Castline
Sign inStart free
Menu

Privacy Policy

Last updated

  1. Who is responsible

    the company named at the foot of this page, at the address given there, is the Data Fiduciary for personal data processed by Castline under the Digital Personal Data Protection Act, 2023 (DPDP Act).

  2. What we collect

    • Account: email, password (stored only as a scrypt hash), verification timestamps.
    • Billing: name, phone, state, GSTIN and address when given, payment status. Card details are held by Razorpay; we see only the last four digits and the network.
    • Content: audio, video and screen recordings, transcripts, chat, markers, audience questions, show notes, edits, clips, translations, podcast show details.
    • Participants: the display names guests and audience members type.
    • Technical: hashed IP addresses for rate limiting and audience bans (never the raw address), session cookies, setup-check results (device, network speed, lighting).

  3. Why

    To provide the service you asked for (recording, processing, publishing), bill you, secure the service (rate limits, abuse prevention), send account emails, and meet legal obligations (tax records). We do not sell personal data and show no advertising.

  5. Service providers (Data Processors)

    • Amazon Web Services: storage in the US (us-west-1) and email.
    • MongoDB Atlas: database, hosted on Amazon Web Services.
    • Deepgram: transcription, US.
    • Anthropic: show notes and translation.
    • Google: Gemini, for the AI co-host; YouTube only if you connect it.
    • Razorpay: payments, India.
    • Real-time calls run on a LiveKit server we operate ourselves.

    Providers process data only on our instructions.

  6. Transfers outside India

    Some providers process data outside India, as the DPDP Act permits except to countries the Government restricts.

  7. Cookies and storage

    One essential session cookie keeps you signed in (7 days). Your browser stores your theme, the host name you last used and, for guests, the details needed to resume an upload. No analytics or advertising cookies.

  8. Retention

    • Account data: while your account exists, and up to 30 days after you ask to delete it (see "Deleting your account").
    • Recordings: until you delete the session. Deleted files are quarantined and erased within 30 days. The session's small record is kept without its text: transcripts, chat, questions, notes and names are erased.
    • Billing and tax records: as long as Indian law requires (up to 8 years).
    • Rate-limit counters: 2 days. Sign-in sessions: 7 days. Operational alerts: 90 days.
    • Records of administrative actions on accounts: kept for accountability.

  9. Your rights

    Access, correction and completion, erasure, grievance redressal, and nominating someone to act for you. Ask through castline.app/support (topic "Privacy"); we respond within 30 days. You can delete your account yourself at any time (see "Deleting your account").

  10. Deleting your account

    Delete your account yourself, by entering your password: on castline.app from the account menu → Account → Delete account, or in the Castline phone app from Settings → Account → Delete account. The steps are at castline.app/delete-account.

    Your account is deleted 30 days after you ask. From the moment you ask you are signed out everywhere, your open sessions end, your shows leave podcast apps and your plan won't renew; no refund is made for the current period, but a payment that was already in progress when you asked is refunded. If you change your mind, sign in before the date and choose "Keep my account": everything comes back except your plan's renewal, which you turn back on yourself.

    On that day we delete:

    • your recordings and every file made from them (they are quarantined and erased by our storage within 30 days),
    • your transcripts, show notes, meeting summaries, chat, questions and markers,
    • your podcast shows and episodes, your AI personas and your profile,
    • your YouTube connection (we revoke our access at Google),
    • your email address, password and billing details on the account, after a last email telling you it is done. The address is then free to use again.

    We keep only: your shows' web addresses, reserved so no one else can take over your feed; a show we took down for abuse, or because the account was suspended, as evidence; invoices, credit notes and payment records, for as long as Indian tax law requires (up to 8 years); and the records of administrative actions on your account. The records of your sessions, shows and episodes stay as empty rows, without titles, text or names.

    A suspended account can be deleted the same way; it is deleted on its date, since a suspended account cannot sign in to keep it.

    Recordings a guest made in someone else's session belong to that session's host: ask the host to delete the session.

  11. Grievance Officer

    Grievance Officer, the company named at the foot of this page, at the address given there. Email support@kodetra.com, or write through castline.app/support. If you are not satisfied, you may complain to the Data Protection Board of India.

  12. Children

    Castline is not for anyone under 18.

  13. Security

    TLS in transit, hashed passwords and tokens, httpOnly same-site cookies, access limited to staff who need it, with every administrative action logged.

  14. Changes

    We will post changes here and email you about material ones.