Privacy Policy

Last updated: 17 May 2026

1. Controller

LingaCast B.V., a private limited company registered in the Netherlands, is the data controller for personal data processed through this website and the LingaCast platform. Contact: privacy@lingacast.com.

2. Data we collect

  • Account data: name, email address, organisation name, billing address.
  • Event data: live audio and video streams, generated transcripts, caption files (WebVTT/SRT), dubbed audio, and event recordings.
  • Usage data: login timestamps, feature usage, viewer counts, error logs, latency telemetry.
  • Billing data: invoice details, VAT number, bank account identifiers for SEPA transfer, and payment records. We invoice in-house and do not use a third-party card processor.
  • Technical data: IP address, browser type, and session identifiers for security and rate-limiting purposes.

3. Legal basis for processing

  • Contract performance (Art. 6(1)(b) GDPR): processing necessary to deliver the service you subscribed to.
  • Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention, security monitoring, service improvement.
  • Legal obligation (Art. 6(1)(c) GDPR): tax records, anti-money-laundering obligations.
  • Consent (Art. 6(1)(a) GDPR): analytics cookies (where applicable).

4. Data retention

Event audio and caption data is retained according to your plan (Standard: 30 days, Professional: 90 days, Enterprise: configurable up to 7 years). Account data is retained for the duration of the contract plus 2 years for legal compliance. You may request earlier deletion at any time.

5. Sub-processors

All sub-processors process data within the European Union:

  • Cloud infrastructure: OVH SAS — hosts the LingaCast platform
  • CDN, storage & security: Cloudflare Ireland, Ltd. — object storage, CDN delivery, DDoS protection, video streaming, bot protection
  • GPU compute: OVH SAS GPU instances for the primary transcription, translation, and dubbing pipelines; RunPod, Inc. (EU pods only) used as backup when primary capacity is exhausted
  • AI services (any may be selected per event): Google Ireland Ltd. (Gemini API and Google Cloud Speech-to-Text, Translation, and Text-to-Speech); Microsoft Ireland Operations Ltd. (Azure Speech and Translator)
  • Email: Microsoft Ireland Operations Ltd. — Microsoft 365 SMTP within the EU Data Boundary (transactional email only, no marketing)
  • Payments: handled in-house — SEPA bank transfer via our EU bank; no third-party payment processor stores or processes your card data

A full sub-processor list with locations and links is available on the DPA page.

6. International transfers

All Customer data is processed within the European Union. Every sub-processor operates from an EU region or, for global providers, under an EU subsidiary with data residency pinned to the EU. No Standard Contractual Clauses are required because no data leaves the EEA.

7. Your rights under GDPR

If you are in the EU, EEA, or UK, you have the following rights:

  • Access a copy of your personal data (Art. 15)
  • Rectify inaccurate or incomplete data (Art. 16)
  • Erasure — the “right to be forgotten” (Art. 17)
  • Restrict processing in certain cases (Art. 18)
  • Portability — receive your data in a machine-readable format (Art. 20)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time where processing is based on consent (Art. 7)
  • Lodge a complaint with your national supervisory authority

See our GDPR Rights page for the full list and how to submit a request. Submit requests to privacy@lingacast.com — we respond within 30 days, free of charge.

8. Cookies

We use strictly necessary cookies for authentication (session token) and security (CSRF). We do not use third-party advertising or tracking cookies. Analytics cookies (if enabled) require your consent and can be withdrawn at any time via the cookie banner.

9. Changes to this policy

We will notify registered users by email at least 14 days before any material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

10. Contact

Data Protection Officer: dpo@lingacast.com