JUMPCAST

Privacy Policy

Last updated: September 26, 2026

This Privacy Policy explains what personal data JUMPCAST ("we", "us") collects when you use the JUMPCAST website at jumpcast.app and the JUMPCAST membership (the "Service"), why we use it, who we share it with, and the choices and rights you have. We collect as little as we can to run the Service.

1. Who is responsible

JUMPCAST is the controller of your personal data. Contact us about privacy at support@jumpcast.app.

2. What we collect

  • Account data: username, email address, and the invitation used to create your account.
  • Credentials: your password is stored only as a salted, one-way hash; we cannot read it. If you turn on two-factor authentication, we store the secret needed to check your codes, encrypted.
  • Discord data (if you link Discord): your Discord user ID and username. We do not receive your Discord password or messages.
  • Membership and billing data: plan, subscription status, and billing dates. Card details are entered directly with our payment processor, Stripe; we never see or store your full card number.
  • Security data: limited technical information needed to protect the Service, such as request timing and rate-limit counters. IP addresses are converted into pseudonymous, regularly rotated values and are not stored in readable form.
  • Messages to support: what you send us when you contact us.

3. Why we use it, and our legal bases

  • To provide your membership (create and secure your account, give Discord access, process payments): performance of our contract with you.
  • To send service messages (email verification, password resets, billing and trial notices): performance of contract.
  • To keep the Service secure (prevent fraud, abuse, and account sharing): our legitimate interests.
  • To meet legal obligations (tax and accounting records, lawful requests): legal obligation.
  • Where we ask for your consent for anything else, you can withdraw it at any time.

We do not use your data for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share it with

We share personal data only with service providers that help us run the Service, under contracts that limit how they use it:

  • Stripe: payment processing, subscriptions, and fraud prevention.
  • Cloudflare: network security, protection against abuse, and delivery of the website.
  • Discord: the community platform and account linking, if you link your Discord account.
  • Proton: delivery of the emails we send you.

We may also disclose data if required by law or to protect the rights and safety of our members. We do not sell your personal data.

5. International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses (and the UK addendum) to protect data transferred out of the EU/EEA, the UK, or Switzerland.

6. How long we keep it

  • Account and membership data: while your account exists, then deleted or anonymized within 90 days of closure, except as below.
  • Billing records: as long as tax and accounting laws require (typically up to 7–10 years), held by us and Stripe.
  • Security data: kept for short periods (generally no longer than 30 days) unless needed to investigate abuse.

7. Security

We protect your data with encryption in transit and at rest, strict access controls, and minimal data collection. Sensitive form submissions, such as passwords and account details, are encrypted in your browser before they are sent, so they cannot be read in transit. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities as the law requires.

8. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and receive a copy;
  • correct inaccurate data;
  • have your data deleted;
  • receive your data in a portable format;
  • object to or ask us to restrict certain processing;
  • withdraw consent where we rely on it;
  • lodge a complaint with your data protection supervisory authority.

To exercise a right, email support@jumpcast.app. We may need to verify your identity, and we will respond within the time the law requires (usually one month). We will not treat you differently for exercising your rights.

9. Regional notices

  • California (CCPA/CPRA): we collect the categories of data listed in section 2 for the purposes in section 3. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. You have the rights to know, delete, and correct, and to not be discriminated against for using them.
  • Canada (PIPEDA): you may access and correct your data and withdraw consent, subject to legal and contractual limits.
  • Australia: we handle personal information in line with the Australian Privacy Principles; you may access and correct it and complain to the OAIC.
  • Brazil (LGPD): you have the rights listed in section 8 and may contact the ANPD.

10. Children

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

11. Cookies

We use only strictly necessary cookies: a secure session cookie that keeps you signed in, and a short-lived cookie used while you link your Discord account. We do not use analytics, advertising, or tracking cookies. Our security provider may set a strictly necessary cookie to protect against abuse.

12. Changes

We may update this Privacy Policy. If a change materially affects you, we will tell you by email or on the website before it takes effect.

13. Contact

Privacy questions or requests: support@jumpcast.app.