Scope and roles
This policy applies to the Goosecast website, studio, hosted players, and related support. Goosecast acts as controller for account and billing data and as processor for workspace source and production content where a customer determines the purpose of that processing.
Information we collect
We collect information you provide, information required to operate the service, and limited technical events needed for reliability and security.
- Account identity, workspace membership, and authentication events.
- Billing status, plan, usage reservations, and payment-provider references.
- Sources, extracted text, scripts, comments, voice choices, generation logs, and exported artifacts.
- Device, request, error, security, and product-usage events with secrets and source content redacted from telemetry.
How information is used
We use information to authenticate users, isolate workspaces, process requested productions, calculate entitlements, secure the service, provide support, and improve product reliability. We do not sell personal information or use private workspace sources to train a public Goosecast model.
Service providers and AI processing
Goosecast uses infrastructure, authentication, storage, payment, observability, and generation providers to deliver the service. Source text or approved script segments are sent to the selected generation provider only when a user starts the corresponding analysis, preview, or synthesis action. Provider and model provenance remains visible in the project record.
Retention and deletion
Paid workspace source and production data is retained until deletion or account closure, subject to configured retention rules and legal obligations. Trial content may expire after the period shown in the product. Intermediate media can be removed after a successful final render. Account deletion starts a recovery window before permanent deletion unless retention is legally required.
Security
Goosecast uses workspace-scoped authorization, database row policies, private object storage, short-lived signed links, encryption in transit, encrypted secret storage, credential redaction, and audit events. No internet service can promise absolute security; verified incidents are handled under the incident-response process.
Choices and rights
Depending on location, users may request access, correction, portability, restriction, objection, or deletion of personal information. Workspace owners can manage members, credentials, projects, and published episodes in the studio. Requests are verified before sensitive account data is changed or released.
- Use privacy@goosecast.com for privacy requests.
- Marketing messages include an unsubscribe control.
- Essential authentication and security records cannot be disabled while the service is in use.
Policy changes
Material changes are published with a new effective date and, when appropriate, communicated inside the service or by email. Continued use after an effective date means the updated policy applies to future use.