Privacy Policy

1. Introduction

Welcome to Castsbot (https://castsbot.com), a service operated by ZEBRALINE TECHNOLOGY LIMITED (斑马科技有限公司), a company incorporated in Hong Kong SAR.

Castsbot provides the latest and professional gaming insights for players and enthusiasts worldwide. Users can listen to gaming podcasts on the road and read game reports or news in their office or wherever they choose.

Your privacy is important to us. This Privacy Policy describes how we collect, use, store, and protect your information when you use our website and services. This policy applies globally to all users of Castsbot, regardless of location.

By accessing or using Castsbot, you agree to the practices described in this Privacy Policy.

3. Information We Collect

3.1 Personal Information

We may collect personal information that can identify you when you voluntarily provide it. This may include:

Name
Email address
Profile picture / avatar
Account information (including information obtained via third-party login services such as Google Sign-In)
Subscription status (e.g., active, trialing, canceled)
Payment information (processed securely by Stripe; we do not store full payment card details)

3.2 Information from Third-Party Login Services

If you choose to sign in using Google Sign-In, we collect the following information from your Google account with your authorization:

Name
Email address
Profile picture (avatar)

This information is stored in our database and displayed in your account center. We do not access any other data from your Google account.

3.3 User Activity Data

When you interact with content on our platform, we record certain user behavior events to provide a personalized experience. This data is stored in our database and displayed in your account center (visible only to you). This may include:

Podcasts you have liked
Reports you have liked
Podcast listening time and duration (used to calculate your learning level)

3.4 Usage Information

When you visit our website, we may automatically collect certain information about your interaction with our services.

IP address
Browser type
Pages visited
Time spent on pages
Device and system information

6. Third-Party Services

We may use trusted third-party services to support analytics and security functionality. These services may collect information according to their own privacy policies.

Google Analytics – used to analyze website traffic and usage behavior
Google reCAPTCHA – used to prevent spam and automated abuse
Google Sign-In – used as a login authentication method. When you sign in with Google, we receive your name, email address, and profile picture from your Google account. Google's privacy policy is available at policies.google.com/privacy.
Stripe – used to process payments securely. When you make a purchase, Stripe may collect payment information (such as credit card details, billing address) directly. We do not store your full payment card information on our servers. Stripe's privacy policy is available at stripe.com/privacy.

Addendum A: European Union / EEA / United Kingdom – GDPR

This addendum applies to you if you are located in the European Economic Area (EEA), the European Union (EU), or the United Kingdom (UK). It supplements the Global Privacy Policy above and provides additional information required under the General Data Protection Regulation (GDPR).

A.1 Data Controller

The data controller responsible for your personal data is:
ZEBRALINE TECHNOLOGY LIMITED
Room 2310, 23/F, Tower 1, The Gateway, Harbour City
Canton Road 17, Tsim Sha Tsui, Hong Kong
Email: contact@zebrasline.com

A.2 Legal Bases for Processing

We process your personal data on the following legal bases:

Consent – Where you have given clear consent for us to process your personal data for a specific purpose.
Contract – Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests – Where processing is necessary for our legitimate interests (e.g., analytics, service improvement, security) and your interests and fundamental rights do not override those interests.
Legal Obligation – Where processing is necessary for compliance with a legal obligation.

A.3 Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access – You may request a copy of the personal data we hold about you.
Right to Rectification – You may request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten") – You may request deletion of your personal data under certain circumstances.
Right to Restrict Processing – You may request that we limit how we use your data.
Right to Data Portability – You may request to receive your data in a structured, commonly used, machine-readable format.
Right to Object – You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent – Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at contact@zebrasline.com. We will respond within 30 days.

A.4 International Data Storage

Your personal data is stored on AWS servers in Singapore. We rely on appropriate safeguards to ensure that your data is protected in accordance with GDPR requirements when stored outside the EEA/UK.

A.5 Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.

Addendum B: United States – CCPA/CPRA & State Privacy Laws

This addendum applies to you if you are a resident of the United States, particularly California and other states with comprehensive privacy legislation. It supplements the Global Privacy Policy above.

B.1 Categories of Personal Information Collected

In the preceding 12 months, we may have collected the following categories of personal information:

Identifiers – Name, email address, IP address, account name, profile picture (avatar from Google Sign-In).
Internet or Network Activity – Browsing history on our site, pages visited, interaction with content, liked podcasts and reports.
Geolocation Data – Approximate location derived from IP address.
Financial Information – Payment information processed by Stripe (we do not store full card details).

B.2 How We Use Personal Information

We use personal information for the business purposes described in Section 4 of the Global Privacy Policy above.

B.3 Sale and Sharing of Personal Information

Castsbot does not sell your personal information. We do not share personal information with third parties for cross-context behavioral advertising purposes.

B.4 Your Rights Under CCPA/CPRA

If you are a California resident, you have the following rights:

Right to Know – You may request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete – You may request deletion of personal information we have collected from you.
Right to Correct – You may request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing – Although we do not sell personal information, you may submit an opt-out request at any time.
Right to Non-Discrimination – We will not discriminate against you for exercising your privacy rights.

To exercise your rights, please contact us at contact@zebrasline.com. We will verify your identity before processing your request and respond within 45 days.

B.5 Other U.S. State Privacy Laws

If you are a resident of Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have similar rights to access, correct, delete, and opt out of certain processing activities. Please contact us to exercise these rights.

Addendum C: Hong Kong SAR – Personal Data (Privacy) Ordinance (PDPO)

This addendum applies to you if you are located in Hong Kong SAR. It supplements the Global Privacy Policy above and provides additional information in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").

C.1 Data User

The data user responsible for your personal data is:
ZEBRALINE TECHNOLOGY LIMITED (斑马科技有限公司)
Room 2310, 23/F, Tower 1, The Gateway, Harbour City
Canton Road 17, Tsim Sha Tsui, Hong Kong
Email: contact@zebrasline.com

C.2 Data Protection Principles

We adhere to the six Data Protection Principles under the PDPO:

DPP1 – Purpose and Manner of Collection: Personal data is collected for lawful purposes directly related to our services, by fair and lawful means.
DPP2 – Accuracy and Retention: We take reasonable steps to ensure personal data is accurate and not kept longer than necessary.
DPP3 – Use of Data: Personal data is used only for the purpose for which it was collected or a directly related purpose.
DPP4 – Data Security: We take reasonable steps to protect personal data against unauthorized access, processing, erasure, loss, or use.
DPP5 – Openness: We make information available about our policies and practices regarding personal data.
DPP6 – Access and Correction: You have the right to access and correct your personal data.

C.3 Your Rights Under the PDPO

Data Access Request – You may request access to your personal data held by us.
Data Correction Request – You may request correction of any inaccurate personal data.

To make a data access or correction request, please contact us at contact@zebrasline.com. We may charge a reasonable fee for processing data access requests as permitted under the PDPO.

C.4 Direct Marketing

We will not use your personal data for direct marketing purposes without your prior consent. You may opt out of receiving direct marketing communications at any time by contacting us or using the unsubscribe mechanism provided in our communications.

C.5 Complaints

If you believe your personal data privacy has been violated, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.

附录 D：中国大陆 – 个人信息保护法 (PIPL)

本附录适用于位于中华人民共和国大陆地区的用户。本附录是对上述全球隐私政策的补充，并根据《中华人民共和国个人信息保护法》（以下简称"个保法"）提供额外信息。

D.1 个人信息处理者

负责处理您个人信息的主体为：
斑马科技有限公司（ZEBRALINE TECHNOLOGY LIMITED）
地址：香港尖沙咀广东道17号海港城港威大厦1座23楼2310室
电子邮件：contact@zebrasline.com

D.2 个人信息处理的法律依据

我们基于以下法律依据处理您的个人信息：

取得您的同意 – 在收集和使用您的个人信息前，我们会征得您的同意。
履行合同所必需 – 为向您提供服务或履行与您之间的合同义务。
履行法定职责或法定义务所必需 – 为遵守法律法规的要求。
为应对突发公共卫生事件或紧急情况下保护自然人的生命健康和财产安全所必需。

D.3 个人信息的存储

您的个人信息存储于位于新加坡的 Amazon Web Services (AWS) 服务器上。仅有少数经授权的工作人员可通过 AWS 管理控制台访问相关数据，我们不会将数据传输至其他地点。

D.4 个人信息的跨境提供

由于我们的服务器位于中国大陆境外（新加坡），当您使用我们的服务时，您的个人信息将存储在境外。我们已采取必要措施保障您的个人信息安全，包括：

对数据实施严格的访问控制，仅限少数授权人员访问；
采用加密传输和存储技术保护数据安全；
定期评估境外接收方的数据保护能力。

在使用我们的服务前，我们将就个人信息跨境提供事项单独征得您的同意。

D.5 您的权利

根据个保法，您享有以下权利：

知情权和决定权 – 您有权了解我们对您个人信息的处理情况，并有权决定是否同意处理。
查阅权和复制权 – 您有权查阅和复制我们持有的您的个人信息。
更正权 – 您有权要求我们更正不准确或不完整的个人信息。
删除权 – 在法定情形下，您有权要求我们删除您的个人信息。
可携带权 – 在符合国家网信部门规定条件的情况下，您有权请求将个人信息转移至您指定的其他个人信息处理者。
撤回同意权 – 您有权随时撤回此前给予的同意，撤回同意不影响撤回前基于同意已进行的个人信息处理活动的效力。
拒绝自动化决策权 – 您有权拒绝仅通过自动化决策方式作出的对您权益有重大影响的决定。

如需行使上述权利，请通过电子邮件 contact@zebrasline.com 与我们联系。我们将在十五个工作日内予以答复。

D.6 敏感个人信息

我们目前不主动收集敏感个人信息（如生物识别信息、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等）。如未来因业务需要收集敏感个人信息，我们将单独征得您的同意并告知处理的必要性及对您的影响。

D.7 未成年人保护

我们的服务不面向不满十四周岁的未成年人。我们不会故意收集不满十四周岁未成年人的个人信息。如果我们发现在未经父母或监护人同意的情况下收集了未成年人的个人信息，我们将尽快删除相关信息。

D.8 投诉与举报

如果您认为我们的个人信息处理活动侵害了您的权益，您有权向履行个人信息保护职责的部门进行投诉、举报。