Privacy
Your data, in plain English.
Last updated: August 14, 2026
What we read
Layne reads emails from a short list of casting-platform senders and your talent agencies. That’s it. Here’s the full list:
- ✓Casting Networks — Audition alerts, submissions, callbacks
- ✓Actors Access — Breakdowns and submission confirmations
- ✓Casting Frontier — Audition notifications
- ✓Casting.com — Submission alerts
- ✓Your agency — Forwarded breakdowns and avail requests from your reps
From those emails we extract the project name, casting director, role, rate, deadline, and body text. The original email stays in your inbox — we never move, delete, or modify it.
What we never see
Layne has no access to anything outside the casting senders listed above. Google’s API lets us request only what we need, and we request the minimum.
- ✕Personal emails — family, friends, newsletters, shopping
- ✕Contacts or address book
- ✕Calendar events
- ✕Passwords, payment info, or financial data
- ✕Drafts, sent mail, or trash
- ✕Google Drive, Photos, or any other Google service
How it works
When a casting email lands in your inbox, Google notifies Layne in real time. Here’s what happens next:
your agency
rate, deadline
briefings
Similar to how Calendly reads only your calendar availability — not your event details, contacts, or files — Layne reads only casting notifications, not your personal mail.
Your controls
How long we keep things
Your audition record is kept for as long as your account is open. That includes the project, role, rate, audition type, deadline, outcome and platform for each audition — the history that makes the app useful to you over time. You can delete any individual audition at any time, and deleting your account removes all of it.
The original emails behind those records are kept for up to 12 months. Layne reads your casting emails to build your audition history. We keep the original message for up to 12 months so we can re-read it if our parsing improves or something looks wrong, and then the message text is deleted while your audition record stays. Where we have identified an email as junk or not casting-related, and it is not attached to any audition, we delete the message text sooner — after 90 days.
Some emails are kept for longer, and in these cases there is no fixed time limit. We keep the original message for as long as any of the following is true: it is still shown in one of your audition records; it relates to something you have not finished setting up, such as a call sheet we could not match to an audition; the original has been deleted from your mailbox and our copy is the only remaining way to recover your record; we could not establish when the message was received, so we cannot tell how old it is; or our system has not reached a conclusion about what the message is, in which case we keep it rather than delete something we have not understood. Some messages kept for these reasons are several years old. If you delete the audition it belongs to, the message stops being kept for that reason.
Records about other people. Casting emails contain details about people other than you — casting directors, agents, and others. Where we have extracted those details into your audition record (for example a casting director’s name or contact email), we keep them for as long as we keep the record itself, which may be longer than we keep the original message. Some of these details are also held in a shared directory of casting contacts that is not tied to any one account, and that directory is not removed when an individual account is deleted.
When a message is deleted under these rules we keep a short-lived internal copy for up to 30 days so a mistake can be undone, and then that copy is deleted too.
Security
Everything in transit is encrypted with TLS. Your data at rest lives in a Postgres database with row-level security — you can only see your own rows, even if someone got into the database directly. Sensitive credentials (Gmail tokens, casting-platform passwords) are encrypted with AES-256-GCM before storage. We don’t store your Google password — only an OAuth token that you can revoke at any time.
What we don’t do
- —We never sell your data.
- —We never use it for advertising.
- —We never train AI models on your emails or audition history.
- —The one AI company we send your data to — Anthropic — is on commercial terms that don’t allow training on it. Anthropic deletes their own copy from their servers within 30 days of receiving it, though content their automated safety systems flag can be kept longer. (That is Anthropic’s clock, and it is separate from the deletion request you can make to us — see “Your controls” above.)
- —We share it only with the services that run Layne — including Supabase, Vercel, Railway, Anthropic, and Sentry, which automatically receives an error report when something in Layne breaks.
Our use of Google API data adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Questions?
Anything at all — privacy questions, deletion requests, or feedback: ccmacmini@gmail.com.