Privacy Policy

Who we are

{{AGENCY_NAME}} (operating under BMM Productions Pty Ltd, ABN 26 098 016 972) is a talent management agency based in Sydney, Australia. This privacy policy applies to our media kit platform at thekit-au.web.app (the "Platform").

What the Platform does

The Platform allows {{AGENCY_NAME}} staff to create and manage digital media kits for represented talent. Media kits include profile information, social media statistics, and curated photos and videos for use in casting, brand partnerships, and media enquiries.

Information we collect

The Platform collects and processes the following categories of information:

• Talent profile information — names, social media handles, biographical details, and brand collaboration history, entered by {{AGENCY_NAME}} staff.
• Social media statistics — audience reach, engagement rates, demographic breakdowns, and audience geography, synced via InsightIQ (formerly Phyllo) with the talent's explicit consent and authorisation.
• Photos and videos — uploaded by {{AGENCY_NAME}} staff from their local device, Google Drive, or Microsoft OneDrive for inclusion in media kits.
• Authentication data — email addresses used by {{AGENCY_NAME}} staff to log in to the Platform.

How we use Google Drive data

When a user selects a file from Google Drive via the Platform's file picker, the Platform accesses the selected file using the Google Drive API with drive.readonly permission. This access is used solely to download the selected file for upload to the talent's media kit. Specifically:

• We only access files that the user explicitly selects through the Google Picker interface.
• We do not browse, index, scan, or access any other files in the user's Google Drive.
• The selected file is uploaded to Firebase Storage (Google Cloud) for use in the media kit.
• We do not sell, share, or transfer Google Drive data to any third party.
• We do not use Google Drive data for advertising, analytics, or any purpose other than media kit creation.

How we use Microsoft OneDrive data

When a user selects a file from OneDrive via the Platform's file picker, the Platform downloads only the selected file for upload to the talent's media kit. The same restrictions apply — we do not browse, index, or access any files beyond the user's explicit selection.

How we use social media data

Social media statistics are synced via InsightIQ only after the talent explicitly authorises the connection through a secure authentication flow. This data is used solely to populate the talent's media kit with accurate, up-to-date audience and engagement metrics. We do not sell or share this data with third parties.

Data storage and security

All data is stored securely using Google Firebase (Firestore for structured data, Firebase Storage for media files). Access to the Platform is restricted to authenticated {{AGENCY_NAME}} staff. Data is transmitted over HTTPS and stored in Google Cloud infrastructure with industry-standard security protections.

Data retention

Talent profile data and media files are retained for as long as the talent is represented by {{AGENCY_NAME}} or as reasonably required for business purposes. Talent or their representatives may request deletion of their data at any time by contacting us.

Third-party services

The Platform uses the following third-party services:

• Google Firebase (authentication, database, file storage, hosting)
• Google Drive API (file selection and download)
• Microsoft Graph API (OneDrive file selection and download)
• InsightIQ / Phyllo (social media statistics syncing)

Each of these services operates under its own privacy policy and data handling practices.

Your rights

If you are a talent represented by {{AGENCY_NAME}}, or a user of the Platform, you may:

• Request access to the personal information we hold about you.
• Request correction or deletion of your personal information.
• Revoke social media connection authorisations at any time through the relevant platform's settings.
• Revoke Google Drive or OneDrive access at any time through your Google or Microsoft account security settings.

Contact

For privacy-related enquiries, please contact:

{{AGENCY_NAME}}
Email: info@{{AGENCY_DOMAIN}}
Website: {{AGENCY_DOMAIN}}