Your information is for the pilot, not for sale.

Last updated September 16, 2026

What we collect

When you submit a creator-roster or studio-campaign form, DebutYou collects the information you provide, including your name, email address, portfolio or company link, creative focus or campaign range, message, age confirmation, and permission to contact you about the submission. To limit repeated submissions, the form also stores a hashed network address when available; it does not store the raw IP address in the inquiry record.

When you sign in to the community, our sign-in provider supplies an account identifier and your verified sign-in email. A community profile stores your display name, username, bio, creative focus, availability, optional profile image, visibility choice, and acceptance of the founding rules. Your Core may include up to three linked or uploaded works. We also store content reports and campaign selection, moderation, and progress records. We also store campaign entries, uploaded videos or work links, eligibility decisions, and the Iris you give. DebutYou does not receive your sign-in password. Campaign applications also store private residence and work country/region, availability, contribution and asset-permission declarations. We retain the rules and privacy versions, accepted display permission, timestamp and the campaign terms accepted with each entry. Private practice stores the invited account emails to control access. Provisional selections are visible to the organizer and the selected person in their own account, before confirmed results are released.

We store optional campaign-opening email preferences, privately saved creators, followed campaigns, work covers and ordering, and your consent to show completed paid commissions. Account updates and email status help you follow campaigns. We record a signed-in account’s first observed Stage-card exposure during the support period to help the organizer assess discovery. This is a browser observation, not proof that the work was watched, and never changes Iris totals or selection.

How we use it

To limit automated abuse, we keep temporary request counters using daily hashes of account identifiers and, when available, network addresses. These counters do not contain passwords, session tokens, raw IP addresses, or the contents of your forms. Normal limits expire within ten minutes. Repeatedly exceeding a limit can automatically pause that activity for 30 minutes. We keep private security alerts with the hashed identifier, activity category, excess-request count, times and review status for up to seven days in the organizer’s view. These alerts do not establish that a person is a bot and do not automatically invalidate campaign support. Expired request counters older than a day and security alerts older than seven days are removed in bounded batches during later accepted requests; removal may take longer when the site is idle or busy.

We use this information to review pilot interest, assess potential fit, respond to you, and plan DebutYou campaigns. We do not sell your personal information.

Community records let you return to your profile, track submissions, and keep campaign support within the published account limit. We use submission and support records to run eligibility reviews, Stage selection, and campaign integrity checks.

What other visitors see

Your display name and selected Stage work are public for public campaigns during the permitted display period. Invitation-only practice campaigns, entries and results are restricted to invited signed-in accounts and the organizer and do not appear in public profile work or discovery. Your email, pending entries, eligibility notes, and individual Iris choices are not shown in the public feed. The organizer can review submissions and support records to operate the campaign. Public work may be copied or shared by visitors. Published campaign results identify the selected creators and can show agreement, delivery, and payment status recorded by DebutYou; private selection rankings and report details are not published.

If you turn on public profile visibility, your display name, username, bio, creative focus, availability, profile image, featured Core work, and public Stage work appear on a shareable profile and in community search. You can turn this off in Profile settings. You can remove featured work from your Core independently of campaign entries. Your campaign Stage entries remain visible under the permission you gave when submitting; hiding your profile does not withdraw a campaign entry.

Who can access it

Access is limited to people working on DebutYou who need the information to operate the pilot. We use service providers to host the website, store submissions, and send transactional email. Resend processes campaign receipts, important participation updates, opted-in campaign-opening emails and studio inquiry notifications: an alert containing the inquiry goes to our business inbox, and a receipt goes to the email address supplied. We retain notification status and message references to investigate delivery problems and prevent duplicate sends.

The website uses OpenAI Sites and Cloudflare for hosting, account identification, records, and uploaded files. Email sign-in is handled by Clerk, which processes authentication information and uses necessary session cookies. For early accounts created through OpenAI, an existing session may still identify the account. When you explicitly connect that account to email sign-in, we retain a private identity link so your existing profile, entries and Iris history stay together. Uploaded videos play directly on DebutYou. Externally hosted work opens only when you choose its labeled link; the external service then receives your request and applies its own privacy practices. We do not embed advertising-funded video players.

Identity, tax and banking documents are not collected through public profiles or campaign application fields. Later verification and payments require a separately approved secure process and appropriate provider information before collection. The organizer stores only verification, signed-agreement, payment and delivery record references here; those references are not published.

Studio access is assigned to specific account emails. Those representatives can review their campaign’s approved Stage work and private deliveries, submit two Studio Door preferences and review delivery against the agreed brief. We keep delivery links, review notes, approval deadlines and payment status to manage the work. Public sharing of a campaign delivery is a separate creator choice that requires written publishing permission. They do not receive creator application declarations, account emails, individual support choices or other campaigns’ private records. Saved creators, email preferences and exposure records remain private. Completed paid commissions appear on a public Core only with the creator’s choice.

How long we keep it

Campaign entry display ends 30 calendar days after confirmed results, or earlier following an approved withdrawal or cancellation. The public display ending does not automatically delete restricted evidence needed for disputes, payment records or legal obligations. Core portfolio visibility is a separate choice. We retain restricted submissions, acceptance records and audit records only while needed to run the campaign, handle requests and meet applicable record obligations; access remains limited. Private practice records can be removed after the test by the organizer. You may ask us to delete your submitted information unless we need to retain it for a legal or operational reason.

Your choices

Turn campaign-opening emails off in account Settings, unfollow campaigns from their campaign page, remove saved creators on their Core and change Core visibility or completed-commission visibility in your account. Important messages about an entry or selected commission may still be needed to carry out that participation. No identity documents belong in these controls.

You can ask to review, correct, or delete your submitted information by emailing hello@debutyouhq.com.

Changes

If this notice changes materially, the updated date above will change. This notice covers the DebutYou pilot website, community features, and interest forms.