Privacy at Cast It

What we store

Organization names, administrator email addresses, password hashes, uploaded media, board layouts, display links, hashed device pairing credentials, browser type, screen heartbeat times, short-lived blocked viewer counts, billing references, and limited security logs are stored to operate the product. Account information and media are isolated by organization.

Payments and email

Stripe processes payment details. Cast stores Stripe references rather than raw card numbers. Configured authenticated SMTP delivers administrator invitations and password reset links. PDF and PowerPoint rendering happens in the viewer’s browser; the product does not send documents to a public document viewer.

Display access

TV links are private bearer links with browser pairing. An unpaired link can be claimed by its first browser; subsequent viewers require that browser’s essential device cookie and an active viewer lease. Do not put sensitive records on a public-facing TV. Organization administrators can disable or rotate links. Preview requires an administrator session.

Retention and controls

Archived content is retained in private storage for recovery; it is not served to TV links. Organization administrators can restore deleted media or permanently delete its original from Deleted media. Permanent deletion cannot be undone and frees its storage. Ask the platform owner about other organization data exports or removal. Keep source copies of important uploads. Screen access can be paused by billing status or the platform owner’s free-access controls.

Cookies

An essential secure session cookie keeps administrators signed in and protects forms. An essential HttpOnly device cookie pairs each TV link to one browser; resetting pairing revokes it. This product does not include advertising trackers.