Privacy Policy

Last Updated: May 12, 2026

We may change this privacy notice from time to time. When we make material changes, we will notify you by email (sent to the email address in your account) and through a prominent notice within the app at least 30 days before the changes take effect. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

Please carefully read the following Privacy Policy of Directory App LLC (DBA: Director-y) and all of its subsidiaries, successors in interest, and assigns (collectively, "Director-y", "us", "we", or "our") before using Director-y and all related websites, products, services and related mobile applications (collectively, the "Services" or "Platform").

This Privacy Policy applies to information collected through:

  • The Director-y mobile applications for iOS and Android

  • The Director-y website at www.directory-app.com

  • Email, text, and other electronic communications between you and Director-y

  • User interactions with our advertising and applications on third-party websites and services

By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to this Privacy Policy, you must not access or use the Services.

Your privacy is very important to us. Our Privacy Policy spells out Director-y's commitment to respecting the privacy of the members and visitors to our Site. We reserve the right to change this policy at any time, which we'll do through online posting or an email message sent directly to you. We are very careful with what we do with your information. This Privacy Policy governs your access to and use of Director-y, including any content, functionality and services offered on or through this Website whether as a guest or a registered user.

This Privacy Policy also describes how Director-y collects and uses the personal information you provide to us through our Platform. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.

Information We Collect

We collect personal information from you to provide an efficient, meaningful and customized experience on the Platform. The categories of information we collect depend on how you interact with us and the Services you use.

Information You Provide to Us

We collect the following personal information that you voluntarily provide when you register for an account, use our Services, or communicate with us:

Contact Information such as name, display name, email address, and phone number (if provided).

Account Information such as username, password (stored in hashed form), profile photo (optional), bio (optional), general location (city, state, or region — optional), and professional role(s) (optional).

Billing Information such as transaction history and billing details. We do not directly store full payment card information. Payment data is processed and stored securely by our third-party payment processor (Stripe), and we receive only limited information necessary to complete transactions and maintain records.

User-Generated Content such as posts (text, images, videos), comments, direct messages, event listings, crew calls, casting calls, media uploads, and other profile content you choose to share.

Communications such as messages sent to us, support requests, and survey responses.

Unique Identifiers such as internal user IDs and authentication tokens.

Information We Collect Automatically

When you access or use our Services, we automatically collect certain technical information about your device and usage patterns, including:

  • IP address

  • Time and date of visit

  • Browser type

  • Referring/exit pages

  • Operating system

  • Device type, model, manufacturer, and OS version

  • Application version and SDK version

  • Device identifiers

  • Session start/stop time

  • Locale and time zone

  • Network status (WiFi, cellular, etc.)

We collect this technical information automatically when you use our Services through:

  • Log files and server logs

  • Analytics tools (including Google Analytics, Firebase, or similar services)

  • Cookies and similar tracking technologies (on our website)

  • Mobile SDKs and device identifiers (in our mobile applications)

We may log this information for:

  • System administration and platform improvement

  • Performance monitoring and troubleshooting

  • Security and fraud prevention

  • Analytics and usage insights

  • Marketing attribution and measurement

How We Use Your Information

We use the information we collect for the following purposes:

  • Create and manage your account

  • Provide and operate the Director-y platform

  • Facilitate networking, events, crew calls, and content sharing

  • Process payments and subscriptions

  • Send transactional communications (account notices, confirmations)

  • Send newsletters, updates, and promotional communications (you may opt out)

  • Respond to inquiries and provide customer support

  • Improve our products, features, and marketing efforts

  • Conduct internal research and analytics

  • Display content relevant to your interests and activity

  • Personalize your experience on the Platform

  • Enforce our Terms of Service and other policies

  • Comply with legal obligations

  • Protect against fraud, abuse, and security threats

Legal Basis for Processing (for EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, our legal basis for collecting and using your personal information depends on the specific information and the context in which we collect it. We process your personal information based on:

Performance of a contract: To provide the Services you've requested.

Legitimate interests: To improve our Services, prevent fraud, and ensure security (where our interests are not overridden by your data protection rights).

Consent: For marketing communications and certain optional features (you may withdraw consent at any time by contacting us at [privacy email]).

Legal obligations: To comply with applicable laws and regulations.

Data Security

We employ commercially reasonable administrative, technical, and physical security measures to protect the information you provide to us and the information we collect automatically. These measures include:

  • Encrypted connections (HTTPS/SSL) for data transmission

  • Secure authentication mechanisms

  • Access controls and role-based permissions

  • Regular security assessments

  • Use of reputable third-party infrastructure and service providers with appropriate security standards

  • Secure password storage using industry-standard hashing

Only authorized personnel with a legitimate business need may access user information. No data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we employ commercially reasonable security measures designed to protect your personal information, we cannot guarantee absolute security. You acknowledge that:

  • There are security and privacy limitations of the Internet which are beyond our control;

  • The security, integrity and privacy of any and all information and data exchanged between you and us through the Platform cannot be guaranteed to be completely secure; and

  • Any such information and data may be viewed or tampered with in transit by a third party despite our best efforts to implement appropriate security measures.

Email is not recognized as a secure medium of communication. For this reason, we request that you do not send private information to us by email. However, doing so is allowed, but at your own risk. Some of the information you may enter on our website or within our mobile applications may be transmitted securely via Secure Sockets Layer (SSL) encryption technology.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

Account Information: We retain your account information for as long as your account is active or as needed to provide you Services.

User-Generated Content: Posts, comments, and other content you create remain on the Platform until you delete them or close your account.

Transaction Records: Billing and payment information is retained for accounting, tax, and legal compliance purposes, typically for 7 years.

Technical Data: Log files and analytics data are typically retained for 12–24 months.

Marketing Communications: We retain records of your marketing preferences until you opt out or close your account.

When you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes (such as fraud prevention, dispute resolution, or compliance with legal obligations).

You may request deletion of your account and associated data at any time by contacting us at privacy@directory-app.com.

Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users in accordance with applicable law. For California residents, we will provide notice without unreasonable delay and consistent with the legitimate needs of law enforcement or any measures necessary to determine the scope of the breach and restore the integrity of our systems.

Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We share information with third-party service providers who perform services on our behalf, including:

  • Cloud hosting providers (e.g., AWS, Google Cloud)

  • Payment processors (Stripe)

  • Analytics providers (Google Analytics, Firebase)

  • Customer support tools

  • Email service providers

These service providers are contractually obligated to use your information only to provide services to us and are prohibited from using or disclosing your information for any other purpose.

Business Transfers: If Director-y is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

Protection of Rights: We may disclose information when we believe it is necessary to:

  • Comply with applicable law or respond to legal process

  • Protect the rights, property, or safety of Director-y, our users, or others

  • Enforce our Terms of Service

  • Prevent fraud or security threats

With Your Consent: We may share your information with third parties when you give us explicit consent to do so.

Public Information: Information you choose to make public on your profile (such as your display name, profile photo, bio, location, and public posts) will be visible to other users of the Platform.

We may share personal information with certain third-party service providers that perform services on our behalf. Some of these service providers may be located outside the United States, including in countries that may not provide the same level of data protection as the United States. When we transfer personal information internationally, we implement appropriate safeguards, such as standard contractual clauses or other legally recognized transfer mechanisms.

The services provided by those third parties may include:

  • Operating and hosting the website and mobile applications

  • Cloud storage and infrastructure services

  • Analytics and performance monitoring

  • Payment authorization and processing

  • Email delivery and marketing communications

  • Customer support tools

  • Advertising and promotional distribution

  • Push notification services

Those third parties are not authorized to use or disclose personal information you provide to us on or through the Platform for any purpose other than to perform the services designated by us. We and our third party service providers may also disclose your personal information:

  • As required or permitted by law such as to comply with a subpoena, in response to a search warrant or other legally valid inquiry, order or similar legal process;

  • To investigate both in the case of a breach of an agreement or contravention of law;

  • When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, establish, exercise or defend a legal claim, investigate fraud or respond to a government request;

  • To any other third party with your prior consent to do so.

If Director-y engages in a joint promotion with an affiliate and/or partner, we may share your contact information with our affiliate and/or partner to be used in relation to the promotion, provided we obtain your prior consent where required by applicable law. We may share non-personal information (such as the number of daily visitors to a particular web page or the size of an order placed on a certain date) with third parties such as advertising partners. This information does not directly identify you or any user by name.

Third Party Websites

Our Site may contain links to third party websites. When you click on a link to any other website or location, you will leave our Site and go to another site, and another entity may collect personal information from you. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites or content, or to any collection of your personal information after you click on links to such outside websites. We encourage you to read the privacy policies of every website you visit. The links to third party websites or locations are for your convenience and do not signify our endorsement of such third parties or their products, content or websites.

Cookies and Other Tracking Technologies

When you use our site we will store cookies on your computer in order to facilitate and customize your use of our site. Cookies are small text files of information stored by the Internet browser on your computer or device. For example, we may use cookies to collect browsing data to keep track of your preferences and profile information and to collect general usage and volume statistical information. Our cookies do not collect personal or confidential information and are not spyware. Some of our cookies are served by us, and some are served by third parties who are delivering services on our behalf. Director-y requires these providers to process personal information in accordance with our instructions and applicable privacy laws.

You may set your Internet web browser to refuse cookies or to remove cookies from your hard drive. You can also learn more about cookies by visiting www.allaboutcookies.org which includes additional useful information on cookies and how to block them using different browsers. We will also provide you with a clear and conspicuous method to manage your cookie preferences through our Platform. By blocking or deleting cookies used on our Platform, you may not be able to take full advantage of certain features of our services.

The Company reserves the right to use technological equivalents of cookies, including social media pixels. These pixels allow social media sites to track visitors to outside websites so as to tailor advertising messages users see while visiting that social media website. The Company reserves the right to use these pixels in compliance with the policies of the various social media sites.

Use of Social Plugins

Director-y's Platform may use social media plugins ("Plugins") from social networks such as Facebook, Instagram, LinkedIn, and Twitter ("Social Networks"). The Plugins are identified by the respective social media logo or the respective suffix (the "Button").

If you visit a page on Director-y that contains Plugins, your browser will establish a direct connection to the Social Network server and load the Button from there. At that time, the Social Network will know that the respective page on Director-y has been visited from your IP address. If you click on a Button, you establish a direct connection to the respective Social Network.

By clicking the applicable Button, you accept and consent to the transmission of your data to the Social Network, which can also associate your visit to Director-y with your social media account. If you do not wish your data to be transmitted to the applicable Social Network via Director-y, ensure that you are not logged into the Social Network before visiting Director-y, and do not click on any Plugins while on Director-y.

For information about the scope and purpose of data collection by these social media companies, and your rights and the settings you can configure to protect your privacy, please refer to their privacy policies.

Children Under the Age of 16

This Platform is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Platform. Our policy is that we do not knowingly collect, use or disclose personal information from children under 13. If you are under 13, do not use or provide any information on this Platform or through any of its features, register on the Platform, make any purchases through the Platform, use any of the interactive or public comment features of this Platform, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use.

If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information as required by the Children's Online Privacy Protection Act (COPPA). If you believe we might have any information from or about a child under 13, please contact us immediately at hello@directory-app.com.

Director-y does not knowingly collect or use any personal information from online visitors under the age of 13. Director-y does not knowingly allow visitors under the age of 13 to participate in any promotions or contests made available on the Platform from time to time.

For users between the ages of 13 and 16 who are California residents, we will not sell their personal information without affirmative authorization as required by the CCPA.

Email Policies

We are committed to keeping your email address confidential. We do not sell, rent, or lease our subscription lists to third parties, and will not disclose your email address to any third parties except as described in the section titled "Information Sharing and Disclosure."

We will maintain the information you send via email in accordance with applicable federal and state law, including California privacy laws. In compliance with the CAN-SPAM Act, all e-mails sent from our organization will clearly state who the e-mail is from and provide clear information on how to contact the sender.

In addition, all e-mail messages will also contain concise information on how to remove yourself from our mailing list so that you receive no further e-mail communication from us. Our emails provide users the opportunity to opt-out of receiving communications from us and our partners by reading the unsubscribe instructions located at the bottom of any e-mail they receive from us at any time.

Users who no longer wish to receive our newsletter or promotional materials may opt-out of receiving these communications by clicking on the unsubscribe link in the e-mail.

Notification of Privacy Statement Changes

We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes, we will notify you by email (sent to the email address specified in your account) or by means of a notice on this Site prior to the change becoming effective. We encourage you to periodically review this policy for the latest information on our privacy practices.

Non-United States Visitors

If you are a non-U.S. user of the Site, by visiting the Site and providing us with data, you acknowledge and agree that your personal information may be processed for the purposes identified in the Privacy Policy. In addition, your personal information may be processed in the country in which it was collected and in other countries, including the United States where laws regarding processing of personal information may be less stringent than the laws in your country and where your personal information may be accessed by the courts, law enforcement and national security authorities as required under the laws of those jurisdictions. By providing your data, you consent to such transfer.

GDPR

If you are within the European Union, you are entitled to certain information and have certain rights under the General Data Protection Regulation. Those rights include:

  • We will retain any information you choose to provide to us until the earlier of: (a) you asking us to delete the information, (b) our decision to cease using our existing data providers, or (c) the Company decides that the value in retaining the data is outweighed by the costs of retaining it.

  • You have the right to request access to your data that the Company stores and the rights to either rectify or erase your personal data.

  • You have the right to seek restrictions on the processing of your data.You have the right to object to the processing of your data and the right to the portability of your data.

  • To the extent that you provided consent to the Company's processing of your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of consent.

  • You have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the General Data Protection Regulation.

We require only the information that is reasonably required to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us. For further information on each of these rights (including the circumstances in which they may apply), see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation. We hope that we can resolve any query or concern you raise about our use of your information. The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.

CCPA

You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to exercise free of charge:

Disclosure of Personal Information We Collect About You

You have the right to know:

  • The categories of personal information we have collected about you;

  • The categories of sources from which the personal information is collected;

  • Our business or commercial purpose for collecting or selling personal information;

  • The categories of third parties with whom we share personal information, if any; and the specific pieces of personal information we have collected about you.

Please note that we are not required to:

  • Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;

  • Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information;

  • Provide the personal information to you more than twice in a 12-month period.

Personal Information Sold or Used for a Business Purpose

In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:

  • The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and

  • The categories of personal information that we disclosed about you for a business purpose.

You have the right under the CCPA and certain other privacy and data protection laws, as applicable, to opt out of the sale or disclosure of your personal information. If you exercise your right to opt out, we will refrain from selling your personal information, unless you subsequently provide express authorization for the sale of your personal information.

To opt out of the sale or disclosure of your personal information, visit our homepage and click on the Do Not Sell My Personal Information link here: www.directory-app.com.

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

  • Delete your personal information from our records; and

  • Direct any service providers to delete your personal information from their records.

Please note that we may not delete your personal information if it is necessary to:

  • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;

  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity;

  • Debug to identify and repair errors that impair existing intended functionality;

  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;

  • Comply with the California Electronic Communications Privacy Act;

  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;

  • Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;

  • Comply with an existing legal obligation; or

  • Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Protection Against Discrimination

You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:

Deny goods or services to you;

  • Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;

  • Provide a different level or quality of goods or services to you; or

  • Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Please note that we may charge a different price or rate or provide a different level or quality of services to you if that difference is reasonably related to the value provided to our business by your personal information.

Exercising Your Privacy Rights & Contact Information

If you would like to exercise any of your rights as described in this Privacy Policy, please contact us at:

Director-y

3751 Motor Ave. #341007

Los Angeles, CA 90034

hello@directory-app.com

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person's behalf. Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

California "Shine the Light" Privacy Rights

California's "Shine the Light" law permits those Director-y customers who are residents of California to annually request a list of their Personal Information (if any) that Director-y disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties. At this time, Director-y currently does not share any Personal Information with third parties for direct marketing purposes.