Privacy Policy

CastCraft Studio (“we”, “us”, “our”) provides professional training for podcast creators. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to you.

1. Data we collect

• Account data: name, email address, password hash.
• Billing data: invoice and tax information processed by payment providers.
• Learning data: course enrollments, progress, assignments, and feedback.
• Communications: messages you send via our contact form or email.
• Technical data: IP address, device and browser details, cookies, and analytics events.

2. How we use data

• Provide and improve courses and cohort experiences.
• Authenticate users and secure accounts.
• Process payments and issue receipts.
• Send administrative messages (e.g., enrollment, policy updates).
• Analyze anonymized usage to enhance accessibility and performance.

3. Legal bases

We process data under contract necessity (to deliver courses), legitimate interests (to improve services and prevent fraud), consent (for certain cookies/marketing), and legal obligations (tax and accounting).

4. Sharing

We share personal data with service providers under strict agreements: payment processors, cloud hosting, email delivery, and analytics. We do not sell personal data.

5. Cookies

We use essential cookies for authentication and security, and optional cookies with consent to understand aggregate usage. You can control cookies via the cookie banner or your browser settings.

6. Data retention

We keep account and course records while your account is active and for up to 7 years afterward for legal and audit purposes, unless a longer period is required by law.

7. Your rights

• Access a copy of your personal data.
• Request correction or deletion where applicable.
• Object to or restrict processing in certain cases.
• Data portability for information you provided to us.
• Withdraw consent at any time where processing is based on consent.

8. Security

We apply encryption in transit, access controls, and regular audits. No method is perfectly secure; we work continuously to improve safeguards.

9. International transfers

Where data leaves your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses and data processing addenda.

10. Children

Our services are not directed to children under 16. If we learn that a child has provided personal data, we will delete it.

11. Contact

For privacy inquiries or to exercise your rights, email [email protected] or write to Privacy, CastCraft Studio, 548 Market St, San Francisco, CA 94104.

12. Changes

We may update this policy to reflect legal, technical, or business changes. We will post the updated date and, where appropriate, notify you by email.