Privacy policy

Who operates Castudio

Castudio is operated by Adam Downing, a UK sole trader trading as AdamDowning.dev.

Adam Downing is the data controller for personal information processed by Castudio. For privacy enquiries, contact privacy@castudio.io.

1. Information We Collect

We collect information you provide directly, including:

• Account information: name, email address, and password when you register
• Profile information: profile photo, bio, and preferences you add to your account
• Content: posts, captions, images, and media you create or schedule through the Service
• Payment information: billing details processed securely by our payment provider

We also collect data automatically, such as IP address, browser type, device identifiers, pages viewed, and interactions with the Service.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and send related notices
• Send product updates, security alerts, and support messages
• Respond to your comments and questions
• Monitor and analyse usage patterns to improve user experience
• Detect and prevent fraudulent or abusive activity

3. Information Sharing

We do not sell your personal information. We may share your information with trusted third-party service providers who assist us in operating the Service (e.g., cloud hosting, payment processing, email delivery), under strict confidentiality agreements. We may also disclose information when required by law or to protect the rights and safety of Castudio and its users.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

5. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage of sensitive data, and regular security audits. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access to your account.

6. Cookies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse how the Service is used. You can control cookie behaviour through your browser settings. Disabling certain cookies may affect the functionality of the Service.

7. Third-Party Services

Castudio connects to supported social platforms to publish the content you choose and retrieve performance information. Availability varies by platform; see our platform availability page. When you connect an account, you authorise the access shown on that platform's consent screen. Each platform also processes information under its own privacy policy.

Google and YouTube data

Castudio uses YouTube API Services. When you connect YouTube, we store your Google account email, channel identifier, channel name, handle and profile image, together with access and refresh tokens that let Castudio maintain the connection. We use this information to identify your connected channel and publish videos you select, with the title, description and visibility you choose.

For videos published through Castudio, we retrieve available performance data such as views, likes, comments, shares, watch time, viewing duration and subscriber changes. We use these figures to display reporting in your Castudio workspace. The information available depends on YouTube's reporting permissions and processing times.

You can disconnect YouTube from Castudio's Channels page to remove the saved connection and its tokens. Disconnecting does not delete videos already published on YouTube or your existing Castudio posts and reports. To request deletion of stored data, contact privacy@castudio.io. You can also revoke Castudio's Google access through your Google account permissions.

Google's handling of your information is described in the Google Privacy Policy.

8. Your Rights

Depending on your location, you may have rights under applicable privacy laws such as the GDPR (European Economic Area) or CCPA (California). These may include:

• The right to access and receive a copy of your personal data
• The right to correct inaccurate data
• The right to request deletion of your data ("right to be forgotten")
• The right to object to or restrict certain processing activities
• The right to data portability
• The right to opt out of the sale of personal information (CCPA)

To exercise any of these rights, please contact us at privacy@castudio.io.

9. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@castudio.io.