Privacy policy

Who sees what, in plain English. Last updated August 2026.

Who we are

Pencilled is the operator of this service and the data controller for everything described below. For any question about your data, email hello@pencilled.pro.

You can complain to the Information Commissioner's Office at ico.org.uk if you think we've handled your data badly. We'd rather you told us first, but it's your right either way.

1. Who can see your availability

Your availability status is visible to approved bookers and Pencilled's admin only. It is never on your public profile, never visible to other crew, never visible to anonymous visitors, and never in search engines. “Available” on Pencilled means available to people hiring. Nothing more, to nobody else.

2. Who can see your contact details

Your booking email and phone number are shown only to an approved booker who explicitly reveals them, an action we log every time. If a booker's access is revoked, they immediately lose access to every contact detail they ever revealed. Your public profile shows your name, photo, role, region, credits and kit, no contact details, no availability.

3. What we log about bookers

Every search a booker runs (role, dates, region, result count) and every contact reveal is recorded. This powers anti-scraping limits and the platform's health metrics. Bookers: your search history is visible to you and to admin, nobody else.

4. What we store, and how

Account email (with our auth provider, Supabase), your profile and crew details, availability history, notification preferences, and if you gave one. Your phone number, which is encrypted at rest. Messages we send you (phone notifications, SMS, email) go via Apple/Google push services, Twilio and Resend; each receives the minimum needed to deliver the message. Payments, when live, are handled by Stripe. We never see card numbers.

5. Your rights

Export everything we hold about you as JSON from Settings, any time. Delete your account from Settings. This immediately hides your profile and availability everywhere. For anything else (full erasure, corrections, questions), email hello@pencilled.pro and we'll sort it within 30 days, as UK GDPR requires.

6. What we don't do

No marketing lists, no selling data, no ad tracking, no analytics vendors. The only messages Pencilled sends are the ones that make the board work: sign-in links, your weekly confirm tap, and account notices.