Privacy Policy

루아 아뜰리에 (Ruah Atelier) ("we") operates heradee (heradee.com, the "Service"). This policy explains what personal information we collect, why, and how we use and protect it.

1. Information we collect

• Account: email, password (stored hashed), and name. If you sign up with Google, the email and name from your Google account.
• Artist profile: profession, country, active regions, languages, bio, profile photos and videos, Gallery posts, social and external links.
• Casting directors: name or company/agency name, business card image (for verification only, never shown publicly), company bio, logo, and website.
• Activity: messages and attachments, comments, likes, follows, casting call applications, and notifications.
• Guest Fan Board posts: display name, password (stored hashed), and optional contact details.
• Payments: payment history and subscription status. Card details are processed by Stripe; we never store them.
• Automatically: a random visitor-ID cookie, profile view counts and time spent, a language cookie, login session cookies, and access logs.

2. How we use it

• To create and secure your account
• To publish artist Spaces and let artists and casting directors discover, message, and apply
• To verify casting director accounts
• To process Premium subscriptions and refunds
• To send notifications and service emails
• To provide profile view statistics, prevent abuse, and improve the Service

3. Retention

When you delete your account, it is kept for 30 days so it can be restored, then permanently deleted. Records we are legally required to keep (such as payment records) are retained for the period the law requires. Messages you sent to other members stay in their conversation history, with the sender shown as “Unknown”.

4. Sharing

We do not sell or share your personal information without your consent. Information you make public in your Space is visible to anyone, and when you message someone or apply to a casting call, the recipient sees the relevant details. We may disclose information when required by law.

5. Service providers and international transfers

• Supabase Inc. — database, file storage, authentication (Canada)
• Cloudflare, Inc. — hosting, image processing, security (United States and global)
• Stripe, Inc. — subscription payments (United States)
• Resend, Inc. — email delivery (United States)
• Google LLC — Google sign-in, if you choose it (United States)

6. Your rights

You can view and edit your information in My Page, delete your account there at any time, and ask us to access, correct, restrict, or erase your data by writing to oz@platformoz.com. The Service is not intended for children under 14.

7. Cookies

We use cookies to keep you signed in, remember your language, and count profile views. We do not use advertising cookies. You can block cookies in your browser, but sign-in may stop working.

8. Security

Passwords are hashed, all traffic uses HTTPS, database access is restricted per row to you and authorized users, and private files are served only through short-lived signed links.

9. Contact

• Operator: 루아 아뜰리에 (Ruah Atelier), Canada
• Korean domestic agent: 주식회사 오즈 (OZ Inc.)
• Privacy officer: 황인성 (Inseoung Hwang), 주식회사 오즈 대표
• Address: 2304-365 Church Street, Toronto, ON M5B 0B5, Canada
• Email: oz@platformoz.com
• Phone (Korea): 070-4554-3228

10. Changes

We will announce changes to this policy in the Service at least 7 days before they take effect (30 days for changes that reduce your rights).