cookies: Used via Google Analytics and Firebase Performance Monitoring to understand usage patterns, page views, and feature engagement. These help us improve the platform. • Functional Cookies: Remember your preferences (e.g., dark mode, notification settings) across sessions. b. We do NOT use: • Third-party advertising cookies • Cross-site tracking cookies • Cookies for behavioral profiling or targeted advertising • Any tracking cookies on minor accounts beyond essential functionality c. Managing Cookie Preferences: You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect core platform functionality. Most browsers allow you to: • View what cookies are stored • Delete individual or all cookies • Block third-party cookies • Block all cookies (note: this may affect platform functionality) d. Do Not Track: We honor Do Not Track (DNT) browser signals. When DNT is enabled, we limit analytics data collection to anonymized, aggregate metrics only. e. A full Cookie Policy may be published separately and will be linked here when available.

16. ELECTRONIC COMMUNICATIONS (CAN-SPAM & TCPA)

Sertified Media Group, LLC complies with the CAN-SPAM Act and the Telephone Consumer Protection Act (TCPA) in all electronic communications. a. Email Communications (CAN-SPAM Compliance): • All marketing and promotional emails sent by Sertified include a clear and conspicuous unsubscribe mechanism • Unsubscribe requests are honored within 10 business days • All emails include our physical mailing address: Sertified Media Group, LLC, 1845 Clayton Ave, Pittsburgh, PA 15214 • Subject lines accurately reflect the content of the email • We do not use deceptive headers, misleading subject lines, or false sender information • Users may manage email preferences via the Settings page or by contacting support@sertified.app • Transactional emails (account verification, booking confirmations, payment receipts) are not subject to CAN-SPAM opt-out requirements but will always include our identity and contact information b. SMS/Text Messages (TCPA Compliance): • We only send SMS/text messages to users who have provided prior express consent during our in-app notification opt-in process • Consent is recorded with a timestamp and stored on the user's account • Users may revoke SMS consent at any time via the Settings page by disabling SMS notifications, by texting STOP in reply to any message, or by contacting support@sertified.app • We do not use automated telephone dialing systems (ATDS) to send unsolicited messages • Standard message and data rates may apply; message frequency varies based on account activity • SMS messages may include: job notifications, booking reminders, application status updates, and account security alerts • We do not send SMS marketing messages without explicit opt-in consent c. Consent Records: We maintain records of all communication opt-ins and opt-outs, including the date, time, method, and content of consent for auditing and compliance purposes.

17. AUTOMATED DECISIONS

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects. If this changes, users will be notified and given rights to object or request human review where required.

18. INTERNATIONAL USE

Our Services are currently offered only to users located in the United States. Users outside the U.S. are not authorized to use the Services unless expressly stated. We may expand internationally and will update this Policy with jurisdiction-specific terms accordingly. Upon expansion into the EU, we will designate a Data Protection Representative under GDPR Article 27 and appoint a Data Protection Officer (DPO) as required by law.

19. LINKS TO OTHER SITES

Our Services may link to third-party websites. We are not responsible for their privacy practices and encourage users to review third-party privacy notices.

20. USER RESPONSIBILITIES AND PROFILE VISIBILITY

Users understand that by submitting content, including resumes, photos, reels, or other profile data, this information may be shared with clients, collaborators, or casting directors through the Services. Users assume responsibility for the voluntary disclosure of personal or sensitive data. The Company does not guarantee confidentiality once content is shared or made accessible via the platform.

21. GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of New York, without regard to its conflict of law principles. Any disputes arising out of or relating to this Policy shall be resolved in accordance with the arbitration and venue provisions outlined in our Terms of Use.

22. ACCESSIBILITY (ADA COMPLIANCE)

Sertified Media Group, LLC is committed to ensuring that our Services are accessible to all users, including those with disabilities, in compliance with the Americans with Disabilities Act (ADA) and applicable accessibility standards. a. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards across our web and mobile applications. b. Accessibility features of our platform include: • Semantic HTML structure for screen reader compatibility • Keyboard navigation support for core platform features • Sufficient color contrast ratios for text and interactive elements • Alt text support for user-uploaded images where applicable • Responsive design that adapts to different screen sizes and orientations c. We continuously review and improve the accessibility of our platform. If you encounter any accessibility barriers or have suggestions for improvement, please contact us at support@sertified.app or call 916-793-6029. d. If you require an accommodation or alternative format to access any content or feature on the platform, we will make reasonable efforts to provide assistance in a timely manner. e. We conduct periodic accessibility reviews and may engage third-party auditors to evaluate and improve compliance.

23. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. If we make material changes, we will notify you through the Services or via email. Continued use of the Services constitutes acceptance.

24. CONTACT

For any questions or to exercise your rights, contact us at: support@sertified.app Sertified Media Group, LLC 1845 Clayton Ave Pittsburgh, PA 15214 Phone: 916-793-6029