Privacy Policy

Bycast ("Bycast," "we," "us," or "our") operates the website at bycast.app (the "Site"). This Privacy Policy explains how we collect, use, and protect your information when you visit the Site or apply for early access.

Bycast is an early-stage project operated by its founders. We are in the process of incorporating. When incorporation completes, this policy will be updated to name the operating entity, and the data described here will transfer to it. To reach the people responsible for your data in the meantime, email info@bycast.app.

1. Information we collect

When you submit an early-access application, we collect:

• Email address — to contact you about beta access.
• Topic preferences and intended usage — to understand how you plan to use Bycast.
• Hashed IP address and user agent — for anti-abuse protection and deduplication. We store a one-way hash of your IP address, not the IP address itself.
• Timestamps — when your application was submitted.

We do not ask for your name, wallet address, or any payment information anywhere on this Site.

The Site does not set cookies, and does not use client-side analytics or tracking scripts.

2. How we use your information

We use the information we collect to:

• Process and confirm your early-access application.
• Send you a confirmation email.
• Contact you when beta access becomes available.
• Understand, in aggregate, which topics and use cases people want, so we can prioritise what we build.
• Prevent abuse and duplicate signups.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use it for advertising.

3. Legal basis for processing (EEA, UK, Switzerland)

• Consent. You give consent when you submit the application form, and it covers the confirmation email and later emails about beta access. You can withdraw it at any time by unsubscribing or emailing us. Withdrawing consent does not affect processing that already happened.
• Legitimate interest. We collect hashed IP addresses and user agent data for anti-abuse and deduplication. Hashing supports data minimisation. We also review topic and usage data in aggregate to guide product development.

4. Third-party service providers

We use the following providers to operate the Site. They act as processors and handle data only as necessary to provide their services to us.

• Vercel (US) — hosts the Site. Vercel may process limited technical data, such as server logs, as part of its hosting infrastructure. See Vercel's Privacy Policy.
• Resend (US) — delivers the confirmation email. Your email address and submission contents are processed by Resend to send the email, and Resend may retain send metadata such as recipient and delivery status. See Resend's Privacy Policy.
• Neon (US, AWS us-east-1, N. Virginia) — hosts the database where application data is stored.

We may also disclose data where legally required, or to protect our rights or the security of the Site. If Bycast is acquired or merged, waitlist data may transfer to the acquirer, subject to this policy.

5. Data storage and retention

Application data is stored in a PostgreSQL database hosted in AWS us-east-1 (N. Virginia, United States).

We keep waitlist data until Bycast launches and for up to 12 months after, or until you ask us to delete it, whichever comes first. If you unsubscribe, we keep a minimal record of your email so that we do not contact you again.

6. International data transfers

If you are located outside the United States, your data will be transferred to and processed in the United States, where our service providers operate.

For users in the EEA, the UK, and Switzerland, these transfers rely on standard contractual clauses or other lawful transfer mechanisms maintained by our service providers. You can ask us for details.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data.
• Object to or restrict certain processing.
• Receive a portable copy of the data you gave us, in a machine-readable format.
• Withdraw consent where processing is based on consent.

To exercise any of these, email info@bycast.app. We respond within 30 days.

If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

8. Children

The Site is intended for people 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have, we will delete it promptly. If you believe a minor has submitted data to us, contact us at info@bycast.app.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page, and where the change materially affects how we use your data, we will tell waitlist subscribers by email.

10. Contact us

Questions about this policy, or to exercise your data rights:

Bycast
Email: info@bycast.app