Privacy Policy
Effective date: July 8, 2026
Service: Castingiron (castingiron.ai, app.castingiron.ai)
Operator: K&E Studios (“we”, “us”)
This policy describes how we collect, use, and share information when you use Castingiron — our AI UGC ad suite, API, and related sites.
1. Information we collect
- Account data — email address, password hash (or Google OAuth identifiers), and profile settings you provide.
- Billing data — payments are processed by Stripe. We receive limited billing metadata (e.g. customer id, pack purchased, session id). We do not store full card numbers.
- Usage data — token balance and ledger entries, generation jobs, briefs, scripts, product URLs, actor selections, API key metadata (hashed secrets), and feature usage needed to run the product.
- Content you submit — product pages, copy, images, voice samples, and other assets you upload or import to generate ads.
- Technical data — IP address, browser/device type, approximate location from IP, cookies/session tokens, and basic request logs for security and reliability.
2. How we use information
- Provide, operate, and improve Castingiron (generation, billing, auth, support).
- Process payments and maintain token balances.
- Secure the service, prevent abuse, and enforce our Terms.
- Communicate about your account, product updates, and (where allowed) marketing — you can opt out of non-essential email.
- Comply with law and respond to lawful requests.
3. AI generation & subprocessors
To render ads and related assets we use third-party model and infrastructure providers (for example video/image/speech models, hosting, object storage, email, and analytics). Content you submit for generation may be sent to those providers solely to fulfill your request, under our agreements with them. We do not sell your personal information.
4. Cookies & sessions
We use essential cookies and similar storage for authentication, security (including beta access gates), and preferences (e.g. theme). We do not use third-party advertising cookies on the marketing site.
5. Sharing
We share data only with: service providers who process it on our instructions; Stripe for payments; authorities when required by law; or parties involved in a merger/acquisition with appropriate safeguards. We do not sell personal data.
6. Retention
We retain account, ledger, and generation records for as long as your account is active and as needed for legitimate business, tax, and legal purposes. You may request deletion of your account; some records may be retained where we are legally required or for fraud prevention.
7. Security
We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, hashed API keys, and access controls. No method of transmission or storage is 100% secure.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, or object to certain processing. Contact us at the address below. If you are in the EEA/UK, you may also lodge a complaint with a supervisory authority.
9. Children
Castingiron is not directed to children under 16. We do not knowingly collect personal information from children.
10. International transfers
We may process data in the United States and other countries where our providers operate. Where required, we use appropriate transfer safeguards.
11. Changes
We may update this policy. We will post the revised version with a new effective date. Material changes may be communicated by email or in-product notice.
12. Contact
Questions about privacy: privacy@castingiron.ai
Or via K&E Studios: kestudios.dev
Also see our Terms of Service.