1. Scope
This Policy covers personal data we process for our Service (marketing site, accounts, panel, APIs, support, billing).
It does not replace the privacy notice you must give visitors of your Tenant Site. You are usually the controller for those visitors. See section 8.
If you do not agree, do not use the Service.
2. Who is the controller
For account, billing, and marketing-site data, the controller is the business operating CastCMS.
- Web: https://castcms.com
- Email: [email protected]
- Illegal / rights reports: Report abuse · [email protected]
- Form: /contact
Company registry, tax, and notice address appear on invoices and in the KVKK notice.
3. Data we collect
Depending on use, we may process:
- Account: name, email, phone, organisation
- Billing: invoice title, tax details, payment status (card data may stay with the payment provider)
- Service: projects, domains, plan usage, API logs, support messages
- Security: IP, session, device/browser, security logs
- Your Materials: media, copy, schedules, stream URLs, sports configuration — which may include third-party personal data
- Reports: messages to [email protected] or support
We do not seek special-category (sensitive) personal data. Do not send it on purpose.
4. Why we use data
- Performing the contract: account, hosting Tenant Sites, panel / API access
- Authentication (email; SMS / WhatsApp where used)
- Billing and payment reminders
- Security, abuse prevention, illegal-content review, plan limits
- Support and service improvement
- Legal obligations
- Aggregated statistics where legitimate interests apply
- Product / marketing messages where the law allows (KVKK)
We do not sell your personal data for marketing.
5. Messages and cookies
Required messages: activation, security, invoices, payment reminders, critical service notices.
Marketing: we may send product emails unless you opt out. Where consent is required, we ask for it. Required messages are unaffected.
Cookies: necessary cookies always run. Analytics, preference, and marketing cookies load only if you accept that category. Details: Cookie Policy. Footer: Cookie settings.
6. Sharing, storage, security
We share data only as needed with hosting, email / SMS, payments, security, support tools, advisers, and authorities.
International transfers follow KVKK Art. 9. See KVKK.
We keep data for the processing purpose and legal retention periods (e.g. tax), then delete, destroy, or anonymise it.
We use reasonable security measures. Internet transmission is never perfectly secure. Protect your credentials.
7. Your duties
You are responsible for:
- the lawfulness of Tenant Materials you publish
- notices and consents for third-party personal data in those materials
- privacy / cookie / journalism disclosures on your Tenant Site
- authority when you act for a client
CastCMS is not the publisher of Tenant Sites. See Terms and Disclaimer.
8. Role split — Tenant Sites
When you publish a Tenant Site on CastCMS:
- You are as a rule the controller for that site’s visitors and listeners
- CastCMS may act as a processor on your instructions to host the site
You remain responsible for data you send to the Service.
9. Children
The Service is not directed at anyone under 18. We do not knowingly collect such data. Do not target children unlawfully on a Tenant Site.
10. Your rights
KVKK Art. 11 rights and how to apply: KVKK notice. Email [email protected] (subject: “KVKK”) or use /contact.
Account closure: Settings or the same channels. Illegal content: Report abuse · [email protected].
11. Changes
We may update this Policy. The current version is on this page.
Related: Terms · Disclaimer · Cookies · KVKK