Privacy Policy

Last updated: 1 January 2025

1. Controller

LingaCast, registered in the EU, is the data controller for personal data processed through this website and the LingaCast platform. Contact: privacy@lingacast.com.

2. Data we collect

  • Account data: name, email address, organisation name, billing address.
  • Event data: audio streams, generated transcripts, caption files, translated audio.
  • Usage data: login timestamps, feature usage, error logs.
  • Payment data: billing details processed by our payment processor (Stripe). We do not store raw card data.
  • Technical data: IP address, browser type, and session identifiers for security and rate-limiting purposes.

3. Legal basis for processing

  • Contract performance (Art. 6(1)(b) GDPR): processing necessary to deliver the service you subscribed to.
  • Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention, security monitoring, service improvement.
  • Legal obligation (Art. 6(1)(c) GDPR): tax records, anti-money-laundering obligations.
  • Consent (Art. 6(1)(a) GDPR): analytics cookies (where applicable).

4. Data retention

Event audio and caption data is retained according to your plan (Standard: 30 days, Professional: 90 days, Enterprise: configurable up to 7 years). Account data is retained for the duration of the contract plus 2 years for legal compliance. You may request earlier deletion at any time.

5. Sub-processors

We use the following categories of sub-processors:

  • Cloud infrastructure: Hetzner Online GmbH (EU), Cloudflare Inc. (EU nodes)
  • AI services: OpenAI Ireland Ltd. (EU data residency contract in place)
  • Payments: Stripe Payments Europe Ltd. (Ireland)
  • Email: Resend Inc. (transactional email only, no marketing)

A full sub-processor list with DPAs is available on the DPA page.

6. International transfers

All primary data processing occurs within the European Economic Area (EEA). Where sub-processors operate outside the EEA, transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your rights

Under GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erasure ("right to be forgotten") (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Lodge a complaint with your national EU data protection authority

Submit requests to privacy@lingacast.com. We respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication (session token) and security (CSRF). We do not use third-party advertising or tracking cookies. Analytics cookies (if enabled) require your consent and can be withdrawn at any time via the cookie banner.

9. Changes to this policy

We will notify registered users by email at least 14 days before any material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

10. Contact

Data Protection Officer: dpo@lingacast.com
LingaCast, EU