Terms of service

1. What you're buying

Castio is video meeting software. What we sell is a yearly install-and-update service. It includes:

• The install. A Castio developer installs Castio in your own Cloudflare account, at an address on your own domain, like meet.yourfirm.com.
• Updates. Your install is connected to our update service, and new versions reach it as described in section 4.
• Support from the people who built Castio, as described in section 4.

We don't run your install for you. It runs in your Cloudflare account, and meeting video and audio travel through Cloudflare RealtimeKit in that account, not through our servers.

A free demo is different: we set it up in our own Cloudflare account, and it's provided as is. It's for testing Castio only, not for private or real meetings, and we wipe its data regularly.

2. Price, payment and renewal

The service costs $149 a year in US dollars, plus any sales tax that applies. Payments go through Stripe, our payment provider. Your first service year starts on the day you pay.

If we bill you by invoice, your service doesn't renew automatically. Until online payment is available, everyone is billed this way. About 30 days before your year ends, we email you an invoice for the next year, and it renews only if you pay it. You stay on invoices unless you choose to subscribe online. To switch, email us and we start your online subscription when your paid year ends, so you're never charged twice for the same months.

If you subscribe online, your subscription renews automatically every year until you cancel. On each anniversary of your first payment, we charge $149, plus any sales tax that applies, to the card you subscribed with, for the next service year. The only commitment is the year you've paid for.

If you subscribe online, you can also cancel online at any time in the billing portal, which arrives with online payment and is linked from each renewal reminder and confirmation email. You can always cancel by emailing hello@castio.app; we process email cancellations within one business day. Our confirmation emails include a link that opens a pre-filled cancellation email. Cancelling stops the next renewal, and there's no fee to cancel. Your service runs to the end of the year you've paid for. If you cancel before your renewal date, you aren't charged for the next year.

If you subscribe online, we email you:

• a confirmation after your first payment, with these renewal terms and how to cancel;
• a reminder 15 to 45 days before each renewal, with the price, the renewal date and how to cancel.

If the price is changing, we email you 7 to 30 days before the change applies, with the new price and how to cancel. A new price never applies to a year you've already paid for. Section 15 covers other changes.

In the billing portal you can also update your card and see your invoices, once it's live. If a renewal payment fails and isn't made, your service lapses, and section 5 says what happens then.

3. It runs in your Cloudflare account

Castio runs inside your own Cloudflare account: your Workers, your D1 database, your R2 storage and your KV namespaces. Your meeting records (users, meetings and settings) live there. Meetings run on Cloudflare RealtimeKit under your account. RealtimeKit handles meeting chat and keeps recordings in Cloudflare's own storage, unless your admin chooses to keep recordings in your R2 storage. You own your account and your data.

You need a Cloudflare account on its Workers Paid plan, and your domain has to use Cloudflare for its DNS. Cloudflare bills you directly for what your install uses, including meeting minutes. That bill is between you and Cloudflare, and paying it is up to you. We don't mark it up, and we don't see it unless you show it to us.

Your install keeps these links to us:

• Your Cloudflare API token. During the install you create a Cloudflare API token so Castio can be deployed in your account. Our install app (deploy.castio.app) keeps a copy, encrypted. The token lets whoever holds it change Workers, databases, storage and DNS, so it could reach the data stored there. The ready-made template it starts from covers every Cloudflare account and every domain the person creating it can reach, not only the one Castio uses, unless that person narrows it while creating it. We use it only to install, repair, update or remove your Castio install, when you ask or as part of the service. We never use it to read your meeting data unless you ask us to, to help you.
• Your install's sign-in signing key. Our install app also keeps this key, encrypted. Whoever holds it could sign in to your install as any of its users. We keep it so we can refresh your install's updater or change its update channel without breaking sign-in, and we use it for nothing else.
• Your Cloudflare API token runs your install. Your install uses it itself, for meetings and updates. You can revoke it in your Cloudflare dashboard at any time, but your install's meetings and updates then stop working until a new token is in place. Ask us first and we'll help you swap it.
• Update checks. Once an hour, your install asks our release server whether there's a new version. The check carries no personal data.
• Emails. Invitation and password-reset emails from your install are sent through our email provider, from a castio.app address.
• Error reports and performance data. When something fails, your install sends an error report to our error-tracking service, so we can find and fix the fault. It also sends performance data, including the web address involved, for about 1 in 10 ordinary requests and page loads. A setting that turns off error reports and performance data is coming to every install. Once it ships, you can turn them off.

Our privacy policy says what these carry and how long we keep it. Apart from these, we don't receive your meetings, recordings or your users' data unless you invite us in to help with something.

4. Updates and support

New versions appear in your install as an Update Now button (Settings > Updates). You choose when to apply them. If a new version fails its health check, your install tries, on its own, to roll back to the version it had. We publish new versions when they're ready; we don't promise a schedule or any particular feature. If you don't apply an update, you may miss fixes, including security fixes.

Support covers Castio itself: setup, faults and questions about how it works. Write to hello@castio.app. A person writes back. We don't promise a response time. Support doesn't cover your Cloudflare account itself, your domain's DNS provider, or other software.

5. If your service lapses

Your service lapses when a service year ends without renewing, because you cancelled, the renewal payment failed or you didn't pay the next year's invoice, or when we end the service under section 14. Then:

• Your install keeps running in your Cloudflare account. Castio has no built-in switch to disable, lock or shut down an install, and we won't use your Cloudflare token to do it.
• Updates end: we stop providing new versions, so you no longer get fixes, including security fixes. Your install keeps running on the version it has, and you can keep using the versions you have installed, as section 10 says.
• Direct support from us ends.
• Nothing in Castio checks whether you've paid, so today invitation and password-reset emails, error reports and performance data keep working after a lapse. We may change that, and we'll tell you before we do.
• We keep our copies of your Cloudflare API token and sign-in signing key until your install-app account is deleted. If you ask, we delete them sooner. You can also revoke the token yourself, as section 3 explains.

6. Refunds

Your fees pay for the install-and-update service: work we do for you, starting with the install. We refund:

• the unused part of your service year, when we end the service under section 14 for a reason other than your breach, or under section 13, or when you cancel because you object to a new provider under section 9; and
• whatever the law gives you a right to have refunded.

Apart from these cases, fees are non-refundable once the installation has started. That includes renewal charges. To avoid the next one, cancel before your renewal date.

A refund doesn't remove your install. It stays in your Cloudflare account, for you to keep or remove, and you keep the right to use the versions already installed, as section 10 says.

7. Acceptable use

You may not use Castio or our services to:

• break the law, or help someone else break it;
• record people without the notice or consent the law requires;
• send spam, or use invitation emails for anything other than inviting people to your install;
• share content that infringes someone else's rights, or that exploits or harms children;
• attack, overload or probe our release server, install app or email service, or try to reach another customer's data.

8. Your responsibilities

You're responsible for:

• your Cloudflare account: keeping it secure, keeping it in good standing, and paying its bills;
• your domain and its DNS;
• who you let into your install, what they do there, and keeping admin accounts secure;
• the content in your install, including recordings and chat;
• telling people when a meeting is recorded, and getting any consent the law requires before you record;
• having a lawful basis for the personal data your install holds, and giving your users your own privacy notice;
• any rules that apply to your field or your users, such as rules on children's data if you teach or tutor children;
• backing up what you need. We don't back up data outside what your Cloudflare account stores.

9. Personal data we handle for you

For the personal data in your install, you are the controller and Cloudflare is your provider. We don't receive your meeting video, audio, recordings or chat.

We act as your processor for two things: the invitation and password-reset emails your install sends through us, and personal data you show us while we help you. The subject is sending those emails and giving that help. It lasts as long as your install sends emails through us, which can continue after a lapse (section 5). The data is email addresses, names, your organization's name and sign-in links, and whatever you show us, about your install's users and the people they invite.

Error reports and performance data are different: we decide how they're used, to find and fix faults in Castio, so we handle them as controller, under our privacy policy. The Cloudflare API token and the sign-in signing key are credentials, covered by sections 3 and 5.

As your processor we:

• use the data only to provide the service and as you instruct, unless the law requires otherwise, in which case we tell you first unless the law forbids that;
• tell you if we think an instruction of yours breaks data protection law;
• make sure everyone who handles it is bound to keep it confidential;
• protect it with appropriate security measures;
• use only the providers listed in our privacy policy, under written terms that protect the data as these terms do, and tell you before we add or replace one. If you object, you may cancel and we refund the unused part of your service year;
• help you answer your users' requests to use their data protection rights, and help with security and data protection assessments where you need it;
• tell you without undue delay if we learn of a breach affecting it;
• delete it when the service ends, unless the law requires us to keep it, apart from our email provider's log, which it deletes on the schedule in our privacy policy;
• give you the information you need to show these rules are met, and let you or an auditor you choose check, with reasonable notice and at your cost.

If you're in the EU or the UK, sending this data to us is a transfer outside those places. For that data, the European Commission's standard contractual clauses (Module 2, controller to processor) and the UK Addendum to them form part of these terms, with these choices: Clause 9 option 2 (general authorisation for providers, with notice of changes as above); Irish law and the Irish courts for Clauses 17 and 18; and Annexes I and II filled in by this section and the Security section of our privacy policy.

10. The software and our name

Castio's software, documentation, name and logo belong to us or the people we license them from. These terms don't transfer ownership of any of it to you.

We give you a non-exclusive, non-transferable right to use the Castio software we install for you, for your own organization's meetings, in your own Cloudflare account. That right continues after your service lapses, for the versions you have installed. It doesn't let you copy the software to sell or give to others, or remove notices of ownership from it.

Castio includes open-source components written by others. Each keeps its own licence terms, and for that component those terms come first.

Your install shows your organization's name and logo. Where you haven't added a logo, it shows the name Castio. Its invitation and password-reset emails come from a castio.app address, under the name Castio. Your install doesn't show a "Powered by Castio" credit to guests. If a later version adds one, we'll update these terms before we publish that version.

If you send us ideas or feedback, we may use them without owing you anything.

11. What we don't promise

We provide the service with reasonable skill and care. Apart from that, and to the extent the law allows, Castio and the service are provided as is and as available, and we give no other warranty, express or implied, including any warranty of merchantability, fitness for a particular purpose or non-infringement.

We don't promise that Castio will run without interruption or errors, or that it will keep working with every change Cloudflare makes. We don't promise uptime: your install's availability depends on Cloudflare and on your account.

12. Liability

Nothing in these terms limits liability that the law doesn't allow to be limited, such as liability for fraud, or for death or personal injury caused by negligence.

Subject to that, and to the extent the law allows:

• neither of us is liable to the other for indirect or consequential loss, lost profits, lost revenue or lost data, except where caused by gross negligence or wilful misconduct;
• each side's total liability under these terms is limited to the fees you paid us in the 12 months before the event that caused the claim, or $149, whichever is more.

These limits don't apply to your duty to pay for the service, or to your duties under section 13.

13. Claims by others

You'll defend us against claims by others that arise from the content in your install, from recordings made without the notice or consent the law requires, or from your breach of section 7, and pay what a court finally awards or what you agree to settle for.

We'll defend you against claims by others that the Castio software, as we provided it, infringes their intellectual property rights, and pay what a court finally awards or what we agree to settle for. This doesn't cover open-source components (section 10), changes made by anyone but us, or Castio combined with something we didn't provide. If such a claim is made, we may change the software so it no longer infringes or, if that isn't reasonable, end the service and refund the unused part of your service year. Our duties under this paragraph are subject to the limit in section 12.

To rely on this section, the side asking must tell the other promptly, let it control the defence and any settlement, and give reasonable help. Neither side may settle in a way that admits fault for the other without its consent.

14. Ending the service

You can cancel at any time, as section 2 says.

We can end the service by emailing you:

• if you don't pay, or you break these terms and don't put it right within a reasonable time after we tell you;
• straight away, if your use breaks the law or section 7 in a way that puts people or our services at risk;
• if we stop offering the service, giving you reasonable notice first and refunding the unused part of your service year.

When the service ends, section 5 applies. Sections 5, 6, 9 to 13, 16 and 17, and any amounts owed, keep applying after the service ends.

15. Changes to these terms

We may change these terms. When we do, we post the new version here with a new effective date and email you about it, with how to cancel, before the change applies. A change applies to you from your next renewal, never to a year you've already paid for, unless you agree to it or the law requires it sooner. If you don't accept a change, cancel before your next renewal.

16. Governing law and disputes

These terms are governed by the law of the State of California, without regard to its conflict-of-law rules. Disputes go to the state and federal courts in the county where L&B GALORE LLC has its principal place of business. Nothing here removes rights that mandatory law where you are gives you.

17. General

These terms and our privacy policy are the whole agreement between us about the service. If part of them can't be enforced, the rest still applies. If we don't enforce a right straight away, we haven't given it up. Neither of us may transfer these terms without the other's agreement, except to a business that takes over the part of our business, or yours, that they relate to; the side transferring tells the other. Neither of us is responsible for a delay or failure caused by events beyond reasonable control, such as an outage at Cloudflare.

18. Contact

L&B GALORE LLC. Email hello@castio.app about these terms or to cancel. Legal notices to us go by email to hello@castio.app. We send notices to you at the email address you gave us. How we handle personal data: privacy policy.