Master Services Agreement

1. Provision of services and licence

1.1 Platform access. Subject to payment of applicable Fees, Service Provider grants Customer a non-exclusive, non-transferable, revocable licence to access and use opencasting.app during the agreed Campaign Term to create open casting landing pages, collect candidate submissions, review audition media, curate shortlists, and export project data.

1.2 Technical conduit status. Customer expressly acknowledges that Service Provider acts purely as an automated technical conduit and intermediary infrastructure provider for hosting and managing casting submissions.

2. Content ownership and intellectual property

2.1 Customer and talent ownership. Service Provider asserts no intellectual property rights, copyright, or ownership in any candidate submissions, audition tapes, showreels, self-tapes, headshots, forms, or metadata uploaded through the Service (“User Content”). The submitting talent or guardian owns the recordings they make and submit, such as audition tapes and self-tapes. The intellectual property in the material performed in them, including scripts, scenes, sides and characters, remains with Customer or its licensors.

2.2 Strictly limited processing licence. Customer grants Service Provider a strictly limited, non-exclusive, royalty-free, revocable licence solely to host, transmit, store, and display User Content for the purpose of delivering platform functionality to Customer during the active project campaign.

3. Third-party and public upload liability

3.1 Intermediary safe harbour. Service Provider operates as an automated intermediary under applicable statutory intermediary liability protections, including the UK Electronic Commerce Regulations and the Online Safety Act framework. Service Provider does not pre-screen, monitor, or edit public submissions.

3.2 Disclaimer of uploaded content. Service Provider accepts no liability or responsibility whatsoever for the nature, legality, accuracy, or content of any materials submitted by members of the public, candidates, or third parties.

3.3 Prohibited and explicit content. In the event that explicit, illicit, infringing, or illegal material is uploaded through a public campaign form, Service Provider shall not be held liable. Service Provider reserves the right to immediately take down, block, or delete any content upon notice or detection of illegality.

3.4 Customer triage and indemnity. Customer is solely responsible for triaging, reviewing, moderating, and vetting all inbound submissions. Customer agrees to defend, indemnify, and hold harmless Service Provider, its directors, and affiliates from and against any third-party claims, damages, liabilities, or regulatory fines arising out of User Content uploaded to Customer’s casting campaigns.

4. Fees, access and project duration

4.1 Authorised access. Access is restricted to Customer’s designated casting directors and production personnel. Credentials must not be shared outside authorised staff.

4.2 Plans and fees. Fees are charged per casting call, paid before the casting call opens, and sized by the applicants the casting call expects. Every plan includes any number of roles in the casting call. Small: £250, including 300 applicants. Standard: £750, including 1,500 applicants. Large: £1,500, including 4,000 applicants. Custom: under a Custom Agreement, for a casting call expecting more than 4,000 applicants or for several casting calls, with no cap on applicants in the product. All fees exclude VAT.

4.3 Further applicants and extensions. An applicant beyond the number a plan includes is charged at £1, invoiced once when the casting call closes. Applicants may instead be bought in advance, in packs of 100 for £90, 300 for £240, 500 for £350 or 1,000 for £600, which are used before any applicant is charged singly. A 30-day extension to a casting call is £250, charged when it is added. Customer is notified when a casting call reaches 80% and 100% of the applicants its plan includes. A casting call is never closed, paused or hidden because it has reached the applicants its plan includes, or because an invoice is outstanding.

5. Data lifecycle and automated purge

5.1 Post-production deletion. In strict compliance with UK GDPR data minimisation obligations, Customer acknowledges that all applicant media and submission form records will be permanently and irreversibly deleted at the end of the retention period following the designated Production End Date. That period is thirty (30) calendar days unless a different period is recorded on Customer’s account, and the period in force when a casting call is opened governs that casting call for its whole life.

5.2 Customer export responsibility. Customer is solely responsible for executing bulk data and media exports prior to the expiry of the retention period. Service Provider accepts no liability for un-exported data purged following the expiry of that period.

5.3 Automated alerts. The platform will issue automated reminder notifications to Customer’s designated account administrator at fourteen (14) days and forty-eight (48) hours prior to final media purge.

6. Warranties and limitation of liability

6.1 Service standards. Service Provider provides the platform using commercially reasonable standards, hosted on secure UK/EU cloud infrastructure.

6.2 Limitation of liability. Neither party excludes liability for death or personal injury caused by negligence, fraud, or gross misconduct. To the maximum extent permitted by law, Service Provider’s total aggregate liability arising under this Agreement shall be strictly limited to the total fees paid by Customer for the specific project campaign giving rise to the claim.

Data Processing Schedule (UK GDPR Article 28)

Roles. Customer is the Data Controller, determining the purpose and legal basis of casting candidate data. Service Provider is the Data Processor, acting solely on Customer’s documented instructions via platform operations.

Scope. Temporary transmission, hosting, triage, shortlisting, and secure export of talent audition records for television, film, commercial, and stage productions. Categories of data: names, contact details, location, whether the applicant confirmed they are 18 or over, guardian details, photographic headshots, video audition tapes, and biographical notes. Neither a date of birth nor an age is collected. Data subjects: casting applicants, actors, performers, and children submitted by parents or legal guardians.

Duration. The active casting window plus the retention period recorded on Customer’s account, being thirty (30) calendar days following the production’s conclusion unless otherwise agreed in writing. Data is permanently erased after that.

Processor obligations. Process only on documented instructions; bind authorised personnel to confidentiality; implement industry-standard technical and organisational measures including encryption at rest and TLS in transit, strict access control, and direct-to-storage presigned uploads; provide tools to assist with data subject rights under UK GDPR; notify Customer of a confirmed personal data breach without undue delay and within 48 hours; and delete all candidate personal data on expiry of the grace period.

Sub-processors. Customer provides general written authorisation for essential infrastructure sub-processors: Vercel Inc. (application hosting, Vercel Blob object storage and cookieless visit counting), Neon Inc. (PostgreSQL), Stripe Payments Europe Ltd (card payment and invoicing of the Customer's fees; it holds the Customer's billing details and never applicant data), Resend (transactional email: submission receipts, status updates and sign-in links), and, where a user chooses to sign in with Google, Google LLC (authentication only; no applicant data). Primary storage and server nodes reside in UK/EU data centres. Service Provider will give Customer notice of any intended change to this list, and Customer may object.

Controller obligations. Customer warrants that it maintains a lawful basis for processing, ensures public landing pages carry the parental consent mechanisms required under the ICO Children’s Code, and accurately maintains each project’s Production End Date in the dashboard, which governs the automated retention and deletion lifecycle.