Privacy Policy

• Account information — your name, email and authentication details, managed through our authentication provider (Clerk), plus your workspace and role.
• Content you provide — source videos and files you upload or link, brand assets (logos, colors, fonts), prompts, captions, and the clips/images generated from them.
• Connected-account data — when you connect a social account (e.g. Instagram, YouTube), the access tokens and basic account info (handle, profile image) needed to publish on your behalf.
• Usage & metering — feature usage, credits consumed, job and post status, and similar operational records.
• Technical data — log data such as IP address, device/browser information and timestamps, used for security and reliability.

• to provide and operate the service — generating clips, images and carousels, and publishing posts;
• to authenticate you and manage workspaces, roles and approvals;
• to meter usage against your plan and enforce limits;
• to provide support, maintain security, prevent abuse, and debug issues; and
• to comply with legal obligations.

To deliver Recast’s features, we share the necessary content and data with third-party processors, including: Vizard.ai (video-to-clip generation), Google (Gemini) and OpenAI (text and image generation), our publishing provider (to post to your connected accounts), Clerk (authentication), and Cloudflare R2 together with our database host (storage). These providers process your data only to perform their function and are subject to their own privacy terms. We do not sell your personal data.

Tokens for accounts you connect are stored to publish and schedule content on your behalf, scoped to your workspace. We use them only for publishing actions you initiate or schedule. You can disconnect an account at any time from Settings, which revokes our access going forward.

Uploaded videos and generated media are stored temporarily and automatically deleted after approximately 15 days. Account information, metadata and usage records are retained while your account is active and as needed for legal, billing and security purposes. You can request deletion of your data as described below.

We use reasonable technical and organisational measures to protect your data, including access controls and per-workspace data isolation. Provider API keys are kept server-side and never exposed to your browser. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Subject to applicable law, you may request to access, correct, or delete your personal data, withdraw consent, or object to certain processing. To exercise these rights, contact us at the address below. We will respond within the timeframes required by law.

Some of our providers process data in countries outside India. Where we transfer personal data internationally, we take steps to ensure it is handled in line with this policy and applicable law.

Recast is not intended for individuals under 18, and we do not knowingly collect their personal data.

We use essential cookies (for example, session cookies from our authentication provider) needed to keep you signed in and to operate the service. We do not use them for advertising.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date and, where appropriate, by notifying you.

For privacy questions or requests, contact us at [email protected].