Privacy Policy
Effective Date: June 26, 2026
Privacy Policy for CASTFLOW
Welcome to CASTFLOW ("Company," "we," "us," "our," or "Platform"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and mobile application.
This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information when you use CASTFLOW, including our website, mobile applications (iOS and Android), and related services (collectively, the "Services").
1. Information We Collect
Authentication & Account Information
- Email address
- Full name
- Password (encrypted)
- Account preferences
Payment & Financial Information
We process payments via Base44 Payments (PCI-DSS compliant). We do not store full credit card numbers.
- Payment method and billing address
- Purchase history and transaction records
- Subscription and donation preferences
Listening Activity & Usage Data
- Episodes you play, pause, or complete
- Favorites, playlists, and search history
- Device type, IP address, and app version
- Time spent on app and feature usage
Creator-Submitted Information
If you create a podcast, we collect episode metadata, cover art, payout method details, and analytics data.
2. How We Use Your Information
- Delivering episodes and personalized recommendations
- Processing payments, subscriptions, and donations
- Improving app performance and features
- Providing creator analytics and payouts
- Sending transactional and support emails
- Complying with legal requirements and preventing fraud
3. How We Share Your Information
Service Providers: We share information with payment processors (Base44 Payments, Stripe, PayPal), email services, analytics platforms, and cloud hosting providers.
Public Content: Your podcast, episodes, comments, and marketplace listings are publicly visible.
Legal Requirements: We may disclose information when required by law or to protect our legal rights.
Aggregated Data: We share anonymized, aggregated insights with third parties for research and analytics.
4. Data Security & Retention
We implement encryption (HTTPS/TLS), secure hashing, and role-based access controls to protect your data. All data transmissions and stored data are encrypted.
Data Retention: Account information is retained while your account is active. Payment records are retained for 7 years for legal compliance. Inactive accounts (2+ years) may be deleted with notice.
Your Responsibility: Keep your password confidential and log out from shared devices.
5. Your Privacy Rights
You have the right to access, correct, delete, or download your personal data. You can:
- Request a copy of your data
- Export your listening history and playlists
- Delete your account and associated data
- Unsubscribe from marketing emails
- Opt-out of analytics tracking via app settings
To submit a privacy request, contact us at privacy@castflow.com. We'll respond within 14 days.
6. Regional Privacy Laws
GDPR (EU): If you're in the EU, you have rights under the General Data Protection Regulation, including data access, correction, deletion, and portability. We process data based on legitimate interest and your consent.
CCPA (California): California residents have rights to know, delete, and opt-out of data sharing. CASTFLOW does not "sell" personal information but may share analytics data with advertising partners. You can opt-out in Settings.
7. Children's Privacy
CASTFLOW is not intended for children under 13. We do not knowingly collect data from children under 13. If you're a parent and believe we've collected your child's data, contact us immediately.
8. Contact Us
Privacy Questions?
📧 Email: privacy@castflow.com
🏢 Support: support@castflow.com
We aim to respond within 14 days. For GDPR/CCPA requests, we comply with statutory timelines (30–45 days).
CASTFLOW respects your privacy as a creator and listener. Thank you for trusting us with your audio journey.
This Privacy Policy applies to all CASTFLOW services. By using CASTFLOW, you agree to this Privacy Policy and our Terms of Service.