Privacy policy
Last updated 14 November 2026
This policy covers dugouttalent.com and the DugOut app at app.dugouttalent.com. It explains what we collect, why, who helps us process it, and what you can do about it. It also covers the public information DugOut gathers about filmmakers and creators. If that’s you, section 4 is for you.
1.Who we are
DugOut (“DugOut”, “we”, “us”) runs a talent-discovery tool for studios, production companies, managers, agencies, streamers and brands. You can reach us about anything in this policy at contact@dugout.com.
2.This website
dugouttalent.com uses no cookies, analytics or advertising trackers and has no forms. Our hosting provider keeps standard server logs (IP address, browser, pages requested) for security and reliability. If you email us, we use your message and address only to reply and to set up access.
3.What we collect from people who use the app
- Account details. When you sign in with Google we receive your name, email address, profile photo and a Google account ID. We never see your Google password.
- Team details. The organisation you belong to, your role, and invitations you send (which include the invitee’s email address).
- What you put in. Projects and briefs, boards, shortlists, notes, watchlists, match decisions and settings such as whether you get the email digest.
- Technical data. Sign-in events, error logs and basic request logs that our providers record to keep the service secure and working.
We use this to run DugOut for you and your team: signing you in, showing your organisation’s work, ranking matches for your projects, and sending the digest you opted into. We also use shortlist, pass and attach decisions, in aggregate, to improve our ranking. We don’t sell personal information, and we don’t use it for advertising.
4.Information about creators
DugOut builds profiles of filmmakers and creators from information they have published publicly, so our customers can discover and evaluate their work. This includes:
- Channel and account details, video titles, descriptions, thumbnails, view, like and comment counts, and upload history, from the YouTube Data API and the Vimeo API.
- Film and series credits from The Movie Database (TMDB).
- Public mentions in trade press and public forums, such as festival selections, deals and representation news.
- Scores, summaries and match reasons that we produce from that public material, partly with Google’s Gemini AI models.
We do this because we, and the companies looking for new talent, have a legitimate interest in finding and assessing published creative work. We don’t collect private messages, contact details that aren’t public, or anything behind a login. Profiles are visible only to signed-in DugOut customers, not the public. Scores are opinions about published work, not statements of fact about a person.
If you are a creator and want to see what we hold about you, correct it, or have your profile removed, email contact@dugout.com. We’ll respond within 30 days, and a removed profile stays out of future discovery runs.
5.YouTube API Services
DugOut uses YouTube API Services to read public YouTube data. By using DugOut you also agree to be bound by the YouTube Terms of Service, and Google’s handling of that data is covered by the Google Privacy Policy. DugOut doesn’t ask for access to your YouTube account. If you’ve granted any app access to your Google account, you can revoke it at any time from Google’s security settings. Data we fetch from YouTube is refreshed or deleted in line with the YouTube API Services policies.
6.Who processes data for us
- Google Cloud and Firebase: hosting, sign-in, databases, storage, scheduled jobs and the Gemini AI models, in the United States.
- Resend: sending the email digest.
- Cloudflare: DNS for our domains.
These providers process data on our instructions and under their own security and privacy commitments. We may also disclose information if the law requires it, to protect people’s safety, or as part of a merger or sale of the business, in which case this policy continues to apply.
7.How long we keep it
We keep account and team data while your organisation uses DugOut, and delete it within 90 days of the account being closed, except where we must keep records for legal reasons. Backups roll off on their normal schedule. Creator profiles are kept while they are useful to customers and are refreshed regularly; removed profiles are deleted.
8.Your choices and rights
You can turn the email digest off in Settings at any time. Depending on where you live (for example the EU, UK or California), you may have the right to access, correct, delete or export your information, to object to or restrict how we use it, and to complain to your local data-protection authority. Email contact@dugout.com and we’ll help; we won’t treat you differently for asking.
9.Security
Data is encrypted in transit and at rest by our providers, access within an organisation is limited by role, and only a small number of people at DugOut can reach production data. No system is perfectly secure; if a breach affects your information we’ll tell you as the law requires.
10.Children
DugOut is a business tool and isn’t for anyone under 18. We don’t knowingly collect information from children through the app.
11.Changes
If we change this policy we’ll update the date above, and for significant changes we’ll tell signed-in users before they take effect. See also our terms of service.
Adapted from the Basecamp open-source policies, licensed under CC BY 4.0.