Privacy policy

1. Who we are

CastNest operates the CastNest video streaming platform at https://castnest.com and the application at https://app.castnest.com. This policy explains what personal data we collect, why we collect it, and what you can do about it.

If you have a question about anything here, contact us at support@castnest.com.

2. Data we collect

We collect three broad categories of data.

• Account data you give us: name, email address, organization, billing details and any information you include in support requests.
• Usage data generated by the service: streams created, bandwidth and storage consumed, destinations connected, and log data such as IP address, browser and device type.
• Viewer data from playback: aggregated metrics including approximate location, device class, watch time and playback quality. This is used to produce your analytics and to operate the CDN.

3. How we use your data

When you submit the contact form, we use SMTP2GO to deliver your name, email address, organization, topic and message to our team so we can respond.

We process personal data to provide and operate the service, to bill you, to provide support, to keep the platform secure, and to comply with our legal obligations.

We also use aggregated, non-identifying usage data to understand how the platform performs and where it should improve. We do not sell personal data.

4. Legal bases for processing

Where GDPR applies, we rely on the following legal bases: performance of a contract for providing the service you have signed up to; legitimate interests for security, fraud prevention and product improvement; consent for optional marketing communications; and legal obligation where the law requires us to retain or disclose information.

5. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to maintain session security. These cannot be disabled without breaking the service.

We use Google Analytics on this website only after you accept non-essential cookies. You can reject them or change your choice at any time using Cookie settings. We store that choice in your browser. Contact-form fields are not included in the analytics events we send.

6. Sharing and sub-processors

We share data with service providers who help us run the platform — including hosting and CDN providers, payment processors and support tooling. Each is bound by contract to process data only on our instructions.

We may disclose data where we are legally required to do so, or to protect our rights, the safety of users or the integrity of the service.

7. International transfers

Because content is delivered from edge locations worldwide, data may be processed outside your country of residence. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as standard contractual clauses. EU-based processing is available on request for customers who require it.

8. Retention

Account data is retained for as long as your account is active and for a limited period afterwards to meet legal and accounting requirements. Analytics data is retained for 12 months on standard plans. Recordings and uploaded video are retained until you delete them or close your account.

9. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to processing, to receive a portable copy, and to withdraw consent where processing relies on it.

To exercise any of these rights, email support@castnest.com. We will respond within the time limits set by the applicable law. You also have the right to complain to your local data protection authority.

10. Security

We use encryption in transit, access controls, network segmentation and regular review of our infrastructure to protect personal data. No system is perfectly secure, but we take reasonable and proportionate measures and will notify you of a breach affecting your data where the law requires it.

11. Children

The service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the service changes or the law requires. Material changes will be notified to account holders by email or in the dashboard, and the date at the top of this page will always reflect the current version.