Privacy Policy
Last updated: September 7, 2025
This Privacy Notice for Internal Cast LLC (doing business as Internal Cast) ("we," "us," or "our") describes how and why we collect, store, use, and share ("process") your personal information when you:
- Visit our website at https://www.internalcast.com or any linked site.
- Use the Internal Cast platform — an audio communication tool that converts text into AI-generated private podcast updates, with role-based access and user engagement analytics.
- Interact with us via marketing, events, or other communications.
If you disagree with our policies or practices, please do not use our Services. For questions or concerns, contact us at team@internalcast.com.
1. Data Controller
Internal Cast LLC acts as the Data Controller for all personal data we process. This means we determine the purposes and means of processing personal information.
2. Information We Collect
2.1 Personal Information You Provide
We may collect personal details you voluntarily provide, such as your name, email address, organization, and any content you submit when:
- Registering an account
- Contacting our support team
- Participating in surveys or events
2.2 Information Collected Automatically
When you use our Services, we may automatically collect:
- IP address (anonymized where applicable)
- Browser type and version
- Pages viewed and timestamps
- Device type and operating system
3. How We Use Your Information
We process information to:
- Provide, operate, and maintain our Services
- Improve performance and user experience
- Communicate updates and respond to inquiries
- Enforce our Terms of Service
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process personal information under the following legal bases:
- Performance of a contract — for account creation, support, and core service delivery
- Legitimate interest — for anonymized analytics, service improvement, and security monitoring
- Consent — when you explicitly opt-in to communications or provide optional data
5. Analytics & Tracking Technologies
We use Vercel Analytics to collect anonymous, aggregated usage statistics (e.g., page views, region, device type).
- No cookies are used for analytics
- Data is anonymous and cannot identify individual users
- No user consent banner is required for this type of processing under GDPR
6. Cookies and Similar Technologies
We do not use cookies for analytics or tracking. Any cookies present are controlled by your browser or unrelated third-party integrations chosen by you.
7. Data Security
We apply appropriate technical and organizational measures to protect personal data, including:
- Hosting on secure servers provided by Digital Ocean
- Encrypted data transmission (HTTPS/TLS)
- Role-based access control (Owner and Editor roles)
- Restricted access to payment and account deletion functions to the Owner role
- Content delivered through private RSS feeds secured with tokens and optional two-factor authentication (2FA)
- Only users with valid credentials can access and listen to the episodes
8. Sharing Your Information
We do not sell or rent personal information to third parties. Data you choose to upload when creating a podcast is processed solely for generating scripts and audio, and does not include personally identifiable information unless you voluntarily provide it.
We may share data with:
- Service providers (Vercel, Digital Ocean, OpenAI, and similar) under contractual agreements including data processing terms
- Legal authorities when required by law
We do not sell or rent personal information.
Payment Processing (Stripe)
We use Stripe to securely process subscription payments. When you make a payment, certain information required to complete the transaction (such as your name, email address, billing details, and payment method) will be shared with Stripe. Stripe processes this information as an independent data controller in accordance with their own Privacy Policy.
We do not store or have direct access to your full payment card details.
9. Data Retention
We retain personal data only as long as necessary for service provision, legal compliance, and improvement of our Services. Anonymized analytics data may be kept longer for performance analysis.
10. Your Rights
Supervisory Authority Contact
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the right to lodge a complaint with your local supervisory authority.
A list of EEA authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
For the United Kingdom: https://ico.org.uk/make-a-complaint/
European Users (GDPR)
- Access, correct, delete, or restrict processing of your personal data
- Withdraw consent where processing is based on consent
- Request data portability
- Lodge a complaint with your local supervisory authority
California Residents (CCPA)
- Request access to or deletion of your personal data
- Opt out of sale of personal data (we do not sell personal data)
- Not face discrimination for exercising these rights
Requests can be sent to team@internalcast.com.
11. Data Protection Officer (DPO)
We are not required to appoint a Data Protection Officer under GDPR.
12. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from anyone under 18 years old. If we learn that we have inadvertently collected personal data from a minor under 18, we will delete such information as soon as possible.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date.
14. Contact Us
For privacy-related questions or to exercise your rights, contact:
Email: team@internalcast.com
PRIVACY POLICY
- Visit our website
at http://www.internalcast.com or any website of ours that links to this Privacy Notice
- Use
Internal Cast .Internal Cast is an internal audio communication platform that allows teams and companies to share updates in the form of short AI-generated podcasts. Users can upload written updates or documents, which are then converted into audio messages using AI. The platform supports team collaboration, role-based access, and analytics for tracking engagement.
- Engage with us in other related ways, including any sales, marketing, or events
SUMMARY OF KEY POINTS
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.names
email addresses
usernames
passwords
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called
"crash dumps" ), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.- To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
- To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
- To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
- To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
- To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e.- Consent. We may process your information if you have given us permission (i.e.
, consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a Contract. We may process your personal information when we believe it is necessary to
fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
Analyze how our Services are used so we can improve them to engage and retain users
- Diagnose problems and/or prevent fraudulent activities
- Understand how our users use our products and services so we can improve user experience
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
- We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
- AI Service Providers
- Cloud Computing Services
- Communicate and Chat with Users
- Data Backup and Security
- Invoice and Billing
- Web and Mobile Analytics
- Website Hosting
Document summarization and audio generation
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g.
, Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20 meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
Google Analytics
We may share your information with Google Analytics to track and6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.Natural language processing
Text analysis
AI document generation
Machine learning models
7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your information in countries other than your own.8. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to9. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of10. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to11. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:Log in to your account settings and update your user account.
12. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident ofCategories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the sectionCategory | Examples | Collected |
---|---|---|
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information |
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | ||
Transaction information, purchase history, financial details, and payment information | ||
Fingerprints and voiceprints | ||
Browsing history, search history, online | ||
Device location | ||
Images and audio, video or call recordings created in connection with our business activities | ||
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | ||
Student records and directory information | ||
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | ||
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
Sources of Personal Information
Learn more about the sources of personal information we collect inHow We Use and Share Personal Information
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:How to Exercise Your Rights
To exercise these rights, you can contact us Request Verification
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at California
California Civil Code Section 1798.83, also known as the 14. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may 16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?