Privacy Policy

1. Overview

This policy explains what information CastWize collects, how we use it, who we share it with, and the choices you have. It applies to the CastWize web app, our Android and Windows player apps, and castwize.tv. It doesn't cover third-party sites or services we link to or that you choose to embed in your own content.

2. Information we collect

Account & team information

Name, email address, password (stored as a salted hash, never in plain text), your company/team name, and your role on the team. If you enable two-factor authentication, we store a 2FA secret; if a teammate invites you, we store the invite email and its status.

Content you upload

Images, video, fonts, and the playlists/schedules you build from them. This may include content depicting other people (e.g. photos or video you display on your screens) — you're responsible for having the rights and any necessary consents for content you upload.

Screen & device data

When you pair a screen, we store a device token, the screen's name, its IP address, app version, available storage, and periodic status heartbeats so we can show you whether it's online. If you use the screenshot feature, we store the screenshots the device sends us. Playback data (which slide played, on which screen, for how long) is recorded to power analytics and proof-of-play reporting — this reflects what content played, not who was watching it; CastWize screens don't use cameras or track viewers.

Billing information

Payments are handled by our payment processor, Paddle, which acts as merchant of record. We never see or store your full card number. We do store your subscription status, the number of screens you're billed for, and your billing email.

Information from optional integrations

If you connect Google Drive to import media, we store the OAuth tokens needed to access the files you choose to import, encrypted at rest — we don't access anything in your Drive beyond what you explicitly import. If you sign in via Google or another SSO provider, we receive your name and email from that provider.

Technical & usage data

Standard web request data (IP address, browser/device type, pages visited), used for security purposes like detecting abuse and rate-limiting login attempts, and for basic product analytics.

3. How we use your information

To provide and operate the service (rendering your content on your screens, syncing schedules, processing payments); to secure your account (fraud/abuse prevention, 2FA, session management); to communicate with you (billing notices, alert notifications you've configured, support); and to improve CastWize (understanding how the product is used, fixing bugs). We don't sell your personal information, and we don't use your uploaded content to train any AI models.

4. How we share information

We share information with the vendors that help us run CastWize, and only to the extent needed for them to provide that service:

• Paddle — payment processing and billing (acts as merchant of record).
• Cloudflare — media storage and content delivery.
• Railway — application hosting and our database.
• Google — if you use Google sign-in or Google Drive import, and for our own outbound transactional email.
• Sentry — error monitoring, to help us find and fix bugs.

If you configure a widget that embeds third-party content (e.g. YouTube, Vimeo, Google Maps/Calendar, a weather widget, or an RSS feed), your screen device connects directly to that third party to render it, subject to that provider's own privacy policy — CastWize doesn't proxy or store that content. We may also disclose information if required by law, or as part of a merger, acquisition, or sale of assets (with notice to you). We don't sell your personal information to third parties.

5. Cookies & similar technologies

We use a session cookie to keep you signed in — it's required for the app to function and isn't used for advertising or cross-site tracking. We don't currently use third-party advertising or analytics cookies on the web app.

6. Data security

Passwords are hashed, never stored in plain text. Integration credentials (like Google Drive tokens) are encrypted at rest. We support two-factor authentication and let you view and revoke active sessions. Administrative actions are recorded in an audit log. Data is encrypted in transit via HTTPS. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

7. Data retention

We retain your information for as long as your account is active, or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. If you close your account, contact us and we'll delete or anonymize your information, except where we're required or permitted to keep it (for example, billing records we're legally required to retain).

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, object to or restrict certain processing, and (where applicable) lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below — we don't currently have a self-service tool for this, so we'll handle requests directly.

9. Children's privacy

CastWize is a business tool, not directed at children, and we don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

10. International data transfers

CastWize is operated from Israel, and we use service providers that process data in other countries, including the United States. Where we transfer personal information across borders, we take steps intended to ensure it remains protected consistent with this policy and applicable law.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you (for example, by email or an in-app notice) before they take effect. Continued use of CastWize after a change means you accept the updated policy.

12. Contact us

Questions about this policy, or want to exercise a privacy right? Email [email protected].