Privacy Policy

Cast Studio · TJ NOVA LTD · Company No. 17308318 · 124-128 City Road, London EC1V 2NX · Last updated 25 September 2026

This policy covers Cast Studio on the web (cast.tjnova.app and caststudio.tjnovaltd.com) and in the iPhone and Android apps. TJ NOVA LTD, registered in England and Wales, is the controller of your personal data. Questions: info@tjnovaltd.com.

1. The videos you edit

When you add a video, the file is uploaded over an encrypted connection to our own media server so it can be transcribed, cut, captioned and rendered. We store the original file, its transcript (words and timings), your edits and caption text, and the previews and exports made from them.

Speech-to-text (Faster-Whisper), caption translation (M2M100), frame smoothing (RIFE) and rendering (FFmpeg) all run on that server. Your media is not sent to any third-party AI service and is not used to train models. Your projects are private to you; we open one only when you ask us to fix a problem with it or when the law requires it.

2. Your account

You can start without an account: the service then creates a random guest ID and a session that lasts 7 days. Creating an account adds three things to what we hold: your email address, a salted hash of your password and a flag showing whether that address has been confirmed. Anything you started as a guest is then moved into it. One-time sign-in codes are emailed to you through our account service's email provider. On the website you can also sign in with Google or GitHub; that provider then gives us your email address and an account ID.

3. Purchases

In the iPhone app, Cast Studio Pro is sold and billed by Apple. Apple gives us the transaction details needed to unlock clean exports (product, transaction IDs, purchase and expiry dates, refunds and revocations), both through the app and through App Store Server Notifications when a subscription renews, lapses or is refunded. In the Android app, Google Play gives us a purchase token and its status. On the website, a licensed payment institution processes the payment and tells us whether the order was paid. We never receive or store your card details.

4. Security and service data

To keep the service running and fair we store a keyed hash of your IP address with the number of bytes uploaded that day (for the daily upload limit), hashed counters of sign-in attempts, the session cookie that keeps you signed in, and the status and error messages of your processing jobs. The session cookie is strictly necessary; we use no advertising cookies.

The iPhone and Android apps contain no advertising, analytics or tracking SDKs and send no usage analytics. On the website, our account service records page views (page path and language); if you are signed in there, a view is linked to your account. We do not track you across other companies' apps or websites.

5. Where it is stored

Media, projects and Cast Studio accounts are stored on our own server, which is reached through Cloudflare's network. Membership status and our account service (base.t-j.store) run on Cloudflare's infrastructure.

6. Who we share it with

We do not sell personal data or share it for advertising. Service providers that process data for us: Cloudflare (network, and hosting of the account service), our email delivery provider (sign-in codes and receipts), and Apple, Google or the payment institution for payments. We disclose data to authorities only when the law requires it.

7. How long we keep it

Projects and their media stay until you delete them or your account. When you delete a project, its media files are removed from the server within minutes (if an export is still running, straight after it finishes). If you lose access to a guest session, email us the project ID and we will remove it.

Deleting your account (in the app under Me › Your account › Delete account, or on the website) permanently removes the account, its projects and media files, sessions and sign-in identities. Paid orders are kept without your email as accounting records, which UK law requires (normally for six years). App Store and Google Play subscription records are detached from the deleted account so that the buyer can restore the purchase to a new account.

8. Your rights

Under UK and EU data protection law you can ask to access, correct, export or delete your data, or object to how we use it. In the app you can export your data yourself (Me › Your account › Export my data) and delete your account. For anything else, write to info@tjnovaltd.com and expect an answer within a month. If our answer does not settle it, the UK regulator is the Information Commissioner (ico.org.uk); in the EU, your national supervisory authority.

9. Children

The service is meant for people aged 13 and over. If we find that a younger child has uploaded material, we delete it together with the account.

10. Changes

When this policy changes we update the date at the top, and we tell you about material changes in the app or by email.