Privacy Policy

This Privacy Policy explains how ArdSeek Media Ltd (“PassCast”, “we”, “us”, “our”) collects, uses and protects personal data when you use passcast.tv and related services.

We are committed to handling your data lawfully, transparently, and in accordance with GDPR and applicable data protection legislation. If you have any questions about this policy, contact us at kevin@passcast.tv.

1. Who We Are

PassCast is a pay-per-view live streaming platform operated by ArdSeek Media Ltd, a company registered in Ireland. For the purposes of GDPR, ArdSeek Media Ltd is the data controller for personal data we collect directly. When we process viewer data on behalf of a broadcaster using our Community tier, we act as a data processor.

2. What Data We Collect

Account data. When you create a viewer or broadcaster account, we collect your email address and any details you choose to provide, such as your name, organisation name and phone number.

Authentication data. We use passwordless sign-in via one-time codes sent to your email, or via Google or Apple OAuth. We do not store passwords. When you sign in via a third-party provider, we receive your email address and basic profile information from that provider.

Payment data. Payments are processed by Stripe. PassCast does not store card numbers, CVC codes, or full bank account details. We receive limited transaction information from Stripe, including the amount charged, the currency, the last four digits of the card, and the country of issue.

Viewing activity. We record which events you have purchased access to, when you signed in, and which streams you have viewed. This is used to grant access to paid content and to provide broadcasters with aggregate analytics.

Technical data. We collect standard technical information when you use the service, including IP address, browser type, device type, and operating system. This is used to maintain security, diagnose issues, and protect against abuse.

Communications. When you contact us by email, we retain a record of the correspondence.

3. Why We Use Your Data

We process your personal data for the following purposes:

To provide the streaming service, including authenticating you, granting access to content you have purchased, and delivering streams to your device.

To process payments and issue refunds where applicable.

To send transactional emails about your account, your purchases, and events you are attending.

To provide broadcasters with aggregate analytics about their audience (such as total viewers and minutes watched). Individual viewer identities are not shared with broadcasters except where the viewer has purchased a ticket to that broadcaster's event.

To protect the service against fraud, abuse and unauthorised access.

To comply with legal obligations, including tax and accounting requirements.

4. Legal Basis

We rely on the following legal bases under GDPR for processing your data:

Contract. To provide the service you have signed up for or purchased a ticket from.

Legitimate interest. To protect the platform from fraud and abuse, to improve our service, and to provide broadcasters with the analytics they need to run their events.

Legal obligation. To comply with tax, accounting, and other statutory requirements.

5. Who We Share Data With

We share your data only with service providers and third parties who help us run the platform, and only to the extent necessary:

Stripe. Processes payments and manages broadcaster payouts.

Mux. Provides live streaming and video delivery infrastructure.

Supabase. Provides database and authentication services. Our data is hosted in the EU (Ireland).

Vercel. Hosts our application, served from an EU region.

Resend. Delivers transactional and authentication emails on our behalf.

Sentry. Collects error reports to help us diagnose and fix bugs. We configure Sentry to redact personal data where practical.

Broadcasters. When you purchase a ticket for an event, the broadcaster of that event receives your email address and purchase details as necessary to provide you with access.

We do not sell your personal data. We do not share it with advertisers.

6. International Transfers

Our data is primarily hosted in the EU. Some of our service providers may process data outside the EU (for example, Stripe). In those cases, transfers are protected by the appropriate safeguards under GDPR, including Standard Contractual Clauses.

7. How Long We Keep Data

We retain personal data only for as long as necessary to provide the service, meet our legal obligations, or resolve disputes. Specifically:

Account data is retained while your account is active, and for up to 12 months after account closure.

Transaction records are retained for 7 years to comply with accounting and tax obligations.

Technical logs are retained for up to 90 days.

8. Your Rights

Under GDPR you have the following rights in respect of your personal data:

Access. You can request a copy of the personal data we hold about you.

Correction. You can ask us to correct inaccurate or incomplete data.

Erasure. You can ask us to delete your personal data, subject to our legal obligations to retain certain records.

Restriction. You can ask us to limit how we process your data in certain circumstances.

Portability. You can ask us to provide your data in a machine-readable format.

Objection. You can object to processing based on legitimate interests.

To exercise any of these rights, email kevin@passcast.tv. We will respond within one month.

9. Cookies

PassCast uses cookies that are strictly necessary to provide the service, including authentication cookies that keep you signed in and secure your session. These do not require consent under GDPR.

We do not use advertising cookies or third-party tracking cookies on passcast.tv.

10. Security

We use industry-standard security measures to protect your personal data, including TLS encryption in transit, encryption at rest for the database, hashed one-time codes for email sign-in, and strict access controls for our team. No system is perfectly secure, however. If we become aware of a data breach that affects your personal data, we will notify you and the relevant supervisory authority as required by law.

11. Children

PassCast is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we hold data about a child under 13, please contact us and we will delete it.

12. Complaints

If you are unhappy with how we have handled your data, please contact us first at kevin@passcast.tv so we can try to resolve the issue. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated by email to account holders where practical.

14. Contact

For any privacy-related questions, or to exercise your rights, contact us at kevin@passcast.tv.