Legal
Privacy Policy
Effective date: [DATE]
Draft for attorney review. Not legal advice, and not final. Plain-English copy in the Recast voice for counsel to verify against applicable law. Bracketed items need decisions.
Who we are: Recast [LEGAL ENTITY NAME], Missouri, USA. Contact: [PRIVACY EMAIL].
The short version
We collect what we need to run a paid video platform and nothing more. We don't run ads, we don't use ad trackers, and we never sell your data. The one deliberate share to know about: when you pay a creator, that creator gets your display name, email, and payment history with them, because on Recast your relationship is with the creator, not with us.
What we collect
Account basics. Email, display name, password (stored hashed, never readable by us), your invite attribution (which creator or member brought you), and your role (fan, creator, or both).
Money. What you bought, backed, or support monthly, amounts, and dates. Card numbers never touch our servers; payments are processed by Stripe, and creators' payout identity verification (KYC, tax forms) is handled by Stripe Connect. See Stripe's privacy policy for their handling.
Watching, minimally. Which titles you own, your playback position (so the film resumes where you left it), and whether you finished, which powers your shelf and the platform's completion stats. We do not build advertising profiles from your viewing, because we have no advertising.
Premieres. If you join a premiere room, your presence and chat messages exist during the event. Chat is not preserved after the credits roll.
Creators, additionally. Your application materials, the works you upload, and your ledger of earnings.
Technical. Standard server logs (IP address, browser type, timestamps) for security and debugging, and the minimum cookies needed to keep you signed in and remember your preferences. No third-party advertising or cross-site tracking cookies exist on Recast. [Attorney: cookie disclosure table if required.]
What we deliberately don't do
No selling or renting personal data, to anyone, ever. No advertising networks, pixels, or data brokers. No engagement profiling. No inferring things about you to keep you watching longer; our business model doesn't want your attention, it wants you to finish the film and go to bed happy.
The share that matters: creators you pay
When you buy from, back, or become a patron of a creator, we share with that creator: your display name, your email, and your history with them (what you bought or backed, when, and amounts). This is by design and disclosed at checkout: on Recast, your support creates a direct relationship, and creators can export their supporter lists. Creators must use this data lawfully and may not spam you. If a creator misuses your data, tell us: [PRIVACY EMAIL]. We do not share your viewing behavior on other creators' work with anyone.
If you opt into a title's public credits, your chosen display name and backer number appear on that title's credits, visibly, permanently, by your choice at purchase.
Service providers we use
Stripe (payments and payouts), Bunny Stream (video storage and delivery), Amazon Web Services (infrastructure), Resend (transactional email: receipts, resets, premiere notices), Ably (premiere rooms). Each receives only what it needs to do its job under contract. [Attorney: confirm final vendor list and DPAs.]
We send transactional email (receipts, password resets, premiere reminders for titles you own or back) and, if you opt in, a weekly slate note. Every non-transactional email has an unsubscribe link that works.
Your controls
Export. You can download your account data, your shelf list, and (creators) your full supporter list and ledger, anytime, from settings.
Delete. You can delete your account from settings. We remove your personal data within [30] days, keeping only what the law requires us to keep (tax and transaction records) and honoring the licenses of fans who own your work if you're a creator. Credits you chose to place on titles remain unless you ask us to anonymize them.
Correct. You can edit your account details anytime. [Attorney: state-specific rights disclosures (California, Colorado, etc.) and request mechanics.]
Age
Recast accounts are for adults, 18 and over. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it. [Attorney: COPPA posture given previews are watchable without accounts.]
Security
Passwords are hashed with modern algorithms, traffic is encrypted in transit, payment data lives with Stripe, and admin access to systems is limited and logged. No system is perfect; if a breach affects your data, we'll notify you as the law requires, and plainly.
Changes
If we change this policy in a way that matters, we'll email you at least [14] days before it takes effect, in plain English, with the actual change described, not buried.
Contact
[PRIVACY EMAIL] · Recast, [MAILING ADDRESS]
Also see our Terms of Service.