Privacy policy
Effective date: October 3, 2026
Applies to: Yongcast · yongcast.com
If the language versions differ, the Simplified Chinese version prevails.
Three things to know
- We collect only the information needed to provide the service, protect it and understand signup sources.
- We do not sell your data, run advertising or track you across sites for advertising.
- Your uploads are used to provide this service, including storage, conversion and streaming. Other processing is limited to what is necessary for security, technical support and legal compliance. We do not use them for advertising, sale or training any model.
1. Information we collect
1.1 Information you provide
| Information | Why we need it |
|---|---|
| Email address | Login, verification and important notifications |
| When you agreed to the Terms of Service and Privacy Policy at signup, and their versions | To record the policies you agreed to. We don't add this record to existing accounts. |
| Password | Account protection. We store only a one-way hash and cannot recover your plain-text password from it. |
| Uploaded video files | Storing and streaming your videos is the core service |
| Playlists and stream settings | To determine what to play and how |
| Stream keys | To connect to your YouTube channel |
1.2 Information generated when you use the service
- Stream status, start and end times, and total streaming duration.
- Storage usage.
- Upload and video processing records.
- Login times, IP addresses and browser types for security and troubleshooting.
- Server error logs.
- Short source identifiers in promotional links: a valid `ref` or `utm_source`, with `ref` taking priority. These help us understand signup channels and do not include full URLs or browsing history.
1.3 Information we do not collect
- We do not access your full card number. Payments are handled by Stripe, a third-party payment provider.
- We do not use advertising trackers, pixels or third-party analytics scripts to track you across sites.
- We do not proactively request precise device location, address books or contact lists. Network information such as IP addresses is used for security and troubleshooting as described in Section 1.2.
2. How we use information
Only for:
- Providing storage, conversion and streaming.
- Verifying identity and protecting accounts.
- Measuring usage and enforcing plan limits.
- Necessary emails: verification, password resets, expiry and renewal reminders, payment notices and service interruption notices.
- Troubleshooting and improving the service.
- Understanding signup channels through short source identifiers, without using them to track cross-site activity.
- Meeting legal obligations.
We do not use your content for other purposes, except to provide the service and for necessary security, technical support and legal compliance described in Section 2.1. In particular, we do not use your uploaded videos for advertising, sale or training any model.
2.1 Access by authorized personnel
Authorized personnel may access account information, usage records and uploaded content when necessary for security, abuse prevention, technical support or legal compliance.
This is needed to investigate copyright complaints and abuse reports, and to troubleshoot when you request help. Access is limited to those necessary situations. We do not routinely browse your content or proactively monitor all uploads in full.
See the content policy for review procedures. Administrative actions such as subscription changes are recorded in audit logs. Actions such as stopping a stream are recorded in system logs for traceability.
3. Who receives information
We share only what is necessary with providers needed to deliver the service:
| Provider | Information received | Purpose |
|---|---|---|
| Stripe | Your email, subscription and purchase details, and payment information you provide at Stripe checkout or that Stripe collects for payment processing and security | Payments, renewals, refunds, billing and fraud prevention |
| Resend | Your email address and email content | System emails |
| Contabo | Data stored on the servers | Servers and infrastructure storage |
| YouTube / Google | Streamed video content and information needed to establish the streaming connection | The streaming destination you choose |
We do not sell or rent your personal information.
Otherwise, we disclose information only:
- With your explicit consent.
- When legally required or in response to valid judicial or law enforcement procedures.
- To protect our or others' lawful rights, or prevent fraud or security incidents.
4. Where data is stored
Our servers and data storage are currently in the United States.
If you are elsewhere, using the service means you understand and agree that your data will be transferred there and stored and processed there.
Third-party providers may handle personal information in other countries where they operate. Stripe, its affiliates and subprocessors may handle payment information in multiple jurisdictions, including the United States. That processing is also subject to Stripe's privacy policy and applicable data transfer mechanisms.
5. How long we retain data
| Data | Retention |
|---|---|
| Basic account information | While the account exists. After closure, necessary information may remain in the usage, billing, security or dispute records described below |
| Signup source identifier | Before signup, in our first-party cookie under Section 6. After signup, as account information, subject to account data deletion rules |
| Uploaded videos | Original uploads, converted files and videos you delete follow Section 5.1. For requested account deletion, content is deleted within seven days after identity verification. Accounts we terminate follow Section 8.3 of the terms |
| Stream and usage records | Twelve months after account closure for reconciliation and disputes |
| Payment, refund, invoice, receipt and other billing records | As required by applicable law and reasonable reconciliation, refund and dispute needs. Stripe retains the data it processes under its own policies and legal duties |
| Server logs | Usually 90 days |
5.1 Video retention
- Deletion of original uploads begins after successful conversion. Once deletion is confirmed, only the converted files remain.
- If conversion fails, the original upload is retained for at most 24 hours from the first failure for retries, then enters the deletion queue. Retries do not extend that period. Upload the video again if you need it after deletion.
- After a trial ends, video files are retained for seven days. Deletion begins if no paid plan has been purchased by then. We send a file retention email when the trial ends.
- When paid access ends without renewal, video files are retained for seven days, then deletion begins. Account and stream settings remain. We send a file retention email on the expiry date. Renew successfully within seven days to keep the files. Original uploads still follow the conversion success or failure rules above.
- You may delete videos yourself. After a deletion request is accepted, we clean up the corresponding files. Requested account deletion follows the rules below; termination by us follows Section 8.3 of the terms.
How automatic deletion works: While an account is suspended, automatic deletion for trial and paid expiry is paused, not canceled, and the original deadline is not extended. On reinstatement, tasks resume using that deadline; overdue files enter the deletion queue. The 24-hour rule for failed original uploads is unaffected by suspension. Actual deletion may be delayed for files still used by conversion or streaming, or when storage deletion fails. The system retries and notifies the operator after the retry limit. The stated retention period does not mean physical deletion is already complete in these situations.
If you request account deletion, we delete your uploads from primary storage within seven days after verifying your identity. They cannot be recovered. Save any files you need before requesting deletion.
Backups: Account, configuration and business records in the database may be included in disaster recovery backups. Uploaded videos are not currently backed up. Database backups are not used for routine business processing and are deleted or overwritten through normal backup rotation. We do not promise backup copies will be cleared at the same time as corresponding records in the primary database.
6. Cookies
We use cookies needed to provide the service, including login session cookies, for login continuity, security and basic functionality.
If you arrive on a public page through a link with a valid source identifier, we also use a first-party source cookie. It stores one short identifier so your signup source can still be recorded later. It lasts at most seven days and is cleared after successful signup. A new valid source replaces the previous one and restarts the expiry timer; ordinary browsing does not extend it. A valid `ref` takes priority over `utm_source` in the same link. After signup, the identifier is retained as account information under Section 5.
The source cookie stores no full URLs or browsing history and is not used for cross-site advertising tracking. We do not use third-party tracking cookies.
7. How we protect information
- Passwords are stored as Argon2id one-way hashes. We cannot recover your plain-text password from the hash.
- Stream keys are encrypted with AES-256-GCM. The master key is kept outside the database; the interface shows only the last four characters.
- Sensitive authentication flows such as email verification and password resets use appropriate safeguards, including token expiry, single use and hashed storage.
- Logs use redaction and data minimization to reduce the risk of recording sensitive credentials.
- Data in transit is encrypted with HTTPS.
- Resource ownership checks isolate users' data.
Nevertheless, no system is completely secure. We cannot provide an absolute guarantee. Keep your own original copies of uploaded videos.
8. Your rights
You may contact us to request the following. We respond in accordance with applicable law and the circumstances:
- Access information we hold about you.
- Correct inaccurate information.
- Export your uploads.
- Delete your account and data.
- Object to or restrict certain processing where applicable law provides for it.
- Withdraw consent when processing is based on consent. This may prevent continued use of the relevant features.
Email contact@yongcast.com to exercise these rights. We normally respond within 30 days, subject to shorter or longer periods required or permitted by applicable law.
If you are in the European Economic Area or the United Kingdom, you may also complain to your country's data protection authority.
9. Children
The service is not intended for people under 18. We do not knowingly collect children's personal information.
If we find an account was registered by someone below the legal age, we will close it and delete the related data.
10. Policy changes
We may update this policy. Material changes will be announced by email at least 30 days in advance, and the effective date at the top of this page will be updated.
11. Contact
For privacy questions, requests or complaints:
contact@yongcast.com
Operator information
Operator: Hui Sun
Contact: contact@yongcast.com
The operator above is the seller of this service. Payments are processed by the third-party payment provider Stripe.