Privacy Policy

Information we collect

• Account information — your email address, username, display name, password (stored only as a hash), and any profile details you add (avatar, bio, website). If you sign in with Google on the website, we receive your Google account’s name, email, and profile picture.
• Date of birth — asked for when you sign up (or when you confirm it in Settings) and stored so we can enforce that Capricast is for adults 18 and older.
• Content you create — videos and their thumbnails, titles, and descriptions; comments; live-chat messages; community posts and comments; and poll votes.
• Direct messages — the messages you send in the Inbox and the photos, videos, audio, and files you attach. They are visible to the people in the conversation. We access them only to operate the service, act on a report, or meet a legal obligation.
• Camera, microphone, and recordings — in live broadcasts and conference rooms your camera and microphone are used only while you are in the room, after your device asks your permission. A room is recorded only when its host starts a recording. Recordings of conference sessions may be transcribed and summarized into a recap for the host.
• Audio you caption — when you use automatic captions in the video editor, the audio is sent for transcription.
• Usage and device data — pages viewed and interactions, approximate location derived from your IP address, browser and device type, and an analytics identifier, collected to run, secure, and improve the service. Crash and error reports include technical details about the failure.
• Ad data — free accounts and visitors may see a short video ad before a video. We record ad events (shown, watched, clicked) with the video and a one-way hash of your IP address and browser identifier, so the same view is not counted twice and creators are paid correctly. We do not use an advertising ID and do not sell or share data with ad networks for targeting.
• Notifications — if you turn on notifications, we store the push address your browser gives us. The Android app includes Google’s Firebase Cloud Messaging library, which creates a device identifier used to deliver push notifications.
• Payments and payouts — card payments on the website are handled by Stripe; we never receive full card numbers. Creators who receive payouts give their identity and bank details to Stripe Connect directly; we keep the resulting account status and records of earnings and payouts. Nothing can be bought inside the Android app.

How we use your information

To provide and maintain the service, show you videos and creators, deliver messages and notifications, process payments and creator payouts, enforce the age requirement and our Safety & Community Guidelines, prevent abuse and fraud, measure and fix the service, and comply with legal obligations.

Who processes it for us

We do not sell your personal information. These service providers process data on our behalf, only to provide their part of the service:

• Cloudflare — hosting, file storage, video storage and delivery (including captions for published videos), live and conference audio/video, conference recordings, and fallback transcription and summarization.
• Our own servers — the database that holds your account and content is self-hosted PostgreSQL that we operate; our primary caption transcription and recap summaries also run on servers we operate.
• Deepgram — speech-to-text for conference recaps, and a fallback for editor captions.
• Stripe — payments, subscriptions, and creator payouts (Stripe Connect).
• Google — sign in with Google (website), the Interactive Media Ads player that plays video ads, and Firebase Cloud Messaging for Android push notifications.
• PostHog — product analytics.
• Sentry — crash and error reporting.
• Resend — account email (for example password resets and notifications).
• Pushover — internal safety and operations alerts to our staff, which carry identifiers only, never content.

We may disclose information where the law requires it. Apparent child sexual abuse material is reported to the National Center for Missing & Exploited Children (NCMEC), as U.S. law requires, and preserved for law enforcement — see /safety.

Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can:

• update your profile in Settings;
• download a copy of your data from your account;
• delete your account in Settings or by following these steps;
• turn off notifications and camera/microphone access in your device settings;
• contact us at admin@capricast.com to exercise any right.

Cookies

We use cookies and similar technologies to keep you signed in and to understand usage. See our Cookie Notice for details.

Retention and deletion

We keep your data while your account is active. When you delete your account, we delete what you created — your videos (including the stored video files), direct messages and their attachments, comments, chat messages, and community posts — along with your profile, date of birth, sign-in credentials, and sessions. The full list is on the account deletion page.

Two kinds of data are kept after deletion. Content under an open or upheld safety report is removed from public view and preserved, because it may be evidence and the law can require us to preserve it. Financial records (earnings, payouts, and transaction history) are kept for accounting, tax, and fraud-prevention purposes, linked only to an anonymized identifier. We use industry-standard safeguards, and all data is encrypted in transit, though no method of transmission or storage is completely secure.

Adults only

Capricast is for adults 18 and older, and we do not knowingly collect personal information from anyone younger. If we learn that an account belongs to a child under 13, we remove it; an account we learn belongs to someone under 18 is restricted from uploading, spending, earning, and direct messages.

Changes and contact

We may update this Policy; the “Last updated” date reflects the latest version. Questions: admin@capricast.com. Safety reports: abuse@capricast.com.