Privacy Policy

Last updated 1 November 2026. This policy explains what Castpace, run by Chetan Dhalia, collects and how it is used.

YouTube API Services

Castpace uses YouTube API Services. When you connect a YouTube channel or add one to watch, we read and write data through those services. By doing so you also agree to the YouTube Terms of Service. Google's use of data is covered by the Google Privacy Policy.

Google Drive

You can connect Google Drive, so your videos stay there rather than on our servers. This is a separate sign-in and asks Google for one permission, which covers only the files you choose in Google's file picker and the files Castpace creates for you. We cannot see the rest of your Drive.

• What we keep: the email address of that Google account, an encrypted token, and for each file you pick its name, type, size, dimensions, length, Drive link and ID, and a small thumbnail.
• How your files are used: we read a file when you preview, edit or publish it, and send it to the networks you chose. A video going to YouTube passes straight through without being saved. Other networks and our video tools need a whole file, so we make a temporary copy on our server and delete it when that job ends. If something fails, leftover copies are deleted within a day or so.
• What we change: when you edit a video here, the result is saved as a new file in your Drive. We never edit or delete files already there, and removing a file from your Castpace library leaves it in Drive.
• AI: if you ask AI to describe an image from Drive, that image is sent to OpenAI for that one request.

We do not sell Drive data, use it for advertising, or use it to train AI models. Our staff do not read your files unless you ask us to for support, or the law or a security problem requires it.

Castpace's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect

• Your account: your name, email, a salted hash of your password, your plan and your acceptance of this policy.
• What you create: posts, schedules, files you upload, brand settings, and tokens or credentials you give us to connect an account.
• From YouTube, for channels you connect through Google sign-in: channel name, handle and picture; your list of uploads with titles, descriptions, tags, thumbnails links, durations and public statistics; comments on your videos, including the commenter's display name and picture; and daily views and watch time from YouTube Analytics.
• From YouTube, for public channels you choose to watch: the public channel details, upload list and public statistics, read with our API key. We do not use your Google account for this.
• From Google Drive, if you connect it: the details listed in the Google Drive section above.
• From other networks you connect: similar details, as that network's own terms allow.
• Technical data: a sign-in cookie, your IP address in short-lived server logs, and an activity log of changes in your workspace.

For YouTube we ask Google for three permissions: to upload videos, to manage your comments and video details, and to read your YouTube Analytics. We never see your Google password. We do not download or store copies of YouTube videos.

How we use it

• To publish what you schedule, to the channel and with the visibility you chose. We do not change a video's visibility unless you tell us to.
• To show your numbers, comments and reports back to you and to the team members you add.
• To send emails about your account, such as confirming your address or resetting a password.
• To bill you and prevent abuse.

We do not sell your data, and we do not use it for advertising. Reports you choose to share by link can be seen by anyone who has that link until it expires or you remove it.

Who we share it with

We share data only with the people you add to your team and with these service providers, who act for us:

• OpenAI, only when you use an AI feature. The text or image involved, which can include a comment you want a reply to, is sent to answer that one request, with response storage turned off.
• Paddle, who take payment and handle tax as our reseller.
• Resend, who deliver our emails.
• Our hosting provider, who run our server and hold its backups.
• The networks you connect, which receive what you choose to publish.

We may disclose data if the law requires it. No third party serves advertising or other content in Castpace.

Cookies and storage on your device

We place one cookie, which keeps you signed in. Your browser's local storage remembers your theme and last brand. We use no advertising or tracking cookies.

How long we keep it

• Data read from YouTube is refreshed regularly. Anything we can no longer refresh within 30 days is deleted, unless YouTube's policies allow longer for that kind of data.
• Statistics for channels you authorized may be kept to show history, and we check at least every 30 days that your authorization is still valid and that the videos still exist. Statistics for public channels you only watch are kept for no more than 30 days.
• If YouTube approves us for longer storage, public statistics and metrics we calculate may be kept for up to 36 months. Titles, names and comment text still follow the 30-day rule.
• Details of files picked from Google Drive stay until you remove the file, disconnect Drive or delete your account.
• Passwords are stored only as salted hashes, and connected-account credentials are encrypted.

Revoking access and deleting your data

• Disconnect a channel in Settings. We revoke our Google token straight away and delete the data we hold for that channel.
• Disconnect Google Drive in Settings. We revoke our Google token straight away and delete the details of the files you picked. Your files stay in Drive. Google ends everything one Google account gave us when a token is revoked, so a channel or Drive using that same account has to be reconnected.
• Delete stored YouTube data in Settings. This removes it from Castpace as soon as you press the button, and from backups within 7 days. It does not change anything on YouTube. To delete videos or comments on YouTube, use YouTube Studio or another authorized app.
• Delete your account under Plan and billing. All your data is removed immediately, and from backups within 7 days.
• Through Google: you can also revoke our access at any time on the Google security settings page. We check regularly, and we delete data related to you within 30 days of finding that access has been revoked.

Your rights

You can ask us for a copy of your data, or to correct or delete it, by writing to chtndhalia@gmail.com. Depending on where you live you may have further rights, including complaining to your data protection authority.

Changes

If we start using data in a new way, we will ask you to accept the updated policy before continuing.

Contact

Questions or complaints about privacy go to chtndhalia@gmail.com.