Privacy Policy

This Privacy Policy describes how Goldstain AI LLC("we", "us", "ModelCollabs") collects, uses, and protects your information when you visit modelcollabs.com or use the ModelCollabs application.

• Waitlist contact details — your email address when you join our pre-launch waitlist and, only if you choose to share it, your phone number together with your consent to receive launch texts. You can opt out of texts at any time by replying STOP.
• Account information — name, email, and authentication credentials you provide when creating an account, processed via our authentication provider (Clerk).
• Identity verification data — government ID images and selfie captured during the verification flow, processed by our identity verification provider (Persona). We do not retain ID images on our servers; they are processed and packaged into the signed release PDF, then deleted from our systems within one hour. Your legal name is collected to verify your identity and appears on the signed release documents where §2257 record-keeping requires it. It is never displayed in the app, on your profile, or on any public page.
• Release content — collaboration details, signature images, and timestamps you provide when creating or signing a release.
• Recipient contact information— when you create a release request, we collect the recipient's email address or, for SMS, the mobile number the recipient provides themselves. For text delivery, the recipient personally checks a consent box before any message is sent.
• Operational logs — IP address, user agent, timestamps, and an approximate city and country worked out from that IP address, recorded for auditing and security (signed releases include this metadata in the audit trail). This includes when a verification link is opened, whether or not the person goes on to complete it. The location is an estimate of where the visit appeared to come from, not where anyone was — a VPN will change it.
• Account sign-ins — when you sign in, we record the time, the IP address, the browser and device, and an approximate city and country worked out from that IP address. We keep this for 12 months to protect accounts and investigate suspicious access, then delete it. The location is an estimate of where the sign-in appeared to come from, not where you were — a VPN will change it. Deleting your account deletes this history.

• To provide identity verification and electronic release-signing services.
• To send transactional notifications (release request emails and SMS) related to your activity on the service.
• To maintain a tamper-evident audit trail of signing events, as required for record-keeping compliance.
• To detect and prevent fraud, abuse, and security incidents.
• To respond to your support requests and account inquiries.

We do not sell your personal data. We do not share your data with third parties for marketing purposes. SMS opt-in data is never shared with third parties for any reason.

We use a small set of vetted service providers to operate the service. Each is contractually bound to handle your data only for the purposes we've specified.

• Clerk — user authentication and session management.
• Supabase — encrypted database hosting (account records, release metadata, audit log).
• Persona — government ID and selfie verification.
• Postmark and Resend — transactional email delivery.
• Twilio — transactional SMS delivery.
• Listmonk — pre-launch waitlist email management.
• Vercel — application hosting and analytics (anonymized aggregate traffic only).

Signed release PDFs and identity records sync directly to your own cloud storage (Google Drive, Dropbox, or Box) when you connect a provider. We retain a copy of the signed release PDF and audit metadata in our database for compliance and dispute resolution. ID images are deleted from our systems within one hour of verification.

• Access — request a copy of the data we hold about you.
• Deletion— request deletion of your account and associated records. We honor deletion requests within 30 days, subject to retention obligations under applicable law (e.g., 18 U.S.C. § 2257 record-keeping for creator releases, which is the customer's legal obligation, not ours). Deletion removes your account and the copies we hold of your own identity data — your government-ID images and the details read from them. Signed releases, and any records already delivered to a collaborator, remain: those parties are legally required to keep them, and we cannot reach into someone else's storage to delete them. We also retain a limited, non-identifying record that an account existed — a one-way cryptographic fingerprint, never your name or ID — so a deleted account cannot silently re-register. It contains no personal data and cannot be reversed to identify you.
• Correction — request correction of inaccurate account information.
• Opt-out — reply STOP to any SMS to opt out of SMS notifications. Email unsubscribe link is included in any non-transactional email.

Email support@modelcollabs.com to exercise any of these rights.

For SMS delivery, the recipient — present with you at the point of collaboration — provides their own mobile number and personally checks a consent box agreeing to receive a one-time verification link. Only then do we send a single transactional SMS containing your stagename and that link. The recipient can reply STOP at any time to opt out and HELP for assistance. Message and data rates may apply. Separately, waitlist members who share a phone number and check the opt-in box receive occasional launch and early-access texts; those are the only non-transactional texts we send, and replying STOP ends them at any time.

All data is transmitted over TLS. Database credentials and API keys are stored in encrypted environment variables. Authentication is enforced via Clerk; database access is restricted by row-level security policies tied to your authenticated user identity.

ModelCollabs is intended exclusively for adults (18 years or older). We do not knowingly collect data from minors. If we learn we have collected data from a minor, we will delete it.

We may update this policy. Material changes will be communicated via email to the address on your account, and the "Last updated" date above will reflect the most recent revision.

Questions or concerns? Email support@modelcollabs.com.