Privacy Policy.

Account and agency details: the username, hashed password, contact name, agency name, country, models managed, and other business details you provide when registering. Passwords are hashed with argon2 before storage; we never store them in plain text and can't recover a lost one for you, only reset it.

Telegram identity: your Telegram user ID and username, linked to your account through Telegram. We use this to authenticate you and to send you messages (see section 2). If you start registering and do not finish, the Telegram ID and username from that step are held only temporarily and are not attached to any account. We never see or store your Telegram password.

Payment details: when you initiate a crypto payment, we generate and store the coin, network, deposit address, and exact amount for that specific payment so we can match it against the deposit. We don't collect card numbers or bank account details; payments are matched against deposits reported by our payment processor.

Usage data: IP address and basic request metadata are logged briefly to prevent abuse (for example, rate-limiting repeated login attempts). If you accept analytics cookies (section 4), we also keep a visit record on our own servers: a random session identifier, the pages you view and how long you stay, your IP address, your approximate location (country and city, worked out on our server from the IP address), your browser, operating system and device type, and the website or campaign tag that sent you here. When you are signed in, that record is linked to your account and agency name.

Google Analytics: if you accept analytics cookies, we also load Google Analytics. It receives technical details about your visit, such as pages viewed, your IP address, device and browser, and a few events: clicking an apply button, submitting an application and generating a contract. Google handles that data under its own privacy policy. It is switched off for our admin team and for anyone who has not accepted analytics cookies.

Contract generator: when a document is generated, we keep a record of the use. It includes the details entered in the form, which can include personal details of the people named in the agreement, and a copy of the document produced, linked to your account if you are signed in. Only our admin team can see these records. If you enter details about another person, you confirm you have the right to.

Support and records: messages tied to your account, such as an admin's note on a rejected application, a warranty issue you raised, or a refund reason, are kept as part of that record.

• To operate your account and verify your identity at sign-in;
• To review agency applications and acquisition requests;
• To generate and match crypto payments against the correct request;
• To send you Telegram messages: account, request and acquisition updates, a digest of newly available models on Tuesdays and Fridays, and Match Alerts for filters you save;
• To prevent fraud and abuse (rate-limiting, blocking repeated bad login attempts);
• To run and improve the contract generator, and to handle support or legal matters about it; and
• To understand which parts of the platform get used and where visitors come from, which happens only if you accept analytics cookies.

We don't sell personal information, and we don't share it with advertisers. It's shared only where the Marketplace's operation requires it: our crypto payment processor (to generate deposit addresses and confirm payments), Telegram (to deliver the messages you'd expect from using Telegram), Google (for Google Analytics, only if you accept analytics cookies), and our hosting infrastructure. We may also disclose information if legally required to.

The Marketplace uses two kinds of cookies:

• Essential: a session cookie that keeps you signed in, a small cookie that remembers your cookie choice, and, while you register, two short-lived cookies (15 minutes) that carry your Telegram verification between steps. The Marketplace can't function without them, so they're set automatically and aren't subject to the choice below.
• Analytics: a visit-session cookie that ties your page views together in our own visit record (section 1), and the cookies Google Analytics sets. They are only used if you opt in. Nothing is set or loaded unless you accept, and rejecting (or not deciding) simply means they're never written.

You can change your choice at any time: open cookie preferences.

Account and transaction records are kept for as long as your account is active, plus a reasonable period afterward for accounting and legal purposes. The visit-session cookie, when set, expires after 30 days. Visit records and contract generator records are kept for as long as they are useful for running and improving the platform, and we delete them on request where the law requires it.

You can review or correct your account details from your profile, turn the new models digest off there, manage your Match Alerts, and change your cookie choice at any time. To ask what we hold about you, or to have your account and associated personal data deleted, contact @realmfsaiyan on Telegram. We may need to retain records of completed transactions for legal and accounting purposes even after a deletion request.

The Marketplace is a business tool for talent agencies and is not directed at, or intended for use by, anyone under 18.

We may update this Policy from time to time; material changes will be reflected by an updated date at the top of this page.

Questions about this Policy or your data? Reach us at @realmfsaiyan on Telegram.