PRIVACY POLICY

Last Updated: November 2, 2025

1. Introduction

SafeCast ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

• Email Address: Required for account creation and verification
• Name: First name and last name (if provided)
• Password: Encrypted and stored securely
• Account Type: User account classification
• Email Verification Status: Whether your email is verified

2.2 Video Information

• Video Metadata: Titles, descriptions, upload dates
• Video Files: Stored temporarily during processing
• YouTube URLs: If videos are uploaded to YouTube
• Sharing Links: Generated links and access logs

2.3 Usage Information

• Access Logs: When and how you access the Service
• Video Views: Statistics on video access
• Sharing Activity: Who accessed your shared links
• System Information: Device and browser information for security

2.4 Authentication Information

• JWT Tokens: Encrypted authentication tokens
• Google OAuth Data: If you connect Google account (email, profile)
• Session Data: Login sessions and activity

3. How We Use Your Information

3.1 Service Provision

• To provide and maintain the Service
• To authenticate and authorize access
• To process video uploads and sharing
• To send verification and notification emails
• To generate secure sharing links

3.2 Security and Safety

• To detect and prevent fraud
• To enforce our Terms of Service
• To protect user accounts
• To monitor for unauthorized access

3.3 Communication

• To send email verifications
• To send service notifications
• To respond to your inquiries
• To notify you of important changes

4. How We Share Your Information

4.1 We Do NOT Sell Your Data

• SafeCast does not sell your personal information
• We do not share your data with advertisers

4.2 Service Providers

We may share information with third-party service providers:

• Neon (PostgreSQL): Database hosting for user and video data
• Google (OAuth/YouTube): For authentication and video uploads
• Email Services (Gmail/SMTP): For sending emails
• Render: Backend hosting infrastructure

4.3 Legal Requirements

We may disclose information if required by law:

• To comply with legal obligations
• To respond to court orders or subpoenas
• To protect our rights and safety
• To prevent illegal activities

4.4 Business Transfers

• If SafeCast is acquired or merged, user information may be transferred
• We will notify you of such changes

5. Data Storage and Security

5.1 Data Storage

• Database: Stored in Neon PostgreSQL (cloud database)
• Location: Data may be stored in multiple geographic regions
• Retention: We retain your data while your account is active

5.2 Security Measures

Encryption:

• Passwords are hashed using bcrypt
• Sharing links use AES-256-GCM encryption
• Authentication tokens are encrypted

• Access Controls: Limited access to user data
• Secure Connections: HTTPS/TLS for all communications
• Regular Updates: Security patches and updates

5.3 Data Breach

• We will notify you within 72 hours of any data breach
• We will take immediate steps to secure affected accounts

6. Your Rights and Choices

6.1 Access and Control

• Access: You can view your account information
• Update: You can update your profile information
• Delete: You can delete your account and data
• Export: You can request a copy of your data

6.2 Email Preferences

• You can opt-out of promotional emails
• You cannot opt-out of service-related emails (verification, security)

6.3 Cookies and Tracking

• We use session cookies for authentication
• We do not use third-party advertising cookies
• You can disable cookies, but this may affect functionality

7. Children's Privacy

• SafeCast is not intended for children under 13
• We do not knowingly collect information from children under 13
• If we discover we have collected information from a child under 13, we will delete it immediately

8. Third-Party Services

8.1 Google Services

• OAuth: When you connect Google, we access your email and profile
• YouTube API: When uploading videos, we access YouTube account information
• Google Privacy Policy: Your use of Google services is subject to Google's Privacy Policy

8.2 Links to Other Sites

• SafeCast may contain links to third-party websites
• We are not responsible for the privacy practices of other sites
• Read the privacy policy of any site you visit

9. Data Retention

9.1 Account Data

• We retain your account data while your account is active
• After account deletion, we delete data within 30 days
• Some data may be retained for legal or security purposes

9.2 Video Data

• Videos may be stored on YouTube (if uploaded)
• Sharing link logs may be retained for security purposes
• We do not retain video files after processing

10. International Data Transfers

• Your data may be transferred to and stored in countries outside your jurisdiction
• We use service providers that may be located in different countries
• We ensure adequate protection measures are in place

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: You can request what personal information we collect
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

12. EU Privacy Rights (GDPR)

If you are in the EU, you have additional rights:

• Right of Access: You can access your personal data
• Right to Rectification: You can correct inaccurate data
• Right to Erasure: You can request deletion of your data
• Right to Restrict Processing: You can limit how we process your data
• Right to Data Portability: You can receive your data in a portable format
• Right to Object: You can object to processing of your data

13. Changes to Privacy Policy

• We may update this Privacy Policy at any time
• We will notify you of material changes via email or in-app notification
• Continued use after changes constitutes acceptance

14. Contact Us

For privacy questions or to exercise your rights:

• Email: teamsafecast@gmail.com
• Website: safecast.site

15. Data Controller

SafeCast is the data controller for your personal information.

• Controller: SafeCast
• Email: teamsafecast@gmail.com