Privacy Policy

Excalicast ("we," "our service") is a browser-based whiteboard recorder. This policy describes how we collect, use, store, and share your information.

1. Information We Collect

The core design principle of this service is that recording content never leaves your browser. Specifically:

• Recording data (whiteboard operation events, microphone audio, camera video, etc.) is stored entirely in your browser's local storage (IndexedDB). We do not upload, read, or back up this data.
• Payment records: when you purchase a watermark-free unlock for a specific recording, we store the following on our server — recording ID, amount paid, currency, Paddle transaction ID, and payment timestamp. This is used to confirm purchase status the next time you export that recording.
• Account information (if you choose to sign in): email address and hashed authentication credentials. We never store plaintext passwords.
• Payment information: all payment data (card numbers, Apple Pay / Google Pay tokens, etc.) is processed end-to-end by Paddle.Excalicast servers never see your payment information.
• Access logs: our hosting provider (Vercel) automatically records basic access logs (IP, User-Agent, timestamp) for security auditing and incident triage.

2. How We Use Information

• Payment records are used to verify purchase status and grant watermark-free export access.
• Account information is used for authentication.
• Access logs are used for security auditing, troubleshooting, and aggregated statistics.

We do not sell or rent your personal information to any third party, nor use it for advertising.

3. Third-Party Services

Excalicast uses the following third-party services:

• Paddle (payment processing): provides the Checkout overlay, card processing, tax compliance, and receipt delivery. Paddle's privacy policy: paddle.com/legal/privacy.
• Vercel (hosting): site deployment and CDN. Vercel's privacy policy: vercel.com/legal/privacy-policy.

4. Cookies

We use essential cookies for:

• Login session persistence (only when you choose to sign in).
• User preferences (e.g. recorder bar position and other UI settings).

We do not use tracking cookies or third-party analytics cookies.

5. Data Retention

• Recording data: entirely under your control. You can delete it anytime via your browser's developer tools or our "Library" page.
• Payment records: retained for as long as your account exists, so we can honor watermark-free export access.
• Access logs: retained for approximately 30 days.

6. Your Rights

You have the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your account and associated payment records (note: deleting payment records means the corresponding recordings can no longer be exported without watermarks).
• Request an export of your data.

To exercise these rights, email support@excalicast.cn. We will respond within 14 days.

7. Children's Privacy

This service is not directed at children under 13. If we discover we have inadvertently collected information from a child, we will delete it immediately.

8. Policy Changes

This policy may be updated from time to time. Material changes will be noted at the top of this page via the "Last updated" date. Please review periodically.

9. Contact

For questions or complaints regarding this privacy policy, please contact support@excalicast.cn.