GDPR Compliance

This statement applies to anyone in the European Economic Area or the United Kingdom whose personal data CastFork processes, whether as a registered user or as someone whose data reaches us incidentally (for example, through a stream a CastFork user produces). It supplements, and doesn’t replace, our Privacy Policy.

We use session and security cookies necessary to operate the service, and an optional analytics cookie you can decline. See our Privacy Policy for the full list.

We process personal data under one of these bases:

• Contract — account data, stream relaying, recordings, and billing, because we can’t provide the service you signed up for without them.
• Legitimate interest — security monitoring, fraud prevention, and product analytics, balanced against your right to privacy.
• Consent — optional analytics cookies and marketing email, which you can withdraw at any time.
• Legal obligation — tax and accounting records, and responses to valid legal process.

The categories of data we collect are described in full in our Privacy Policy: account data, connected-platform tokens and basic profile info, content you stream or upload, and usage/device data.

CastFork doesn’t make any decision that produces a legal or similarly significant effect about you using automated processing alone. Plan entitlement checks (like a simultaneous-destination cap) are rule-based account configuration, not profiling.

To act on a rights request, we verify your identity using the name and email on file for your account, and may ask for additional confirmation if a request looks unusual or comes from an address that doesn’t match your account.

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data, subject to what we’re legally required to retain.
• Export your data in a portable format.
• Restrict or object to certain processing, including processing based on legitimate interest.
• Withdraw consent at any time where processing is based on it.
• Lodge a complaint with your local data protection authority.

Email privacy@castfork.com with the right you’d like to exercise. We aim to respond within 30 days, as required by GDPR. Account settings already covers the most common requests self-serve: exporting your data, disconnecting a platform, or deleting your account.

Business and Enterprise customers that need a signed Data Processing Agreement can request one from legal@castfork.com. The summary below describes its shape; the signed version controls if the two differ.

• Background and parties — you (the controller) and CastFork (the processor), for personal data processed while providing the service to you.
• Personal data and service — scoped to what’s reasonably necessary to run CastFork for your account: account records, connected platform data, content, and usage data.
• Controller obligations — you confirm you have a lawful basis for the personal data you process through CastFork, including anyone appearing on your streams.
• Processor obligations — we process data only on your documented instructions, under confidentiality, with appropriate technical and organizational security measures, and we notify you of a personal data breach without undue delay.
• Liability, return, and deletion — liability follows the limitations in our Terms of Service; data is returned or deleted at the end of the relationship, subject to legally required retention.
• Term and disputes — the DPA runs alongside your service agreement and disputes follow the same governing law and venue as our Terms of Service.

Where personal data is transferred outside the EEA or UK — for example, to a hosting provider in the United States — we rely on the European Commission’s Standard Contractual Clauses (or an equivalent, currently-approved transfer mechanism) with that provider, plus the supplementary safeguards each transfer needs, and we review the legal basis for these transfers when regulatory guidance changes. A copy of the applicable clauses is available on request to legal@castfork.com.