Privacy Policy
Last updated: April 21, 2026
1. Introduction
Beltech Corp Holdings ("Company," "we," "us," or "our") operates the CAST platform ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. By using CAST, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide. We collect information you voluntarily provide, including: name, email address, and password when creating an account; payment information processed through Stripe; profile information including bio, avatar, and company name; AI clone data including reference images, voice samples, and persona descriptions; script content, scene prompts, and production data; casting room votes, notes, and feedback.
2.2 Automatically Collected Information. When you access the Platform, we automatically collect: device information (browser type, operating system, device identifiers); usage data (pages viewed, features used, actions taken, timestamps); IP address and approximate geolocation; referral source and session duration.
2.3 Behavioral Data. We collect behavioral data to improve the Platform, including: search queries and discovery patterns; audition and casting interaction data; content engagement metrics (clicks, copies, regenerations, discards); feature usage frequency and patterns.
2.4 Semantic Data. We generate vector embeddings from user-generated text content (scripts, prompts, bios, talent descriptions) using pgvector for semantic search and recommendation functionality. These embeddings are mathematical representations and do not contain readable personal information.
3. How We Use Your Information
We use collected information to: operate, maintain, and improve the Platform; process transactions and manage subscriptions; match talent with producers through AI-powered discovery; generate scene content and auditions; provide customer support; send administrative communications; analyze usage patterns to improve user experience; enforce our Terms of Service; comply with legal obligations.
4. Information Sharing and Disclosure
4.1 Public Information. Talent profiles, published productions, and producer portfolios are publicly visible by design. Information you include in these profiles is accessible to all Platform users and may be indexed by search engines.
4.2 Between Users. When a casting request or license is initiated, relevant information is shared between the Talent Owner and Producer, including names, production details, and licensing terms.
4.3 Service Providers. We share information with third-party service providers who perform services on our behalf, including: Supabase (database and authentication); Stripe (payment processing); AI model providers (scene generation); analytics services.
4.4 Legal Requirements. We may disclose information if required to do so by law, in response to a subpoena or court order, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.5 Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We retain behavioral and performance data in anonymized or aggregated form for analytics and platform improvement purposes. You may request deletion of your account and associated data at any time by contacting us.
Certain data may be retained after account deletion as required by law, for fraud prevention, or to enforce our Terms. Licensed content and completed transaction records are retained for the duration required by applicable financial regulations.
6. Data Security
We implement commercially reasonable technical and organizational security measures to protect your information, including: encryption of data in transit (TLS/SSL) and at rest; secure authentication via Supabase Auth with Row Level Security; regular security audits and vulnerability assessments; access controls limiting employee access to personal data; secure payment processing through PCI-compliant Stripe infrastructure.
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request your data in a structured, machine-readable format.
- Opt-out: Opt out of marketing communications at any time.
- Restriction: Request restriction of processing of your personal information in certain circumstances.
To exercise any of these rights, contact us at privacy@cast.beltech.io.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain session state, remember preferences, and analyze usage patterns. Essential cookies are required for Platform functionality, including authentication tokens stored as browser cookies. You may configure your browser to reject cookies, but this may limit your ability to use certain features of the Platform.
9. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction. By using the Platform, you consent to the transfer of your information to these countries.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined by the CCPA. To exercise your California privacy rights, contact us at privacy@cast.beltech.io.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a revised "Last updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
For questions or concerns about this Privacy Policy or our data practices, contact us at:
Beltech Corp Holdings
Email: privacy@cast.beltech.io