Privacy Policy
1. Information TradeCast handles
Depending on how you use the service, TradeCast handles account identifiers and email addresses provided through Supabase Auth; profile, creator-application, affiliation, follow, and livestream information you submit; and technical request and security data generated while operating the website. Live audio/video is sent directly between the broadcaster's browser and each viewer over WebRTC; Supabase Realtime carries short-lived connection signaling and chat, not media.
2. How information is used
Information is used to authenticate users, operate profiles and creator applications, provide livestreams, protect the service, review reports, and comply with legal obligations. Creator profile and livestream details may be publicly visible. Do not include sensitive personal information in a public profile, stream, or chat.
3. Service providers and disclosure
Supabase provides authentication, database, and signaling infrastructure. WebRTC connection setup can use public STUN services and, when configured, a TURN relay provider. Information may be disclosed to service providers needed to operate the platform, when required by law, or where reasonably necessary to respond to an urgent safety issue. Do not use TradeCast as a private communications service.
4. Retention and security
TradeCast retains information for as long as needed to provide the service, maintain security and moderation records, and meet legal obligations. Reasonable technical and organizational safeguards are used, but no online service can guarantee absolute security.
5. Choices and requests
You can edit profile information through available account tools. For access, correction, deletion, or privacy concerns, contact the operator using the contact information published for the service. Some records may need to be retained for security, legal, or operational reasons.
6. Policy changes and review
This policy describes the current intended handling of TradeCast data. The operator should confirm it against the deployed infrastructure, retention practices, and applicable privacy laws, and obtain jurisdiction-specific legal review before launch.