Privacy Policy

What we collect

• Waitlist: your email address, when you joined and confirmed, which page or link brought you (for example a campaign tag), and a one-way hash of your IP address used only to stop spam. We never store the raw IP address.
• Account: your email address and a securely hashed password, managed by our authentication provider.
• Your designs: the images you upload, and for videos only the still frames your browser samples (the video file itself never leaves your device), plus the prompts we write for you, your change requests, and saved versions.
• Credits and plan: your plan, credit balance, and a log of credit use.
• Payments: handled by our payment provider. We receive the status of your purchase and subscription, never your full card or bank details.
• Usage analytics: anonymous, cookieless page-view and performance statistics (pages visited, referrer, country, device type). Private links, such as email confirmation links, are stripped before anything is recorded.

How we use it

• To run the service: generate and store your prompts, keep your account and credits working, and prevent abuse.
• To email you about your waitlist spot, your account, and product updates you asked for, including the launch. You can opt out any time.
• To understand, in aggregate, how people find and use Recast, so we can improve it.

We don’t sell or rent personal data, and we don’t use your uploads or prompts to train AI models.

Who processes it for us

We use a small number of trusted providers, each only for the job below:

• Supabase: database, authentication, and file storage.
• Anthropic: the AI model that reads your image or frames and writes the prompt. Under its commercial terms, customer content isn’t used to train its models.
• Vercel: website hosting, and cookieless analytics.
• Resend: sending email.
• Our payment provider: processing payments and, where it acts as merchant of record, handling sales tax.

Some of these providers process data outside your country. They are bound by their own data-protection terms.

How long we keep it

• Designs and prompts: until you delete them, or your account.
• Account data: while your account is open. When you delete your account, we delete your data, except records we must keep by law (for example invoices).
• Waitlist emails: until launch-related emails are done, or until you unsubscribe or ask us to delete it.

Cookies

We use only the cookies needed to keep you signed in and to remember a sidebar preference. We don’t use advertising or cross-site tracking cookies, and our analytics don’t use cookies.

Your rights

You can ask to access, correct, export, or delete your personal data, or withdraw consent to emails, at any time by writing to rahulsm9859@gmail.com. We’ll reply within 30 days. Depending on where you live (for example under India’s Digital Personal Data Protection Act, 2023, or the GDPR in Europe), you may also have the right to complain to your data protection authority.

Security

Data is encrypted in transit, access is restricted by row-level security so each account can only see its own data, and passwords are never stored in plain text. No system is perfectly secure, so please use a strong, unique password.

Children

Recast is not intended for anyone under 18, and we don’t knowingly collect their data.

Changes

If we change this policy in a meaningful way, we’ll update the date above and, for significant changes, let you know by email.