1. Who this policy covers
This policy explains how MCast Studio handles personal information when you use our website, desktop application, account, licensing, billing and support services. Contact support@mcaststudio.com with privacy questions or requests. The seller's legal identity and billing contact are shown before a purchase and on your invoice.
2. Account information
Google sign-in provides your account identity, verified email address and available profile information. To complete account setup, we require your full name, mobile number and country. Your city, address and social profile links are optional. Account details are private unless you separately choose to share them. We do not receive your Google password.
3. Licensing and system information
We process your selected plan, trial and subscription dates, device activations, device name, application version, operating system and available OS version. Device identifiers and security information help manage activation limits, prevent repeated trials and protect account access. The OS information recorded with a trial or purchase may differ from the computer you later use; browsers may withhold precise version information.
4. Agreements and service records
When you accept our terms, we record your agreement, the terms version, date and time, account identity and IP address information. Our services also process request, security and error information needed to operate and protect the service. Acceptance of the terms does not opt you into marketing.
5. Payments, subscriptions and invoices
Cashfree or Paddle processes checkout and recurring payment authorisation, depending on the provider shown at checkout. We share the customer and order details needed to complete your purchase and receive payment references, amounts, currency, subscription status, refund status and related transaction information. Your account retains payment receipts, invoices and transaction records. We do not ask you to enter a card security code, banking password or payment OTP into an MCast account form. Enter payment credentials only in the payment provider's secure flow.
6. Production content and connected services
You choose the media, devices, destinations and external services used in your productions. Connecting a streaming, guest, chat or other provider may share content, messages, authorisation credentials or connection information with that provider as required for the feature you use. Recordings, projects and local application data are stored on your computer or the locations you choose. This policy does not grant us ownership of your productions. Do not include private recordings, stream keys or access tokens in support messages.
7. Website storage and external content
Essential browser storage supports sign-in, security, requested account flows, your privacy choice and selected website language. Optional saved public content, external media and visitor statistics are off until you allow them. External videos require your click as well as media permission; external community and Blog images also require media permission. Providers may receive your IP address and browser information when allowed content loads or you follow an external link. You can withdraw optional permission from Cookie preferences in the footer. See our Cookie policy for the storage inventory, duration and controls. Clearing essential browser storage may sign you out.
If you choose Visitor statistics, we use Google Analytics to understand public page visits, approximate location, device and browser types, referring websites and download or Store-link clicks. We do not request precise location or track account, sign-in, payment, support-ticket or administrator pages. We do not send names, email addresses, account identifiers, form entries, URL queries or fragments; referring URLs are reduced to their website origin. Google processes the browser and network information needed for these measurements. Advertising features and Google signals are disabled. You can withdraw this choice at any time; this stops further measurement from our tag and removes its first-party cookies, but does not undo information already received by Google.
8. How we use and share information
We use information to provide the service you request, manage trials and paid access, issue invoices, answer support requests, maintain security, prevent fraud and meet applicable legal duties. Where consent is required, you may withdraw it for the relevant processing, subject to processing that is otherwise lawfully required. We do not sell your personal information.
Access is limited to authorised personnel and service providers as needed for authentication, hosting, storage, payments, distribution, communications and support. These include Google/Firebase, Cashfree, Paddle and the relevant application store or connected service. When checkout uses Paddle, Paddle processes the purchase as merchant of record, including applicable taxes, subscriptions, invoices and refunds. We may disclose information where legally required, to address fraud or security incidents, or in a business transfer subject to applicable protections. We do not publish your private account or financial records.
Operational notifications
When administrator WhatsApp alerts are enabled, Meta/WhatsApp processes limited signup, trial and confirmed purchase information to notify the authorised business owner. These alerts may include your name, country, available operating system and MCast Studio version, event date and time, plan and payment amount. We do not include account passwords, sign-in links, payment card details or support conversations. These are private administrative notifications, not customer marketing messages.
Optional customer WhatsApp updates
You may separately choose WhatsApp updates using the mobile number and country saved in your Profile. We use those account details to determine the international number; there is no separate customer WhatsApp number. Operational updates cover trial start, successful purchase and plan activation, confirmed payment failure, subscription cancellation and failed renewal. A trial-end reminder with a plans link has a separate optional preference because it may contain promotional content. Both preferences start off, and using your account does not require either permission.
If you choose these updates, Meta/WhatsApp processes your saved Profile number and the message details needed for that event, such as your name, plan, payment amount, trial dates and paid access dates. Trial-start messages include our tutorials page; trial-end messages include our plans page. Purchase messages direct you to log in at mcaststudio.com to view your invoice. We do not send invoice access tokens, sign-in links, card information or support conversations in these customer messages.
You can withdraw either preference in Profile or ask support to stop messages. Withdrawal stops queued messages for that preference. Changing the saved mobile number or country to a different international number clears its previous permissions; you must choose updates again for the new number. We keep a record of your choice, number, disclosure version and dates to administer consent. Pending delivery records are private; identifying message details are removed when an attempt finishes, and remaining attempt records are removed by scheduled cleanup after 30 days. Account deletion also removes the account's queued WhatsApp records. Messages already sent remain subject to Meta/WhatsApp's own retention and your device settings.
Private support and administrator security
When you submit a support ticket, we store its subject, messages, account identity, selected category, the software context you provide and any attachments. Authorized support staff can read tickets and add internal notes that are hidden from customers. Screenshots and logs remain private and are downloaded only through authenticated access. Remove passwords, stream keys, API keys and unnecessary personal information before submitting them. We do not send ticket content to a translation service. Draft text remains in your browser memory until it is sent or you leave the support workspace.
Administrator access requires an email login link, an authenticator app and mobile verification. Google/Firebase processes authentication identifiers and phone numbers for authentication and abuse prevention. We store staff permissions, the verified mobile number, temporary login/session records and a security audit of administrative access changes.
9. Retention and deletion
We keep information for as long as needed to provide your account and purchased access, handle support and disputes, prevent abuse and comply with applicable financial and legal retention duties. Retention depends on the record and purpose. Account deletion may not immediately remove invoices, payment records or limited records that must lawfully remain. Backups are removed through their normal retention cycle. Ask us about the records relevant to your account.
You can request account deletion from My Account after confirming your identity. This disconnects devices, stops subscription renewal and removes your profile and sign-in account. We retain necessary invoices, credit notes and payment records separately. To enforce one lifetime trial per verified email and computer, minimal keyed hashes of the email and device remain after device removal or account deletion. These are pseudonymous eligibility records, not anonymous information, and are not used for advertising. They remain only for the anti-abuse purpose and applicable lawful retention; contact us to exercise rights that apply to those records.
Unsubmitted support attachments expire after 24 hours and are removed by scheduled cleanup. Resolved tickets close after seven days without a public update. Closed tickets and their attachments are removed after 365 days. Completing account deletion removes that account's tickets and support attachments. Private administrator sessions expire after one hour; temporary login proofs are also removed by scheduled cleanup.
10. Your choices and rights
You can review and update your profile, manage devices, view invoices and cancel subscription renewal from your account. Contact us to request access, correction or deletion of your information, withdraw applicable consent, or raise a privacy complaint. We may verify your identity before acting. Available rights, exceptions and response periods depend on the law that applies to you. You may also contact the competent privacy authority where that right applies. Cancelling renewal keeps paid access until its paid-through date. Deleting your account instead revokes account access and stops renewal as part of deletion. Deletion is not a refund request and does not remove any mandatory refund right.
11. Security and international processing
We use access controls and other technical safeguards to protect personal information. No online service or device is completely secure. Protect your Google account, computer and connected-service credentials, and report suspected unauthorised access promptly. Service providers may process information outside your country; applicable safeguards and legal requirements govern those transfers.
12. Children and changes to this policy
The account and purchasing services are intended for people legally able to enter the agreement. Do not provide a child's personal information without the permissions required by applicable law. Contact us if you believe a child has provided information without the required permission. We may update this policy as the service or law changes, display the revised date and provide additional notice or request consent where required.