Legal
Effective date: October 13, 2026
This Privacy Policy describes how Staje ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website, web application, and mobile applications (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
When you register, we collect your name, email address, and password (stored as a cryptographic hash). You may optionally provide a profile photo, bio, location, and social links.
Content you create within the Service — troupe profiles, productions, cast lists, rehearsal schedules, recordings, announcements, audition results, volunteer sign-ups, marketplace listings, and fundraising campaigns — is stored on our servers.
When a troupe uploads a script, we extract its text and use AI services (Microsoft Azure OpenAI) to identify characters, scenes, songs, and individual lines. The parsed lines are available only to members of the troupe that uploaded the script.
Run Lines lets cast members rehearse by speaking their lines. If you choose a mode that listens, your voice is processed by your device's or browser's built-in speech recognition service (for example, Apple's speech recognition on iPhone, Google's on Android and in Chrome). Depending on your device, that processing happens on the device itself or on the provider's servers, under that provider's privacy terms. Staje does not receive, record, or store your voice audio, and the text transcript of what you said stays on your device. We store only your practice results — the character, scene, score, number of attempts, best score, practice streak, and when you last practiced — so you can track your progress. Microphone and speech recognition access is requested only when you start a listening run, and you can practice without it by rating your own lines.
We use Stripe to process all payments. We do not store your full payment card details. Stripe may share tokenized payment references with us. For Stripe Connect sub-merchants (troupes), Stripe collects and processes identity verification and bank account information directly. See Stripe's Privacy Policy.
We collect server logs including IP addresses, browser type, referring URLs, and pages visited. Mobile apps collect device identifiers and push notification tokens. We use this data to diagnose issues and improve the Service.
When you contact us or send messages within the Service, we retain those communications. We send transactional emails (verification, invitations, ticket confirmations) and, with your consent, product updates and announcements.
We do not sell your personal information to third parties. We do not use your data for behavioral advertising to third-party platforms.
We share your data only in the following circumstances:
We retain your personal information for as long as your account is active or as needed to provide the Service. After account termination, we retain data for 30 days before deletion, unless a longer retention period is required by law (e.g., financial records required for tax purposes are retained for 7 years).
Server logs are retained for 90 days. Anonymized, aggregated analytics are retained indefinitely.
We implement industry-standard security measures including TLS encryption in transit, encryption at rest for sensitive data, cryptographic password hashing, and regular security reviews. No system is perfectly secure; we cannot guarantee absolute security and are not responsible for unauthorized access resulting from factors outside our reasonable control. Report security vulnerabilities to security@staje.app.
We use cookies and similar technologies to maintain sessions, remember preferences, and analyze Service usage. See our Cookie Policy for details and opt-out options.
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Users aged 13–17 may use the Service with parental permission.
Staje is used by theater organizations that may include minors as performers. Recordings featuring minors are subject to guardian approval before publication. For users under 13, Run Lines never turns on the microphone or speech recognition; they practice by rating their own lines. Troupes are responsible for obtaining appropriate consent from guardians of minor members in accordance with applicable law.
If you believe we have collected information from a child under 13 without appropriate consent, please contact us at privacy@staje.app and we will delete it promptly.
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:
To exercise these rights, contact privacy@staje.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
The legal bases we rely on for processing are: (a) contract performance (providing the Service you signed up for); (b) legitimate interests (security, fraud prevention, product improvement); (c) consent (marketing communications); and (d) legal obligation.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) / CPRA:
To submit a request, email privacy@staje.app with the subject line "California Privacy Request."
The Service is operated from the United States. If you are accessing the Service from outside the US, your information may be transferred to, stored, and processed in the US. For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office.
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice in the Service at least 14 days before they take effect. The "Effective date" at the top of this page reflects the date of the most recent revision.
For privacy questions, data subject requests, or concerns, contact us at privacy@staje.app.