Privacy Policy

1. Who processes your data

Cast Films ("we"), which operates the Cast Academy platform, is the data controller responsible for the personal information described in this privacy policy. For any privacy inquiry you can contact us from the email address you used to create your account.

2. Data we collect

• Account data: name (if provided), email address, and login credentials.
• Subscription data: status of your annual access, start and expiration dates.
• Support messages you send us.
• Usage and technical data: guides viewed, IP address, device and browser identifiers.

Payment data (card, billing, and tax information) is collected and processed directly by Paddle as the Merchant of Record; we do not store card numbers.

3. How we use it and legal basis

• Creating and managing your account and granting access to guides — contract performance.
• Managing your annual subscription and confirming access — contract performance.
• Handling support requests — contract performance and legitimate interest.
• Security, fraud prevention, and service stability — legitimate interest.
• Improving content and the platform with aggregated usage data — legitimate interest.
• Marketing communications, if you subscribe to them — consent.
• Meeting accounting and legal obligations — legal obligation.

4. Who we share data with

• Service providers (sub-processors): hosting, database, authentication, and analytics.
• Paddle.com Market Ltd., our Merchant of Record, for the sale of access, subscription management, payments, billing, and tax compliance.
• Professional advisors (legal and accounting) when necessary.
• Competent authorities when required by law.

5. International transfers

Our providers may host data outside your country, including the European Union, the United Kingdom, and the United States. In such cases we apply recognized safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We retain account and subscription data for as long as your account exists and for the period necessary to meet legal and accounting obligations. After that we delete or anonymize it.

7. Your rights

You may request access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent at any time. You may also file a complaint with your country's data protection authority. We respond to requests within a maximum of one month.

8. Security

We apply appropriate technical and organizational measures, such as encryption in transit, access controls, and separation of protected content, to safeguard your information.

9. Cookies

We use essential cookies and local storage to keep you signed in and protect access, and the payment provider's cookies during checkout. You can clear or block them from your browser, although login will stop working. We do not use advertising cookies.