Privacy Policy

Our commitment

We will never sell, rent, trade, monetize, or otherwise distribute your information — not to advertisers, data brokers, or anyone else, for any reason. BITCAST exists to run your broadcasts, and your information is used for that and nothing else. The only exceptions are the two narrow cases described under “When information leaves BITCAST” below.

Information we collect

• Account information: your email address, a hashed copy of your password (never the password itself), and, if you turn them on, your two-factor authentication secret, backup codes and passkeys.
• Third-party credentials: the Twilio and Cloudflare account details you enter in Settings. Secret values are encrypted with AES-256-GCM before they are stored.
• Your content: recordings, phone menu prompts, custom extensions, widget logos, phone line names and other settings you configure.
• Call logs: for calls to your phone lines, the caller’s phone number, call times, and what they listened to.
• Web listener sessions: a random session ID stored in the listener’s browser so the embeddable player can report a live listener count. It does not identify the listener.
• Basic usage analytics: anonymous page-view statistics through Vercel Analytics. We do not use advertising or cross-site tracking cookies.

How we use it

Only to provide BITCAST’s features: signing you in, running your phone menus and live broadcasts, serving your recordings, showing your call logs and listener counts, and sending account emails such as password resets.

Where it is stored

Your information is stored on secure cloud servers provisioned by Vercel Inc. This covers application hosting, file storage for recordings and images, and the Postgres database (Neon, provisioned through Vercel). Account emails, such as password resets and email-change confirmations, are delivered through Resend.

When information leaves BITCAST

Your information is shared outside BITCAST in only three cases:

• Your own connected services. To run your broadcasts, BITCAST uses the Twilio and Cloudflare credentials you provide to route calls and audio through your accounts with those providers. Data sent there is only what’s needed for the action you started.
• Payments. If you subscribe to Pro, your email address is shared with Stripe, our payment processor, so it can bill you and send receipts.
• When the law requires it. If we receive a valid subpoena, court order or similar legal demand, we disclose only what that demand requires.

Payment information

Card details are entered on Stripe’s checkout page and go directly to Stripe; they are never seen or stored by BITCAST or by Vercel. BITCAST keeps only your Stripe customer reference and your subscription’s status, plan and renewal date.

Security

Third-party credentials are encrypted at rest, passwords are stored only as hashes, and every connection uses HTTPS. You can add two-factor authentication and passkeys to your account under Settings › Account.

Your choices

• View and change your settings, recordings and phone lines at any time from the dashboard.
• Delete recordings, prompts and phone lines, which also removes their stored files.
• Request a copy of your information or the deletion of your account through the Support form.

Changes and contact

If this policy changes, we’ll post the new version here and update the date at the top. Our commitment never to sell or monetize your information will not change. Questions or requests can be sent through the Support form. See also our Terms & Conditions.