How Stage Company™ handles your information. Last updated 5 November 2026.
Stage Company™ is a private workspace for one theatre production at a time. Everything you put in it is visible only to members of your own production — never to the public, never to other productions, and it is never sold, rented or used for advertising.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and this page explains how. People in New Zealand will find a section for them near the end.
The most sensitive things we hold — medical notes, emergency contacts and Working with Children Check numbers — are encrypted inside our database with a key kept apart from it, on top of the encryption our hosts already apply. And you can delete your own account, yourself, whenever you like: your personal details leave the app straight away, and our backups within 30 days. A few things are kept after that, and How long we keep it says which, for how long and why: your name on the show's own records, a Working with Children Check on the production's register, the record of what you agreed to, and anything kept as evidence. Removing a child's place and deleting a production each work differently, and are set out there too.
Stage Company™ is operated by Stage Company Pty Ltd, ACN 703 178 143, ABN 83 703 178 143 (“we”). Your production's owners and production team decide who is invited and what is posted; we provide and maintain the software that holds it.
Stage Company Pty Ltd, the company formed to run Stage Company™, assumed responsibility for the application and the information it holds on 13 October 2026. The way that information is collected, used, stored and protected is unchanged.
Two similar words, kept apart throughout this page: Stage Company™ is this application, and your production company is the theatre company, school or society running the production you are part of. They are not the same, and they hold your information for different reasons.
Your account. Your name, email address and, if you choose to add them, pronouns, a short bio, a phone number and a profile photo.
Date of birth. Collected when you join, and used for three purposes: so the production team knows which members are under 18 and can meet their duty of care; so that nobody under 13 signs up for an account of their own (see Children, below); and so that the few steps kept for adults, being a production's chaperone or saying you are a member's parent or guardian on a family link, are taken only by someone 18 or over. If it was not collected when you joined, it is asked for when you take one of those steps. Inside the app, other members see only an “under 18” label, never your birth date. The production’s owners can include it in the registers they export, and every such export is logged by name in the production's audit trail and reported to its other owners. The full date is used because the label follows a member's age: it comes off on their 18th birthday, even in the middle of a season.
Emergency contact. A name and phone number, required of everyone who joins a production, so someone can be reached if you are hurt or unwell; the person who sets a production up can add theirs on My profile.
Medical needs and allergies. Optional. You write this yourself and you choose who sees it — the production team only (the default), or everyone in your company. A production's chaperones also see the medical notes of its members under 18. Leave it blank if you would rather not share it.
Working with Children Check. If you give one: its number and expiry date, encrypted, kept on the register of each production you are in, where its production team can see it. A production's owners choose which roles, if any, are asked or required to give one; for everyone else it is optional. Only you can change it.
What you post. Documents, photos, video and audio you upload, rehearsal notes, messages, costume details, and records of which items you have opened or acknowledged.
Poll answers. When the production team asks a poll, the answer you give, or that a parent or guardian gives for their child, is kept with the poll. Unless the poll is anonymous, the production team sees who chose what, and it is included in the records the production's owners can export; other members see only the totals. An anonymous poll shows totals only, to everyone, the production team included, although the production team can see who has not yet answered so that they can send a reminder. Poll answers are kept as part of the production's record, including when a poll is deleted, and are deleted with the production.
Technical basics. Sign-in sessions; if you add a passkey, its public half and the name of the device it is kept on (the private half never leaves your device); a record of each sign-in attempt — the email address tried and a one-way code of the internet address it came from — kept for a day to guard against misuse; and — only if you switch notifications on — the address your device needs to receive them. If you write to us through “Something wrong? Tell us” on My profile, or tell us what's wrong with a reader's draft, we keep your message, with your name and email address, until you delete your account. There is no advertising or third-party tracking in Stage Company™.
Page counts, not people. So we can tell whether telling people about Stage Company™ worked, the public pages (the landing page, the sign-in page and invite pages) keep a simple daily count of views and sign-ins, along with the campaign tag a link carried — for example “from the launch post”. That is the whole record: totals for a day. No cookies are set for this, no addresses or device details are kept, nothing follows you between pages, and no third-party analytics service is involved — the numbers live in our own database and identify nobody.
How it is collected. Directly from you (or your parent or guardian) through the app — when you join, fill in your profile, or post something — and from your production: a member of its production team who invites you by email gives us the address the invitation goes to, and usually the name of the person it is for, and the production adds your role, calls and notes. If an invitation is withdrawn, or expires before it is used, that name and email address are cleared from it 30 days later. If a production approves each new member, the people who approve see the details you gave while you wait. If you aren't let in, your request is deleted 14 days later. We never buy or scrape your information.
Sensitive information. Medical needs and allergies are “sensitive information” under the Privacy Act. We hold them only because you typed them in yourself or, for a child, their parent or guardian did: that is the consent. It can be withdrawn at any time by clearing them on My profile; they leave the app straight away, and our backups within 30 days.
Before Stage Company™ is available to license, anyone can join its waitlist. We keep the first name and email address you give, the company or school if you add one, where you found us (for example, Instagram), and when you joined and confirmed. We use them only to email you when Stage Company™ is available to license, and they're never shared for anyone else's use. If you don't confirm your address within seven days, we delete it. We delete everyone's details 30 days after the email saying it's available; if you've signed up by then, your account keeps what it needs. You can leave the list at any time with the link in any email we send, and your details are deleted straight away.
The minimum age for an account of your own is 13. Anyone younger takes part through a parent or guardian, who holds the child's place on their own account until the child is old enough for an account of their own. The child's name is what the company sees, while the email address, sign-in and notifications stay with the adult.
If someone under 13 tries to sign up on their own, the door stops. We keep nothing they typed, and the only thing we ask for is a parent or guardian's email address, which we use once, to send them the invitation, and do not keep.
What we hold about a child, and from whom. A child's place is created by their parent or guardian, who enters the child's name, date of birth, emergency contact and any medical notes, and accepts the terms and the photo agreement on the child's behalf. The production adds the child's role, calls, notes and any photos and video it takes. Other members of that production see the child's name, role and an “under 18” label, and its chaperones also see the child's emergency contact and medical notes; nobody outside the production sees them, and no child's information is sold, shared for advertising or used to train anything.
A parent or guardian's rights. The parent or guardian can see and change everything held about their child at any time, delete the child's place or the whole account themselves, refuse any further collection by removing the place, and ask the production team to remove it. Removing a child's place takes them out of the production straight away. Their details are kept for 30 days in case they come back, then deleted from the app, and from our backups within a further 30 days; as with everyone, the child's name stays on the show's own records of what happened.
How long we keep a child's information. While their place in a production exists, and for 30 days after it is removed, in case they come back. If the production is deleted, it goes with it, as the section on how long we keep things describes.
Members aged 13 to 17 may hold an account of their own. The company sees them as under 18, with the protections that brings: the chat rules, and what a parent may see of their account, agreed between the two of them.
Wherever a child lives, the United States included, we do not knowingly collect personal information online from a child under 13. A child's place is created by the adult who holds it, who confirms they are the child's parent or guardian and agrees on the child's behalf, and that adult may review, change or delete the child's information, or refuse further collection of it, at any time, by the means above or by writing to us.
Only active members of your production, and the owners of the production company running it, who can open any of its productions. Within that, you control the sensitive parts: your email, phone, emergency contact and medical notes each have their own setting on My profile — the production team only, or the whole company. The production team means everyone with admin access to the production — its owners and the members who hold admin access there, a mix that differs from production to production — and stage management, who keep these details as part of their duty of care even without admin access. Whatever the setting, a production's chaperones also see the emergency contacts and medical notes of its members under 18, and not those of its adult members.
Your emergency contact is seen by the production team, or by the whole company if you choose, and, if you are under 18, by the production's chaperones. Costume documents you upload stay private to you unless you share them with the costume team; your costume run is a working sheet the costume team, the props manager, stage management and the production team can see. Your own copies in My script & score — and every note and highlight on them — are yours alone: nobody else in the production can open them, not the production team and not its owners. Leaving or being removed from a production ends your access to it immediately; anything from it kept on your device for use without a signal is removed the next time the app is online.
Stage Company™ support. For a production company on a plan or a free trial, we can open its productions only while one of its owners has let Stage Company™ support in from their Account page — for up to seven days at a time, and every owner can see it. While we're in, we appear in each production's People list as App Developer, its audit trail shows when we came in, and anything we change is recorded as anyone's would be. For the companies that joined before paid plans began, Stage Company™'s developer can open a production to fix problems at any time; they appear in its People list the same way, and their first visit is recorded in its audit trail. In either case, we cannot see anyone's medical notes or emergency contacts or open Chat, and we cannot download the production's registers or take its Master data export.
Reports. You can report a chat message or a Library item. A report — what you picked, the reason you choose, what you say happened, and your name — goes to the production's owners, or, when it is about the production's only owner, to an administrator you choose. A report that a child is in danger, or of sexual material involving a child, also comes to us, and the person reported never sees it. If the owners, or the administrator it went to, file it as an incident report, they file it in their own name: the production team can then read what you reported, but is not told who reported it. In a one-to-one chat, or where what you wrote identifies you, they may still be able to tell. You are told what was decided, never who decided. A report stays with the production's records and is deleted with the production; one that came to us is kept as our record of how it was handled, and what it reported is kept as evidence (see How long we keep it).
Your information lives in Australia: the servers that run the app and its database are in Sydney (Vercel and Neon), and uploaded files sit in Cloudflare's Oceania region. The backups described under How long we keep it stay in the same places: with Neon in Sydney, and with Cloudflare in its Oceania region. Some information goes overseas, to these providers only:
Each provider handles information to provide its service to us, under its terms with us and its own security obligations. Where a provider also uses information for its own purposes, such as Stripe to prevent fraud and meet its legal duties, or YouTube once its picture is shown, its own privacy policy applies to that use. Nobody else receives your information, except as Reports and What we keep for evidence describe, or where the law requires it.
Payments. When a production company pays for a plan, the card is taken by Stripe, our payment processor, which may process it in the United States and elsewhere, and which also uses payment details for its own purposes, such as preventing fraud and meeting its legal duties, under its own privacy policy. Stripe holds the card; we never see or store card numbers. We keep what a tax invoice needs — the billing name, email and address, and the invoices themselves, which the law requires us to keep for five years — and, on each invoice, the name and email address of the owner whose card paid it, which stay there after that owner's account is deleted. For tax records, each invoice also keeps the country of your company's address (and, in the United States, its state), of the billing address and of the card that paid it, for five years. Stripe's own messages to us about each payment, which can carry the name on the card and its brand, last four digits and expiry, are kept for 90 days, then deleted. To keep to one free fortnight per card, when a card starts a free fortnight we keep a one-way code made from Stripe's fingerprint of the card — never the card number, and it can't be turned back into one — with the date that fortnight ends, the company it started for and the account that founded that company. It's kept after a company or account is deleted, so that the same card can't start another, for as long as we offer free fortnights; if we stop offering them, the codes are deleted. When a school switches on education pricing, we keep the school's name and the school email address it gives, and record who switched it on. If it adds an ABN for its tax invoices, we check that ABN with the Australian Business Register (ABN Lookup) — only the ABN is sent — and its invoices carry that ABN under the school's name. Payment details are never visible to the members of a production.
Two more services help us run Stage Company™. Error reports go to Sentry (hosted in the European Union) so we can fix crashes — they are scrubbed of personal details before they leave the app. And when a production team hands a script, score, schedule or notes document to one of Stage Company™'s readers, that document is processed by our AI provider, Anthropic (a US provider), solely to read it — along with what the reader needs to sort it: the role and chair names already on a cast or band map, and any notes typed in for the reader with the document; for a schedule, the production's dates and the venues and sessions already on it; and for notes, the names and roles of everyone in the production and who plays or understudies which part, so it can tell whose note is whose. In a school production, before anything is sent, every name Stage Company™ recognises as someone in the production — in full, in part, or as a close misspelling or short form — is replaced with a code: in that list, in a notes or schedule document, and in notes typed for the script and score readers. The names are put back only inside Stage Company™. A script or score is otherwise sent as written, and a name Stage Company™ can't recognise, such as an unfamiliar nickname or someone outside the production, can still reach the provider. In any other production, a child under 13 is named only if their parent or guardian has agreed to the readers; otherwise a code is sent in place of the child's name. None of it is used to train AI models; the provider keeps it only for a limited period, under its commercial terms with us, for safety monitoring, and then deletes it, and everything the reader produces stays inside Stage Company™.
Before we move where your information is kept or processed to another country, add a provider in another country, or before anyone who can see information that is not encrypted relocates to another country, we give at least 30 days' notice: by email to the owners of each production company, and in the app to everyone signed in to their own account.
Productions photograph and film their own rehearsals and shows. Those images may appear inside the app and be used for the production's purposes — rehearsal records, the production's own archive and promoting the show. Joining a production is your agreement to this; for a member under 18, the parent or guardian who operates the account agrees on their behalf when they join, and that agreement is recorded against the membership.
The agreement covers your production company's own records as well as what sits inside the app — a company keeps its archive after a season ends. It is limited to that production's purposes: it does not permit selling images or licensing them to anyone else.
You can change your mind. If a particular image is a problem, tell your production team and they can take it down — a parent can do this for their child. Anything already printed in a programme or published elsewhere is outside what the app can reach, so tell them early if it matters.
When you upload or write something in Stage Company™ — documents, photos, video, audio, rehearsal notes, designs, costume details — you give your production company permission to use it for the purposes of that production: rehearsing, planning, record-keeping, and promoting the show. You keep whatever rights you already had in your own creative work; this is permission to use it, not a transfer of ownership.
Licensed material is your production company's responsibility. Scripts, scores, backing tracks and recordings uploaded to a production are assumed to be properly licensed from their rights holders by the production company. Stage Company™ stores and processes what's uploaded solely to run that production — it doesn't grant, replace or police performance rights, and honouring rights agreements sits with the production company that holds them.
Your personal details are different. Your contact details, date of birth, emergency contact and medical needs remain yours. You can see them, correct them, or ask for them to be removed at any time, whatever else this policy says. Your name is yours to see and correct too, but it stays on the production's own records of the show — see What survives your account being deleted.
Three different things can happen, and each is set out below:
Your information is kept while your production is running, and for as long as the production team keeps that production in Stage Company™. If you leave or are removed, your account stops being visible to the company but your past contributions (notes, uploads, receipts) remain part of the production's record.
After the season. Once a production has finished, its information is either deleted from Stage Company™, or exported to your production company's own records and then removed from Stage Company™. Your production's owners decide which, and once information is in their own files it is held under that organisation's privacy practices rather than ours. Before a production can be deleted, the owner deleting it must download its sensitive registers, its attendance and its audit trail, and every owner is sent a receipt. When a production is deleted in Stage Company™, everything in it is deleted with it — from the app straight away, and permanently, from our backups too, within 30 days — apart from anything we have kept for evidence, as described below.
Backups. So the app can be put right if something goes wrong, our database host, Neon, keeps a record of the last 7 days of changes and a copy of the database taken each day, and each daily copy is kept for 30 days. Each night we also keep our own copy of the database, locked with a key that only we hold, and delete each one after 27 days. Files you upload are copied each night to a second, private store; a file deleted in Stage Company™ leaves that copy within 7 days. These backups hold the same records as the app, encrypted in the same way, and we use them only to recover from a fault — never to bring back something a person chose to delete. As they expire, anything deleted in Stage Company™ goes with them: whatever is deleted is gone from them permanently within 30 days. Copies a provider keeps under its own legal duties, such as Stripe's payment records, are kept under that provider's policies, not ours.
What survives your account being deleted. The production keeps its own working records — call sheets, attendance registers, show and rehearsal reports, incident reports, the Run of Show, the prompt book and the audit log — because they are the company's records of how the show was run, and some of them must be kept. Those records keep your name and your role in the show: deleting your account deletes your personal details, not the fact that you were in the show, so the company's records stay accurate and accountable. A Working with Children Check you gave a production stays on its register too — the number, its expiry and when you left the show — until the production is deleted, because the production must be able to show its child-safety compliance. Its owners decide when that is, and must download the register first. We also keep the record of each version of the Terms and Privacy Policy you agreed to (the version, its exact words, when, for which production, and your name), so that what was agreed can be shown later. Notes, memos, poll answers and chat messages stay as part of the show's record as well, with your name on them, except that an anonymous poll's answers are never shown with a name. Notifications that name you are removed, except the one telling the production's owners that you've left, which names you so they can fill your place.
Private conversations are never in a production's exports. Direct messages and group chats are not included in any export a production can take — not even by an owner closing the production down. We never give anyone's messages to a production's owners or team. If you ask, we send you, and only you, a copy of the messages you wrote yourself, and never anyone else's (see Your choices). If you delete your account, the people you talked with keep the conversation; it goes when the production is deleted.
Your marked scripts are never exported either. Your copies in My script & score, with their notes and highlights, aren't in any export a production can take. If you leave or are removed from a production, they're kept for 30 days in case you come back, then deleted. Deleting your account deletes them straight away.
What we keep for evidence. If we hide an item in a production's Library, or a chat message — because it appears to be unlawful, because of a legal notice, or because it exposes someone's personal details — we keep a copy of it as evidence, apart from the production: a message's words and who was in the chat, or an item's title and every stored version of its file, with the name and email address of the person who posted it, and when. We keep the same copy, from the moment the report is sent, of a chat message or Library item someone reports as putting a child in danger or as sexual material involving a child, even if it is later deleted in the production. That copy is not deleted when the production, or the account that posted it, is deleted, so it is an exception to the deletion promises on this page. Only we can open it, and each time we download it is recorded. We decide when a matter is closed: when no report, legal notice, request from an authority or legal claim about it is still open. We review every copy we hold at least every six months, delete each one once its matter is closed, and it then leaves our backups within 30 days.
You can view and change your own details at any time on My profile, including clearing your medical notes or tightening who sees what. To leave a production, select Leave this show under Your shows on your Account page, or ask one of its owners. You can download a copy of the personal details held about you, and about any child on your account, yourself: on your Account page, under What we hold about you, select Download what's held about me. A production's own records — its notes, memos, call sheets and registers — stay with that production. Its owners can answer for those, and you can also ask us: we will look at what we hold about you in them, and give you access or correct it, unless that would unreasonably affect someone else's privacy or the law prevents it, in which case we will tell you why. Its chats stay with it too, but nobody can export them, its owners included. If you ask us in writing for a copy of the chat messages you wrote yourself, and of the notes that name you, we will send it to you, and only to you, once we have confirmed that the request comes from you. We never give a copy of anyone's chat messages to a production's owners or team, or to anyone else unless the law requires us to, and we never send you anyone else's messages. To have anything corrected, or to ask about anything else we hold, contact us using the details below.
Deleting your account. You can do this yourself, at any time, from your Account page — reached from your productions page or from My profile. It erases your contact details, date of birth, medical notes, emergency contact, measurements, programme bio and photo, and the same for any child whose membership you manage; your name stays on the production's records of the show, a Working with Children Check you gave it stays on its register, and anything you posted that we have kept for evidence stays in that copy (see How long we keep it). It closes your memberships, releases any future calls you were given, deletes your private uploads, and signs you out everywhere. It cannot be undone — what it erases leaves the app straight away and is gone permanently, from our backups too, within 30 days — so take anything you want to keep first.
If you are the only person who can look after a production — you hold it, or you are its last owner — you will be asked to hand it to somebody else, or to close it down, before your account can be deleted. That is to stop a production being left with nobody able to reach it.
Sign-in is by one-time email link, a passkey kept on your own device, or your production's shared show password. The most sensitive fields — medical notes, emergency contacts and Working with Children Check numbers — are additionally encrypted inside the database itself (AES-256), with a key kept apart from it, so those fields cannot be read from a copy of the database without that key. Everything else is protected by our hosts' encryption, and our own nightly copy is locked as a whole with a key only we hold. Files open only for signed-in members of the production they belong to, each time through a private link that lasts five minutes, and a show report's attached file also goes by email to the members it is sent to. A calendar feed is reached by its own private link, without signing in, so keep it to yourself; Reset this link stops the old one. No system is perfect, so please tell us promptly if you think an account has been misused.
If a data breach happens that is likely to cause you serious harm, we will tell the people affected and notify the Office of the Australian Information Commissioner, following the Notifiable Data Breaches scheme, and, where it affects people in New Zealand, the New Zealand Privacy Commissioner.
If you are in New Zealand, the Privacy Act 2020 gives you the right to ask for the personal information we hold about you, and to ask for it to be corrected. Write to us at privacy@stagecompany.app, and we will reply within 20 working days. If you are not satisfied with how we handle a complaint, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
If you think we have mishandled your information, tell us — write to the address below and say what happened. We will look into it and reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
If this policy changes materially, everyone signed in to their own account is told in the app. The date at the top changes on the same day as the policy, and always shows the current version.
Questions about privacy, or a request about your information: write to us at privacy@stagecompany.app. For a production's own records, you can also ask its owners. A request for a copy of your own chat messages comes to us alone.