Privacy Policy

This split decides what we can and cannot promise, so it comes first.

Information about our customers. When a haunted attraction signs up, contacts us, or uses CastCrypt, we act as the business deciding how that information is used. That includes the account owner's name, email address, billing details and the messages they send us.

Information about cast and crew. When a venue adds its staff to CastCrypt, that information belongs to the venue. We hold and process it on their behalf, under their instructions, so that their workspace works. We do not decide what a venue collects about its own people, we do not use it for our own purposes, and we never sell it.

If you are a cast member and want your information corrected or removed, contact the attraction you work for first. They control that record. We will help them act on any request they make of us.

From visitors to this website

If you use the contact form, we collect the name, email address, venue name and message you type in, along with the IP address the submission came from, which is used to rate-limit automated abuse.

From customers

Account and contact details, workspace configuration, billing records, and support correspondence.

From or about cast and crew, at the direction of the venue

Depending on how a venue configures its workspace, this can include: name and preferred name, pronouns, email address, phone number, date of birth, emergency contact details, costume and fitting measurements, skills and training records, availability, shift assignments, attendance and hours worked, performance notes written by managers, photographs, and uploaded documents such as signed waivers or certifications.

Some of this is sensitive. It is collected because rostering a live show requires it. A costume has to fit, a minor cannot be scheduled into an adult role, and somebody has to be reachable if a performer is injured during a run.

From your browser

Standard server logs (IP address, browser type, pages requested, timestamps) and a session cookie that keeps you signed in. We do not use advertising cookies or third-party analytics trackers.

• To operate each customer's workspace and the features they have enabled
• To authenticate users and keep accounts secure
• To send transactional messages: password resets, invitations, schedule notices and shift reminders
• To respond to inquiries sent through the contact form
• To bill customers and keep financial records
• To diagnose faults, prevent abuse, and improve reliability
• To comply with legal obligations

We do not sell personal information. We do not share it with third parties for their own marketing. We do not use cast member data to train machine-learning models, and we do not use one customer's data to benefit another.

Where a venue enables SMS, phone numbers are collected so that CastCrypt can send that venue's staff messages about their own shifts: schedule notices, call-time reminders, and last-minute cover requests.

Phone numbers collected for SMS are not sold, rented, or shared with any third party for marketing or promotional purposes. Mobile opt-in data and consent records are never shared with third parties for marketing.

Staff opt in through their own profile, and the date and time of that consent is recorded. Messaging is limited to staffing and scheduling; it is not used for advertising or promotion. Message frequency varies with the season. Message and data rates may apply.

Reply STOP to any message to opt out, or HELP for assistance. Opting out is honored immediately and does not affect anyone's employment or their ability to use CastCrypt by email and in the app.

We use a small number of service providers to run CastCrypt. Each is bound by contract to protect the information and to use it only to provide their service to us:

• Vercel for application hosting
• Supabase for the database and encrypted file storage
• Resend and Amazon Web Services for outbound email and, where enabled, SMS delivery

We may also disclose information where the law requires it, to enforce our agreements, or to protect the rights and safety of people using the service. If CastCrypt is ever sold or merged, information may transfer as part of that transaction; we would give notice before it changed hands.

Each customer's workspace is isolated at the database layer, so one venue's queries cannot reach another venue's records. Uploaded photographs and documents are held in private storage and are never publicly addressable. Viewing one requires an authorized, short-lived link that the server issues per request and that expires on its own.

Passwords are hashed, never stored in readable form. Traffic is encrypted in transit. Access to sensitive records inside a workspace is governed by that venue's own permission settings, and significant actions are written to an audit log.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will notify the affected customer without undue delay.

Workspace data is retained for as long as the customer's account is active. When a workspace is deleted, its records and its stored files are removed, including uploaded documents and photographs. Contact form submissions are kept as business correspondence. Backups and legally required financial records persist for a limited period after deletion.

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, to object to certain processing, or to withdraw consent. You will not be treated differently for exercising any of these rights.

Customers can exercise these directly, or by writing to us. Cast members should contact the attraction they work for, which controls their record; we will support that venue in responding.

Seasonal attractions often employ people under 18, and CastCrypt supports age-based scheduling rules for exactly that reason. Where a venue records information about a minor, it is responsible for obtaining any consent the law requires. CastCrypt is not directed at children, and we do not knowingly collect information from anyone directly except through a venue that employs them.

CastCrypt is operated from the United States and information is stored on servers in the United States. If you use the service from elsewhere, you understand that your information will be transferred to and processed there.

If this policy changes materially, we will update the date at the top of this page and notify customers of significant changes. Continued use after a change means the updated policy applies.

Questions about this policy, or about information we hold, can go to boo@castcrypt.com.