Privacy Policy
This policy explains how CastandCurtain collects, uses, and protects your information when you use our platform.
1. Information We Collect
We collect account details (such as name and email), portfolio content you provide, usage metadata, and billing or customer IDs from payment providers. We do not collect more than is necessary to operate the service.
2. How We Use Information
We use your information to operate the service, process billing, provide support, secure accounts, and improve product quality. We do not sell your data to third parties or use it for advertising.
3. Payments
Payments are processed by Stripe. We do not store full card numbers in our application database. Only tokenised references returned by Stripe are stored, and they are used solely to manage your subscription.
4. Domains
If you purchase domains through us, relevant registration data is sent to domain providers required to complete registration. Domain registrar privacy policies apply to any data they separately hold.
5. Data Retention
We retain account and site data while your account is active and as needed for legal, security, and operational reasons. After account closure, content is retained for 30 days and then permanently deleted. See our Terms of Service §9 for details.
6. Security
We use reasonable administrative and technical safeguards to protect your information. No system can be guaranteed 100% secure. If you believe your account has been compromised, contact us immediately at support@castandcurtain.com.
7. Your Rights
You may request access, correction, or deletion of your account data at any time by contacting us. We will respond within a reasonable time. Depending on your jurisdiction, additional rights may apply (e.g. GDPR, CCPA).
8. Policy Updates
We may update this policy from time to time. Material changes will be reflected by an updated effective date at the top of this page. Continued use of the service after an update constitutes acceptance.