Castline
Sign inStart free
Menu

Privacy Policy

Last updated

  1. Who is responsible

    the company named at the foot of this page, at the address given there, is the Data Fiduciary for personal data processed by Castline under the Digital Personal Data Protection Act, 2023 (DPDP Act).

  2. What we collect

    • Account: email, password (stored only as a scrypt hash), verification timestamps.
    • Billing: name, phone, state, GSTIN and address when given, payment status. Card details are held by Razorpay; we see only the last four digits and the network.
    • Content: audio, video and screen recordings, transcripts, chat, markers, audience questions, show notes, edits, clips, translations, podcast show details.
    • Participants: the display names guests and audience members type.
    • Technical: hashed IP addresses for rate limiting and audience bans (never the raw address), session cookies, setup-check results (device, network speed, lighting).

  3. Why

    To provide the service you asked for (recording, processing, publishing), bill you, secure the service (rate limits, abuse prevention), send account emails, and meet legal obligations (tax records). We do not sell personal data and show no advertising.

  5. Service providers (Data Processors)

    • Amazon Web Services: storage in the US (us-west-1) and email.
    • MongoDB Atlas: database, hosted on Amazon Web Services.
    • Deepgram: transcription, US.
    • Anthropic: show notes and translation.
    • Google: Gemini, for the AI co-host; YouTube only if you connect it.
    • Razorpay: payments, India.
    • Real-time calls run on a LiveKit server we operate ourselves.

    Providers process data only on our instructions.

  6. Transfers outside India

    Some providers process data outside India, as the DPDP Act permits except to countries the Government restricts.

  7. Cookies and storage

    One essential session cookie keeps you signed in (7 days). Your browser stores your theme, the host name you last used and, for guests, the details needed to resume an upload. No analytics or advertising cookies.

  8. Retention

    • Account data: while your account exists.
    • Recordings: until you delete the session. Deleted files are quarantined and erased within 30 days; the session's small record is kept.
    • Billing and tax records: as long as Indian law requires (up to 8 years).
    • Rate-limit counters: 2 days. Sign-in sessions: 7 days. Operational alerts: 90 days.
    • Records of administrative actions on accounts: kept for accountability.

  9. Your rights

    Access, correction and completion, erasure, grievance redressal, and nominating someone to act for you. Ask through castline.kodetra.com/support (topic "Privacy"); we respond within 30 days. Account deletion is currently handled by our team on request.

  10. Grievance Officer

    Grievance Officer, the company named at the foot of this page, at the address given there. Email support@kodetra.com, or write through castline.kodetra.com/support. If you are not satisfied, you may complain to the Data Protection Board of India.

  11. Children

    Castline is not for anyone under 18.

  12. Security

    TLS in transit, hashed passwords and tokens, httpOnly same-site cookies, access limited to staff who need it, with every administrative action logged.

  13. Changes

    We will post changes here and email you about material ones.