← Back to Home

Privacy Policy

Last Updated: January 4, 2026

1. Introduction

Session Cast (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email address)
  • Payment information (processed securely through Stripe)
  • Organization and team member information
  • Content you upload (videos, notes, adr cues, scripts)

2.2 Automatically Collected Information

  • Device information (IP address, browser type, operating system)
  • Usage data (features used, session duration, error logs)
  • Performance metrics (video synchronization accuracy, connection quality)

2.3 Legal Basis for Processing (GDPR)

We process personal data based on one or more of the following legal grounds:

  • Performance of a contract: Processing necessary to provide the Service you requested
  • Compliance with legal obligations: Processing required to meet regulatory or legal requirements
  • Legitimate interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, security, service improvement)
  • User consent: Processing based on your explicit consent, which you may withdraw at any time

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process payments and manage subscriptions
  • Send service-related notifications and updates
  • Improve Service performance and user experience
  • Detect and prevent fraud or security issues
  • Comply with legal obligations
  • Respond to support requests

4. Data Security and Encryption

Session Cast implements enterprise-grade security measures to protect your data:

  • Strong encryption is used to protect video content in transit and at rest, using modern cryptographic standards
  • Ephemeral keypairs with forward secrecy
  • Cloud Key Management Service for encryption key protection
  • Multi-tenant data isolation with tenant-scoped access controls
  • Rate limiting and abuse prevention to protect against unauthorized access
  • JWT-authenticated downloads with time-limited expiration
  • Comprehensive audit logging of all key access attempts
  • Industry-standard TLS encryption for all data in transit

Your uploaded videos are encrypted before transmission and remain encrypted at rest in our secure cloud storage. Encryption keys are protected using multiple layers of security and access controls.

While we employ industry best practices and invest heavily in security infrastructure, no security system is infallible, and we cannot guarantee absolute security against all possible threats.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time, after which we will delete your personal information within 30 days, except as required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

Certain operational logs, audit records, and billing records may be retained longer where required for security, compliance, or legal obligations.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: Third-party vendors who help us operate the Service (e.g., Google Cloud, Cloudflare, Stripe)
  • Legal Requirements: When required by law, subpoena, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share information

7. Third-Party Services

Session Cast uses the following third-party services:

  • Firebase: Authentication and database (Google Cloud)
  • Google Cloud Platform: Cloud Functions, KMS, Secret Manager
  • Cloudflare: R2 storage and Workers for secure video delivery
  • Stripe: Payment processing
  • LiveKit: Real-time video and audio communication

These services have their own privacy policies. We encourage you to review them.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and data
  • Portability: Receive your data in a machine-readable format
  • Opt-Out: Unsubscribe from marketing communications
  • Restriction: Request we limit how we use your data

To exercise these rights, contact us at privacy@session-cast.com. We may require verification of your identity before fulfilling requests. We respond to privacy requests within the timeframes required by applicable law.

9. Cookies and Tracking

We use essential cookies and similar technologies required for authentication, security, and service operation. We do not use cookies for targeted advertising.

10. Children's Privacy

Session Cast is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure appropriate safeguards are in place for international data transfers.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected and how it's used
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising CCPA rights

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability. You also have the right to object to processing and to lodge a complaint with a supervisory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@session-cast.com

Support: support@session-cast.com