1. Information We Collect
Personal Information
We collect information you provide directly to us, including:
- Account Information: Email address, username, password (encrypted)
- Profile Data: Display preferences, avatar, listening history
- Payment Information: Credit card details (processed securely through third-party providers)
- Communication Data: Messages you send to our support team
Usage Information
We automatically collect information about your use of our platform:
- Listening Activity: Audiobooks accessed, listening progress, bookmarks
- Device Information: Browser type, operating system, IP address
- Platform Usage: Features used, time spent, interaction patterns
- Log Data: Server logs, error reports, performance metrics
Third-Party Integrations
When you connect external services:
- Discord: Username, user ID, server membership (for community features)
- AudiobookShelf: Library access, sync preferences, listening statistics
2. How We Use Your Information
We use the information we collect to:
Provide and Improve Services
- Create and manage your account
- Process audiobook purchases and subscriptions
- Deliver personalized listening recommendations
- Sync your library across devices
- Provide customer support and respond to inquiries
Communication and Updates
- Send important account notifications
- Notify you about new releases and features
- Deliver promotional content (with your consent)
- Respond to your questions and feedback
Platform Security and Analytics
- Monitor for fraud and abuse
- Analyze usage patterns to improve our platform
- Ensure system security and reliability
- Comply with legal obligations
3. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in these situations:
Service Providers
We work with trusted third-party providers who help us operate our platform:
- Payment Processors: To handle billing and transactions securely
- Cloud Hosting: To store and deliver audiobook content
- Analytics Services: To understand platform usage (anonymized data)
- Communication Tools: To send emails and notifications
Legal Requirements
We may disclose information if required by law or to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Enforce our Terms of Service
- Investigate potential violations or abuse
Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify you of any such change.
4. Data Security
We implement comprehensive security measures to protect your information:
Technical Safeguards
- Encryption: All data transmitted using TLS/SSL encryption
- Password Security: Passwords are hashed using industry-standard algorithms
- Access Controls: Strict employee access controls and authentication
- Regular Updates: Security patches and system updates
Operational Security
- Regular security audits and vulnerability assessments
- Employee training on data protection practices
- Incident response procedures
- Backup and recovery systems
Important: While we implement strong security measures, no system is 100% secure. Please use strong, unique passwords and enable two-factor authentication when available.
5. Your Rights and Choices
You have several rights regarding your personal information:
Account Management
- Access: View and download your personal data
- Update: Modify your account information and preferences
- Delete: Request account deletion (subject to legal requirements)
- Portability: Export your listening data and preferences
Communication Preferences
- Opt out of promotional emails (account notifications still required)
- Manage Discord integration and community features
- Control AudiobookShelf sync and sharing
Regional Rights
Depending on your location, you may have additional rights under laws like GDPR or CCPA:
- Right to be forgotten
- Data portability rights
- Right to restrict processing
- Right to object to certain uses
To exercise these rights, contact us at [email protected]or through your account settings.
6. Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
Essential Cookies
- Authentication and session management
- Security features and fraud prevention
- Basic functionality and preferences
Analytics Cookies
- Usage statistics and performance monitoring
- Feature usage and improvement insights
- Anonymous demographic information
Your Cookie Choices
You can control cookies through your browser settings. However, disabling certain cookies may limit platform functionality. We respect "Do Not Track" signals when technically feasible.
7. Children's Privacy
CastTales is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly.
For users between 13-18, we recommend parental guidance and supervision when using our platform.
8. International Data Transfers
CastTales operates globally, and your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by regulatory authorities
- Certification programs where applicable
9. Data Retention
We retain your information for as long as necessary to provide services and comply with legal obligations:
- Account Data: Retained while your account is active
- Listening History: Kept to provide recommendations and sync across devices
- Payment Records: Retained for tax and legal compliance (typically 7 years)
- Communication Logs: Kept for customer service and dispute resolution
When you delete your account, we will delete or anonymize your personal information, except where retention is required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date
- We will notify you of significant changes via email or platform notification
- We will post the updated policy on our website
- Your continued use of the platform constitutes acceptance of the updated policy
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
We will respond to privacy-related inquiries within 30 days (or as required by applicable law).