Privacy policy

Effective August 17, 2026

This policy explains what Lexbill LLC ("Veocast", "we") collects when you use veocast.ai, why, who we share it with, and the choices you have. We are the controller of this data. Contact us at legal@veocast.ai or Lexbill LLC, 30N South Gould Street, STE N, Sheridan, WY 82801, United States.

What we collect

  • Account. Your email address and display name, and a password if you sign up with one (stored hashed by our authentication provider, never readable by us). If you sign in with Google we receive the name, email address, and profile picture Google shares with us.
  • Profile. Anything you add to your public profile: handle, avatar and cover image, bio, and links to your social accounts.
  • Watch activity. The titles you open and how far you have watched (so playback resumes), your watchlist, likes and dislikes, follows, and the comments and star ratings you post. Views, likes, comments, ratings, and follower counts are shown publicly in aggregate or under your profile name.
  • Purchases and membership. Which titles you have rented or bought, when a rental expires, your Veocast+ status, and Stripe's identifiers for your customer record, subscription, and payments. Card numbers are entered on Stripe's pages and never reach Veocast.
  • Creator data. If you publish, the titles, videos, artwork, and metadata you upload; your submission history and review outcomes; earnings and payout records; and the identifier and status of your Stripe Connect account. Identity documents and bank details for payouts are collected by Stripe directly under its own privacy policy.
  • Reports and messages. When you report a title we store the reason and details you give, the page you reported it from, your browser's user-agent string, and, if you are signed in, your account and email address. Emails you send us are kept with our correspondence.
  • Technical data. IP address, browser and device type, pages requested, and error logs, collected automatically by our servers and used for security, rate limiting, and keeping playback working.

How we use it

  • To run the service: sign you in, resume playback, keep your watchlist, unlock what you have paid for, and show creators how their titles perform in aggregate — never which individual watched what.
  • To take payments and pay creators, and to keep the records that tax and payment rules require.
  • To review submissions, act on reports, enforce our content policy and terms, and protect the service from fraud and abuse.
  • To send transactional email — sign-in links, receipts, payout and review notices. We do not send marketing email unless you ask for it, and you can opt out of it at any time.
  • To understand how the site is used and improve it, using aggregate analytics.

Where the GDPR or UK GDPR applies, our legal bases are performance of our contract with you (running the service and paying creators), legitimate interests (security, analytics, improving the service, enforcing our policies), legal obligation (tax and payment records), and consent where we ask for it. We do not sell personal data, and we do not use it for targeted advertising.

Cookies and local storage

We use cookies and browser storage to keep you signed in and to remember your watchlist, playback position, and preferences. Google Analytics sets its own cookies to measure site usage; you can block them with your browser settings or Google's opt-out add-on without affecting the service. Embedded YouTube players run in privacy-enhanced mode and do not set cookies until you press play.

Who we share it with

We share personal data only with the providers we need to run the service, each bound to process it on our instructions:

  • Supabase — database and authentication.
  • Amazon Web Services — hosting, video storage and delivery, and transactional email.
  • Stripe — payments, membership billing, and creator payouts.
  • Google — sign-in with Google, Google Analytics, and Google Sheets, where our team keeps a roster of creator accounts (name, handle, email, bio, social links, and submission counts) for creator support.
  • Alibaba Cloud Model Studio — automated screening of uploaded profile images for unsafe content; the image is sent for classification and not retained by us beyond the check.
  • YouTube — some titles are streamed through the rights holder's official upload, embedded on the watch page under YouTube's own privacy policy.
  • Cloudflare — DNS and routing of email sent to our addresses.

We also disclose data when the law requires it, to respond to valid legal process, to protect the rights and safety of Veocast, creators, and viewers, and to a successor if the service is sold or merged. Creators do not receive the identities of individual viewers.

Where it is processed

Veocast is operated from the United States and your data is stored and processed there and wherever our providers operate. If you are outside the United States, transfers rely on the providers' standard contractual clauses or equivalent safeguards.

Retention

We keep your data while your account is active. When you delete your account we delete or anonymize it within 90 days, except records we must keep for tax, payment, and legal reasons (typically seven years), content that other people have already purchased, and reports kept for trust and safety. Server logs are kept for up to 90 days.

Your rights

You can update your profile and email from your account page and cancel Veocast+ from Stripe's billing portal linked there. You can ask us for a copy of the personal data we hold about you, to correct it, to delete your account and its data, to restrict or object to processing, or to receive it in a portable format, and you can withdraw consent where processing relies on it. Email legal@veocast.ai from your account address; we respond within 30 days and may ask you to confirm your identity. If you are in the EEA or UK you may also complain to your data protection authority. If you are a California resident, you have the rights above under the CCPA; we do not sell or share personal information as those terms are defined there, and we will not treat you differently for exercising your rights.

Children

Veocast is not for children under 13 and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

Security

Data is encrypted in transit, database access is restricted by row-level permissions, and payment details never touch our systems. No service is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

Changes

If this policy changes, we will post the update here and note the new effective date above. Check back from time to time.