Privacy Policy

Operator

The website located at https://radiocast.net (the "Website") and all products, services, features, content, applications, and technologies provided through it or on a Radiocast domain (the "Service") are operated by Radiocast ("Radiocast", "we", "us", "our"). This Privacy Policy ("Policy") explains how we collect, use, disclose, retain, and protect personal information in connection with the Website and Service, and the choices and rights you have.

What this Policy covers

This Policy applies to personal information we process when you:

1. visit the Website or any Radiocast domain, including billing.radiocast.net and support.radiocast.net;
2. create or use a Radiocast account, including as a listener, station owner, DJ, co-host, or moderator;
3. use Radiocast hosting and the broadcaster panel, AirChain, Reporter, Sites, the station directory and profiles, the Radiocast store and advertising tools, the Academy, Blog, and News, the AI Assistant, embeds, or our APIs;
4. listen to a station, take part in a station's chat or community, or visit a Radiocast Site; or
5. contact us for sales, support, or any other reason.

Where a product handles data differently, we say so in Section 6 (Product-specific notices).

What this Policy does not cover

1. how independent station owners use information they collect themselves, for example through their own websites, social accounts, Discord servers, or mailing lists outside Radiocast;
2. third-party websites and services we link to or that you connect, which follow their own privacy policies; and
3. information that has been de-identified or aggregated so that it can no longer reasonably identify you.

Relationship to other terms

This Policy forms part of, and should be read with, our Terms of Service, our Station Guidelines, our Station Owner & Community Rules, and our API Usage Policy. Capitalized terms not defined here have the meanings given in the Terms of Service.

When Radiocast is the controller

For most processing described in this Policy, including account data, billing records, Website analytics, support conversations, security logs, and moderation and enforcement records, Radiocast decides why and how the data is processed and acts as a "controller" (or "business" under California law).

When Radiocast is a processor for station owners

Station owners decide what to publish and how to run their stations. Where we process personal information only on a station owner's behalf and under their instructions, we act as a "processor" (or "service provider") and the station owner is the controller. This includes:

1. visitor data and cookieless statistics for a station owner's Radiocast Site;
2. personal information that a station owner chooses to collect, upload, or broadcast, such as listener dedications, caller audio, guest voice recordings, or contest entries; and
3. community data a station owner manages for their own station, where applicable.

If your request concerns data a station owner controls, please contact that station owner first. We will help them respond where we can, and we will forward or redirect requests where the law requires.

Station owners' responsibilities

Station owners who act as controllers are responsible for having a lawful basis for their processing, giving their own privacy notices to their listeners and site visitors, and responding to requests about data they control. Station owners must not use the Service to collect sensitive personal information or data about children in ways the law does not permit.

We collect information you provide directly, information collected automatically when you use the Service, and information we receive from third parties. The categories, their sources, and why we collect them are:

Information you provide

1. Account and profile information: name, display name, email address, username, password (stored only in hashed form by our authentication provider), avatar, profile details, and preferences.
2. Age confirmation: your answer to whether you are 13 or older when you create an account. See Section 18.
3. Station and content data: stations you create, station settings, schedules, playlists, uploaded audio, artwork, metadata, Reporter rundowns and inputs, voice reference recordings, Sites content, and custom domain details.
4. Community content: chat messages, song requests, reactions, follows, reviews, and other interactions. Station pages, DJ profiles, directory listings, and chat in public stations can be seen by anyone.
5. Billing information: billing name, postal address, email, company details and tax identifiers where you provide them, and order and subscription history. Card numbers and other full payment credentials are collected and tokenized by Stripe and never pass through Radiocast application servers.
6. Communications: messages to support or sales, appeal submissions, survey responses, and your communication preferences.
7. Reports and compliance information: reports you submit about content or users, copyright notices and counter-notices, and licensing records we request during a compliance review.

Information collected automatically

1. Device and technical data: IP address, device identifiers, browser type and version, operating system, time zone, language, referring URL, and diagnostic and crash data.
2. Usage and log data: pages viewed, features used, stream requests, listening sessions, actions taken in the panel, timestamps, and error logs.
3. Approximate location: country, region, or city inferred from your IP address. We do not collect precise geolocation.
4. Cookies and similar technologies: identifiers that enable sign-in, security, preferences, and, only with your consent, analytics and session recordings. See Section 16.

Information from third parties

1. Sign-in providers: if you choose Discord, Google, or Radiocast Portal sign-in, we receive basic account details such as your name, username, email address, and avatar or profile picture.
2. Payment providers: payment status, the last four digits and type of your card, and fraud signals from Stripe.
3. Station owners and other users: information others include in broadcasts, chat, reports, or station team invitations.
4. Security and infrastructure providers: abuse, bot, and threat signals, for example from Cloudflare.

Sensitive information

We do not ask for sensitive personal information such as health data, government identifiers, precise geolocation, or information about racial or ethnic origin, religion, or sexual orientation. Please do not include it in your profile, chat, broadcasts, or support messages. Account sign-in credentials are the only sensitive personal information we process, and only to authenticate you. Voice reference recordings for Reporter voice cloning are used only to generate the voice you request, not to identify anyone.

Purposes

We process personal information to:

1. create and manage accounts, authenticate users, and keep accounts secure;
2. provide the Service, including station hosting, streaming, AutoDJ, AirChain, Reporter, Sites, the directory, chat, and analytics;
3. process orders, payments, invoices, and subscriptions, and send purchase-related messages;
4. provide support and respond to your requests and appeals;
5. moderate content, enforce our Terms, Station Guidelines, and Station Owner & Community Rules, and protect listeners, especially minors;
6. detect, prevent, and investigate fraud, abuse, security incidents, and illegal activity;
7. measure and improve the reliability, performance, and features of the Service;
8. collect customer feedback, including review invitations after a purchase;
9. send service announcements and, where you agree, marketing; and
10. comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

Legal bases (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we rely on the following legal bases under Article 6:

1. Performance of a contract (Art. 6(1)(b)): accounts, hosting and other products you sign up for, payments, and support (purposes (a) to (d) above).
2. Legitimate interests (Art. 6(1)(f)): moderation and enforcement, platform safety, fraud and abuse prevention, security, product improvement, and collecting customer feedback (purposes (e) to (h)). We balance these interests against your rights, and you can object as described in Section 10.
3. Consent (Art. 6(1)(a)): non-essential cookies, Google Analytics, Microsoft Clarity session recordings, and marketing emails. You can withdraw consent at any time without affecting earlier processing.
4. Legal obligation (Art. 6(1)(c)): tax and accounting records, responses to lawful requests, and mandatory reports such as reports of child sexual abuse material.
5. Vital interests (Art. 6(1)(d)): in rare cases, to protect someone's life or physical safety.

If you do not provide information

Some information, such as an email address and age confirmation, is needed to create an account, and billing details are needed to buy a plan. If you do not provide it, we may not be able to provide that part of the Service.

Listeners

When you listen to a station, we process technical data needed to deliver audio, such as IP address, device and browser type, stream requests, session length, and error logs. We use this to operate streams, enforce plan limits such as concurrent listener caps, prevent abuse, and keep the platform reliable. If you are signed in, we may also keep your listening history and followed stations to power features like recommendations and recently played.

What station owners can see

Station owners see aggregate or operational metrics for their stations, such as listener counts, listening time, approximate location by country or region, and device type. Station owners can also see chat messages, requests, and public profile details of users who interact with their station. They do not receive your email address, payment details, or full IP address from us unless you share them directly.

What we do not do with listener data

1. We do not package or sell detailed listener profiles to advertisers or data brokers.
2. We do not run third-party display or audio ad networks on the Service.
3. We do not use listening analytics to impose surprise usage overages or hidden metering charges beyond the listener limits in your hosting plan.

Public station disclosures

Public station pages may show disclosures the owner enables, such as explicit-content warnings or AI-generated music transparency badges.

These notices apply on top of the rest of this Policy for the products below.

Billing portal and Radiocast Portal sign-in

Our customer billing portal at billing.radiocast.net runs on a customized deployment of FOSSBilling and keeps client records for plans, invoicing, and support, including names, billing and service addresses, email, company details, and order or subscription history. Payment card numbers are not stored there. If you choose "Continue with Radiocast Portal" on radiocast.net, the portal shares your name, verified email address, and profile details with us so we can sign you in. Your portal account needs a verified email address for this to work. After you buy, we also share your email address with Trustpilot for review invitations (see Section 8).

Reporter

Reporter builds local news, weather, and traffic segments from the rundown you set up. We process your rundown and settings, the areas you target, text you provide, and the audio it produces, and we keep the latest episode available at its delivery address. Where you use voice cloning, we process the reference audio you upload. Only upload a voice if you have the speaker's permission; you are responsible for obtaining and keeping that permission. Reporter sends your inputs to the AI providers listed in Section 8 to generate content. Reporter is in alpha, so features and data handling may change as it develops; we will update this notice when they do.

Sites

Radiocast Sites stores the website content, settings, and custom domain details you provide, and connects to your station stream to show your player, schedule, and recently played tracks. Site analytics are cookieless and show visitor statistics such as pages viewed, referrers, and device or browser type. If you run a Radiocast Site, you decide what is published and are responsible for telling your visitors how you use their information; we process visitor data on your behalf as your processor to provide the site and its statistics (see Section 2).

Station chat and communities

Messages in station chat are visible to other people in that chat and to the station owner and their moderators. We store chat messages and moderation actions (such as deletions, mutes, and bans) to provide the feature, review reports, and enforce our rules. Do not share private information in chat.

AI Assistant

When you use the AI Assistant, we process your questions, the answers generated, and basic technical data. Your messages are sent to the AI providers listed in Section 8 to generate a response. Do not enter sensitive personal data.

Support chat

If you contact us through the support chat or the support site at support.radiocast.net, we keep the conversation, your name and email if you give them, the page you were on, and basic browser information so we can answer you and improve support. If you are signed in, we may pass your account identity to the support tool so we can recognize you.

APIs and embeds

When you use our APIs or embed a Radiocast player on another website, we process API keys, request logs, and technical data to provide, secure, and rate-limit access under our API Usage Policy. Visitors to a website with an embedded player send technical data to Radiocast when the player loads.

Automated moderation

We use automated tools, including AI models provided by OpenAI and Anthropic, to help detect content that may break our rules, such as hate speech, sexual content, spam, and content that may put minors at risk. These tools may analyze chat messages, station metadata, uploaded content, and reports.

Human review

1. Automated tools may flag content, hide it pending review, or apply temporary limits to protect the community.
2. Decisions that suspend or terminate a station or account, and Level 3 or Level 4 infractions under our Station Owner & Community Rules, are reviewed by a person before they become final.
3. You can ask for human review of any automated decision by appealing as described in our Station Owner & Community Rules.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR, other than as described above with a right to human review.

AI features and model training

When you use AI features such as Reporter or the AI Assistant, your inputs are sent to our AI providers to generate a result. We use these providers under commercial terms that restrict them from using data we send to train their models. AI output can be inaccurate, and you should review it before relying on or broadcasting it.

Service providers and subprocessors

We disclose personal information to service providers and subprocessors that help us host the Website and the Radiocast platform, run invoicing on our billing portal, provide analytics, moderation and AI features, process payments, collect customer reviews, and run integrations you use or enable. They may use the information only to provide services to us, under contracts that require them to protect it. We limit disclosures to what each purpose needs.

Other recipients

1. Station owners and their teams: as described in Section 5, when you interact with their station.
2. The public: content you choose to publish, such as station pages, profiles, listings, reviews, and public chat.
3. Sign-in and integration providers: when you choose to connect them, under their own terms.
4. Authorities and others: for legal, safety, and enforcement reasons described in Section 9.
5. Business transfers: in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred to the successor, which will be bound by this Policy or give you notice of any change.
6. With your direction or consent: in any other case where you ask us to share information.

Advertising and sponsorship

Radiocast does not sell your personal information and does not run third-party display or audio ad networks on the Service. Credit-based banner placements and in-stream promotional tools may be offered from time to time; when paused or unavailable, no on-site ads are shown. Advertisers using these tools do not receive personal information about the listeners who see or hear their promotions. We do not use listener analytics to resell audience data or to bill surprise usage overages.

Want more details about a specific provider or to object to sharing? Contact us at [email protected].

Lawful requests

We may disclose information when we believe in good faith that the law requires it, such as in response to a subpoena, court order, or other valid legal process. Where permitted, we try to notify affected users before disclosing their information, unless doing so would be unlawful, put someone at risk, or undermine an investigation.

Child safety reports

We report apparent child sexual abuse material (CSAM) and child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), as U.S. law requires, and to other authorities where appropriate. These reports may include account details, content, IP addresses, and related data, and we preserve this data as the law requires.

Safety, fraud, and our rights

We may also disclose information when we believe it is reasonably necessary to:

1. prevent death, serious physical harm, or other imminent harm to any person;
2. detect, prevent, or address fraud, security, or technical issues;
3. enforce our Terms, Station Guidelines, Station Owner & Community Rules, and other policies, including to investigate violations; or
4. protect the rights, property, or safety of Radiocast, our users, or the public.

Moderation and enforcement records

We keep records of reports, moderation actions, strikes, suspensions, terminations, and appeals, including the content involved and the accounts and stations linked to it. We use these records to apply our rules consistently, to detect people who try to evade bans, and to defend our decisions. A copyright notice may be shared with the person who posted the content, and a counter-notice with the person who sent the notice, as the DMCA process requires.

Rights we offer everyone

Wherever you live, you can ask to access, correct, or delete your personal information, and you can update much of your account and station information yourself in your account settings or the panel.

EEA, UK, and Swiss rights

If the GDPR, UK GDPR, or Swiss data protection law applies to you, you have the right to:

1. be informed about how we process your personal data;
2. access your personal data and receive a copy of it;
3. have inaccurate or incomplete data corrected;
4. have your data erased in certain circumstances;
5. restrict our processing in certain circumstances;
6. receive data you provided in a structured, commonly used, machine-readable format, and have it sent to another controller (data portability);
7. object to processing based on legitimate interests, and to direct marketing at any time;
8. not be subject to a decision based solely on automated processing that significantly affects you, as described in Section 7;
9. withdraw consent at any time where we rely on consent; and
10. lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concerns first.

Limits on rights

Some rights have exceptions. For example, we may keep information we need to comply with the law, prevent fraud and abuse, keep enforcement records, or establish or defend legal claims, and we cannot give you information about other people. If we decline a request, we will tell you why, unless the law prevents us.

Making a request

Email [email protected] from the email address on your account, say which right you want to use, and give enough detail for us to find the relevant information.

Verification

To protect you, we verify requests before acting on them, usually by matching the request to your account email or asking you to sign in. For sensitive requests we may ask for more information. We use verification information only to verify the request.

Authorized agents

Where the law allows, an authorized agent may make a request for you. We may ask the agent for signed permission from you and may ask you to verify your identity directly.

Response times and fees

1. Under the GDPR and UK GDPR, we respond within one month, which may be extended by up to two further months for complex or numerous requests. We will tell you if we need the extension.
2. Under U.S. state privacy laws, we confirm receipt within 10 business days where required and respond within 45 days, which may be extended by up to 45 more days where the law permits.
3. We do not charge a fee unless a request is clearly unfounded, excessive, or repetitive, where the law allows a fee or a refusal.

Appeals

If we decline your privacy request, you may appeal by replying to our decision or emailing [email protected] with the subject "Privacy appeal". We will respond within the time the law requires (45 days in most U.S. states). If you are not satisfied, you may contact your state attorney general or data protection authority.

This section applies to California residents and supplements the rest of this Policy as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Do Not Sell or Share My Personal Information

Radiocast does not sell personal information for money and does not run third-party display or audio ad networks on the Service. Optional analytics tools (such as Google Analytics, only when you consent via our cookie banner) may be considered a "share" for cross-context behavioral advertising under California law. California residents may opt out of non-essential analytics by using cookie preferences or contacting us.

Submit a Do Not Sell or Share request

Categories collected in the last 12 months

In the preceding 12 months we have collected the following categories of personal information:

1. Identifiers: name, email address, username, IP address, account and device identifiers.
2. Customer records (Cal. Civ. Code § 1798.80(e)): name, postal address, and billing details. Card numbers are held by Stripe, not by us.
3. Commercial information: plans, purchases, credits, and subscription history.
4. Internet or other electronic network activity: browsing and usage data, listening sessions, logs, and, with consent, analytics and session recordings.
5. Approximate geolocation: location inferred from IP address. We do not collect precise geolocation.
6. Audio, electronic, and visual information: uploaded audio, voice reference recordings, artwork, avatars, and support conversations.
7. Professional information: company name and details, where you provide them for billing.
8. Inferences: limited inferences such as station recommendations based on listening.
9. Sensitive personal information: account log-in credentials, used only to authenticate you.

We collect these categories from the sources described in Section 3, use them for the business and commercial purposes described in Section 4, and keep them for the periods described in Section 15.

Disclosures for a business purpose

In the preceding 12 months we have disclosed each category above, except sensitive personal information, to service providers and contractors (such as hosting, payment, support, moderation, and AI providers) for business purposes. We disclosed identifiers to Trustpilot for review invitations, and identifiers and internet activity to Google Analytics and Microsoft Clarity when you consented to analytics.

Sale and sharing

We do not sell personal information for money. The only "sharing" for cross-context behavioral advertising that may occur is through consent-based analytics, as described above. We do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information only for purposes permitted by the CCPA, so we do not offer a right to limit its use.

Your California rights

1. Right to know: the categories and specific pieces of personal information we collected about you, its sources, purposes, and the categories of recipients.
2. Right to delete personal information we collected from you, subject to legal exceptions.
3. Right to correct inaccurate personal information.
4. Right to opt out of the sale or sharing of personal information, including through the cookie preferences banner or by contacting us.
5. Right to limit the use of sensitive personal information, which does not apply because of how we use it, as described above.
6. Right to non-discrimination: we will not deny you service, charge you a different price, or give you a different quality of service because you used your rights.

To use these rights, follow Section 11. California's "Shine the Light" law also lets you ask about disclosures to third parties for their direct marketing; we do not make such disclosures.

Residents of other U.S. states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia, may have some or all of these rights, depending on where they live and whether the law applies to us:

1. to confirm whether we process their personal data and to access it;
2. to correct inaccuracies;
3. to delete personal data;
4. to get a portable copy of personal data;
5. to opt out of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects; and
6. to appeal our decision on a request, as described in Section 11.

We do not sell personal data or use it for targeted advertising, other than consent-based analytics you can turn off in cookie preferences. Nevada residents may submit a request not to have their covered information sold; we do not sell covered information.

Where data is processed

Radiocast and our service providers operate in several countries. Your information may be transferred to, stored, and processed in countries other than your own, including the United States, Canada, and countries in the European Union, which may have different data protection laws.

Safeguards

When we transfer personal data out of the EEA, the UK, or Switzerland, we rely on one or more of the following, where applicable:

1. an adequacy decision for the destination country;
2. a provider's certification under the EU-U.S. Data Privacy Framework, the UK Extension, or the Swiss-U.S. Data Privacy Framework;
3. the European Commission's Standard Contractual Clauses, with the UK Addendum or Swiss amendments where needed; or
4. another lawful transfer mechanism or exception, such as where a transfer is necessary to perform our contract with you.

You can ask us for more information about the safeguards used for a particular transfer.

How we decide retention

We keep personal information only as long as needed for the purposes in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. We consider the amount and sensitivity of the data, the risk of harm from unauthorized use, the purposes we process it for, and legal requirements.

Retention by category

1. Account and profile data: for as long as your account is active, then deleted or anonymized after you close it, except as described below.
2. Station content: for as long as the station exists, or until you delete it, subject to backup cycles.
3. Billing and tax records: for as long as tax, accounting, and other laws require.
4. Logs and security data: for a limited period needed for security, troubleshooting, and abuse prevention.
5. Analytics data: under the retention settings of the relevant analytics provider, or until you withdraw consent.
6. Support conversations: for as long as needed to resolve your request and keep a record of our support history.
7. Age confirmation: a "no" answer is kept in your browser for 24 hours; a "yes" answer is kept with your account.
8. Moderation and enforcement records: for as long as needed to apply our rules, prevent ban evasion, and defend our decisions, which can be longer than the life of the account for serious infractions.
9. Legal holds: data subject to a legal hold, investigation, or mandatory report is kept for as long as the law or the matter requires.

Deletion and backups

When we delete data, it may remain in backups for a limited time until those backups are overwritten. We may anonymize data so that it is no longer associated with you and keep it for statistics.

Types of cookies

1. Strictly necessary: sign-in, security, load balancing, and remembering your consent choices. These cannot be turned off.
2. Functional: preferences such as volume, theme, and recently played stations, often stored in your browser's local storage.
3. Analytics: Google Analytics and Microsoft Clarity, including session recordings, used only with your consent.
4. Third-party embeds: YouTube videos use privacy-enhanced mode, but playing a video lets Google set cookies.

Your choices

Where the law requires, we ask for your consent before setting non-essential cookies. You can change your choice at any time with "Cookie preferences" in the footer, and you can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the Service from working. Where we detect a Global Privacy Control signal, we treat it as an opt-out of analytics that may count as sharing.

Radiocast Sites analytics

Analytics on Radiocast Sites are cookieless and do not track visitors across websites.

Security measures

We keep reasonable administrative, technical, and physical safeguards appropriate to the risk, including:

1. encryption of data in transit using TLS;
2. hashed passwords and support for third-party sign-in;
3. tokenized payment processing through Stripe, so card numbers never reach our servers;
4. access controls that limit personal data to people who need it for their role;
5. network protection, rate limiting, and abuse detection, including through Cloudflare; and
6. regular security reviews of the platform and our providers.

Your part

Use a strong, unique password, keep your credentials and API keys private, and tell us right away at [email protected] if you think your account has been compromised.

Breach notification

If a security breach affects your personal information, we will notify you and the relevant authorities as required by applicable law, without undue delay. No data transmission over the Internet or storage system can be guaranteed to be completely secure.

Age requirement

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. When you create an account, with email, Discord, Google, or Radiocast Portal sign-in, we ask whether you are 13 or older. If you tell us you are under 13, we do not create an account. We keep that answer in your browser for 24 hours so the question cannot simply be answered again. For accounts that are created, we record that you confirmed you are 13 or older.

Users under 18

Users between 13 and the age of majority may use the Service only with the consent of a parent or legal guardian. We do not knowingly sell or share the personal information of users under 16. Stations with explicit programming show a warning before playback, and our child safety rules apply to every station.

If a child has given us data

If you believe a child under 13 has provided personal information or created an account, contact us at [email protected] and we will take appropriate steps to delete the information and close the account.

Links to other websites

The Service may contain links to other websites that are not owned or controlled by us, including station owners' own sites. We are not responsible for their privacy practices. We encourage you to read the privacy statements of each website that collects personal information.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no common industry standard, we do not respond to DNT signals.

Marketing communications

You can unsubscribe from marketing emails at any time with the link in the email. We will still send service and transactional messages, such as receipts, security alerts, and notices about your stations or this Policy.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy on the Website, update the "Last updated" date above, and, where required, notify you by email or in the Service or ask for your consent. Changes take effect when posted unless we say otherwise.

Contact us

To ask about this Policy, exercise your rights, or raise a concern, email us at [email protected]. If you are in the EEA, the UK, or Switzerland and need to reach a representative or data protection contact, use the same address and we will route your request.