Privacy Policy

1. Introduction

CastaLink ("we", "our", "us") is committed to protecting the privacy of our clients and their customers. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

2. Who We Are

3. What Personal Information We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, phone number, business address
• Account credentials: username, password (encrypted)
• Business information: business name, logo, brand colors, service descriptions, location data
• Client content: topics, reports, documents, and communications submitted through the platform
• Usage data: pages visited, features used, login timestamps, IP address, browser type
• Payment information: processed securely via third-party processors; we do not store full card numbers
• Communications: emails, support messages, and feedback you send to us

4. Why We Collect Personal Information

We collect personal information only for the following identified purposes:

• To create and manage your CastaHub account
• To deliver platform features and services (reporting, SEO tools, topic management, content generation)
• To communicate with you about your account, updates, and support
• To process payments and manage subscriptions
• To improve platform performance and user experience
• To comply with legal obligations

We will not use your information for any purpose other than those identified above without your prior consent.

5. Consent

By creating an account or using the CastaHub platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at info@castalink.com. Note that withdrawal of consent may affect our ability to provide services.

6. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Service providers: who assist in operating the platform (e.g., cloud hosting, email delivery via Resend, database services via Supabase), bound by confidentiality agreements
• Payment processors: for billing and subscription management
• Legal authorities: if required by law or to protect our legal rights

7. Data Storage & Security

Your data is stored on secure servers. We use industry-standard safeguards including encryption at rest and in transit, access controls, and regular security reviews. While we take all reasonable precautions, no system can guarantee absolute security.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. When your account is deleted, we will securely destroy or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Rights Under PIPEDA & Alberta PIPA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for the use of your personal information
• Request that your personal information be deleted, subject to legal obligations
• File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta

To exercise any of these rights, contact us at: info@castalink.com

10. Cookies & Tracking

CastaHub uses session cookies and local storage to maintain your login session and remember your preferences. We do not use third-party advertising trackers. You can control cookie behavior through your browser settings.

11. Email Communications (CASL)

We only send commercial electronic messages (CEMs) to individuals who have expressly consented to receive them. Every marketing email we send includes an unsubscribe link. Transactional and account-related emails are sent as part of our service agreement.

12. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform. The "Last Updated" date at the top of this page reflects the most recent revision.

14. Contact Us

For any privacy-related questions, requests, or concerns: