Privacy policy

Who we are

Castio is a product of L&B GALORE LLC, a California limited liability company. We are the controller for the personal data in this policy, except where the next section says otherwise. Contact us by email at hello@castio.app.

We have not appointed a representative in the EU or the UK, because we handle personal data from there only occasionally.

Data in a Castio install

Castio runs in each customer's own Cloudflare account. The user accounts, meetings and settings in an install are stored in that account. Meetings run on Cloudflare RealtimeKit under that account: video and audio travel between participants and RealtimeKit, RealtimeKit handles meeting chat, and it keeps recordings in Cloudflare's own storage unless the customer chooses to keep them in its own R2 storage. For that data, the organization that runs the install is the controller, and Cloudflare is its provider. We don't receive it, and we don't use the Cloudflare API token we keep (see below) to read it unless the organization asks us to, to help it. If you use an organization's Castio install, ask that organization about your data; its own privacy notice applies.

We send an install's invitation and password-reset emails for the organization that runs it, as its processor, under section 9 of our terms. Error reports and performance data from installs are ours: we are their controller, and this policy covers them.

What we collect

Visiting castio.app

Our pages set no cookies and load no analytics, advertising or tracking scripts. Their fonts and images come from castio.app itself. Cloudflare, which serves the site, processes your IP address and the details of each request to deliver the pages and protect the site from attacks. If the site's code fails while handling a request, an error report goes to Sentry, our error-tracking service.

The request form

On our request page you can ask us to install Castio, or for a free demo first. The form sends us your choice, name, company, website and email address. We store them in our own Cloudflare account and email them to our team's inbox. If saving or emailing your request fails, the error report to Sentry includes your company name.

The notify list

On the "Install it yourself" card on our home and pricing pages you can leave your email address to hear when Castio's code is public. We keep the address and the date you left it, in our own Cloudflare account, so we can send you one email when the code is public. We keep them until that email is sent or you ask us to delete them, whichever comes first. If saving your address fails, the error report to Sentry doesn't include it.

Free demos

If you ask for a free demo, we set up a Castio install in our own Cloudflare account with your organization's name and logo, and email you the link. We are the controller of what's in it, including anything you add while trying it. A demo is for testing Castio only, not for private or real meetings, and we wipe its data regularly.

Customers

When you buy the service or we install Castio for you, we keep:

• contact and billing details: name, email address, company, and phone number if you give it;
• payment records. Stripe handles payments; if you subscribe online, it keeps your card on file for renewals. We see the amount, date and status, and never your full card number;
• your agreement to the subscription terms, recorded when you subscribe online;
• an account on our install app, if one is made for you: email address, display name, phone number and business description if given, and your password, stored only as a hash;
• your install's details: your Cloudflare account ID, your install's address and the names of what it created in your account;
• the Cloudflare API token (your Cloudflare access key) you create during the install, encrypted. It can change Workers, databases, storage and DNS. Its ready-made template covers every Cloudflare account and every domain the person creating it can reach, unless that person narrows it. Section 3 of our terms says how we use it;
• your install's sign-in signing key (your install's sign-in key), encrypted. Whoever holds it could sign in to your install as any of its users. We keep it only to refresh your install's updater or change its update channel without breaking sign-in;
• what you write to us when you ask for help.

From Castio installs

• Update checks. Once an hour, an install asks our release server for the latest version. The request carries no personal data.
• Emails. When an install sends an invitation or a password-reset email, it goes through Resend, our email provider, on our account. Resend receives the recipient's email address and the email itself, which can include the inviter's name, the organization's name and a link to join or sign in.
• Error reports and performance data. When something fails in an install, a report goes to Sentry, our error-tracking service. Sentry also receives performance data from about 1 in 10 ordinary requests and page loads, failed or not. Both hold the web address or route involved, the browser and device type, and the install's name and version; error reports also hold the error message and where in the code it happened. A web address can carry personal data: the link in a password-reset email, for example, carries a one-time reset code, which can end up in a report from that page. Reports sent by the install's server can include the request's headers. Those can hold the user's IP address and a short-lived code that signs the user or a meeting guest in, valid for at most a few hours. We are changing this so these are removed before a report is sent. Reports from a user's browser go straight from that browser to Sentry, so Sentry receives the browser's IP address as part of the connection. An error message can sometimes contain personal data, such as an email address, when that's what failed. None of these reports carries meeting video or audio. A setting that turns off error reports and performance data is coming to every install. Once it ships, you can turn them off.

Nothing in Castio checks whether a customer has paid, so emails, error reports and performance data keep arriving after a customer's service lapses, as section 5 of our terms says. Updates end after a lapse, but an install may still check for them; that check carries no personal data.

Why we use it, and our legal basis

• To answer your request and set up your install or demo: steps you asked us to take before a contract, and our legitimate interest in replying to people who contact us.
• To send the one email you asked for when Castio's code is public: your consent.
• To provide the service (the install, updates, support and billing): our contract with you.
• To keep records for tax and accounting: our legal obligations.
• To keep castio.app, our install app and our release server running and secure, and to find and fix faults in Castio, using error reports and performance data from all of them and from installs: our legitimate interest in software that works and is safe to use.
• To send an install's invitation and password-reset emails: on behalf of the organization that runs it, as its processor.

We don't use personal data for advertising, we don't sell it, and we don't make decisions about you by automated means alone.

Who we share it with

We use these providers, each only for the job listed:

• Cloudflare: serves castio.app, runs our install app and release server, stores request-form entries and install records, and sends the notification emails for the request form and the install app.
• Sentry: error reports from castio.app, and error reports and performance data from our install app and Castio installs.
• Resend: invitation and password-reset emails from Castio installs.
• Stripe: payments and receipts, and, for online subscriptions, the yearly renewal charge, renewal reminder emails and the billing portal.
• The provider that hosts our team's email inbox: request-form notifications and email you send us.

We may also share personal data with professional advisers who must keep it confidential, with authorities where the law requires it, and with a buyer if Castio's business is sold, who would then be bound by this policy. We don't sell or share personal information.

International transfers

We are based in the United States, and our providers process data there and in other countries. If you're in the EU, the UK or Switzerland, your data is transferred to countries that may not protect it the way your own law does. For those transfers we rely on the safeguards each provider offers: the European Commission's standard contractual clauses with the UK addendum, or the EU-US Data Privacy Framework where a provider is certified. Email us for a copy of the safeguard that applies.

How long we keep it

• Request-form entries: we delete an entry when you ask, and otherwise within 12 months of our last message to you, unless you become a customer. We do this by hand; there is no automatic expiry yet.
• The notify list: your email address and the date you left it, until we send the one email about the public code or you ask us to delete them, whichever comes first.
• Free demos: we wipe their data regularly, with no fixed period.
• Billing records: as long as tax and accounting law requires. Support emails: while you're a customer, then deleted, apart from anything we need to settle a dispute.
• Your agreement to the subscription terms: at least three years, or one year after your subscription ends, whichever is longer.
• Your install-app account and its install records: until the account is deleted. Records of removed installs stay with the account. Once your install is removed you can delete the account in the install app, or ask us to.
• Your Cloudflare API token and your install's sign-in signing key: until your install-app account is deleted, or sooner if you ask us. Removing an install doesn't delete them on its own.
• Records deleted from our install app can be restored from Cloudflare's database history for up to 30 days.
• Error reports and performance data: kept for no longer than 90 days, then deleted by Sentry.
• Resend's log of install emails: kept for no longer than 90 days.

Cookies

Our pages on castio.app set no cookies. Cloudflare may set a strictly necessary security cookie there to tell people from bots. Our install app sets one sign-in cookie, which it needs to keep you signed in. We use no advertising or analytics cookies.

Your rights

Wherever you live, you can ask us what personal data we hold about you and how we use it, and for a copy, a correction or its deletion. You can also ask us to restrict or stop how we use it, object to our use based on legitimate interests, and receive it in a portable form. Using these rights never changes how we treat you. We don't sell or share personal information, and we don't use sensitive personal information for anything beyond providing the service. You can complain to your data protection authority; in the UK, that's the Information Commissioner's Office.

To use any of these rights, email hello@castio.app. We may ask you to confirm who you are. We reply within one month, and we don't charge for it. If your data is in an organization's Castio install, we pass your request to that organization, which decides it.

Children

Our site and service are for organizations and the adults acting for them. We don't knowingly collect personal data from children under 16. If you think we have, email us and we'll delete it. An organization that uses its install with children, for example for tutoring, is responsible for the notices and consents the law requires.

Security

We keep Cloudflare API tokens and install sign-in signing keys encrypted (AES-256-GCM) and install-app passwords only as hashes. Our sites use HTTPS. No system is perfectly secure. If a breach affects your personal data, we'll tell you and the authorities as the law requires.

Changes to this policy

When we change this policy, we post the new version here with a new effective date. If a change matters, such as collecting something new, we email customers before it applies. If we ever add analytics, advertising or tracking to castio.app, we'll update this policy before that ships, not after.

Contact

L&B GALORE LLC. Email hello@castio.app with any question about this policy or your data. Privacy requests go by email to hello@castio.app. The service itself: terms of service.