CASAFI Privacy Policy

Effective Date: 2026-10-31
Last Updated: 2026-10-31
Website: https://casafi.app
Legal Operator: CASAFI
Contact: Casafi125@gmail.com

This Privacy Policy explains what information CASAFI collects when you use the CASAFI website, applications, Creator OS, studios, AI services, livestreaming, marketplace, competitions, pools, wallet services and related services (the "Platform"), how we use it, who we share it with, and the choices you have.

1. Information We Collect

Information you give us

• Account information: username, display name, email address (if you sign up with email), password (stored only as a one-way hash), profile picture and profile details.
• Wallet information: public wallet addresses you connect or register (for example Solana addresses). We never ask for or store your wallet's private key or recovery phrase.
• Content: videos, recordings, livestreams, images, audio, scripts, prompts, chat messages, comments, pool and competition entries, scoreboard screenshots, products and other content you create, upload or send.
• Support requests: messages, screenshots and files you send to our support team.
• Payments and transactions: pool entries, payouts, deposits, withdrawals, credits, subscriptions and the related amounts, dates and transaction identifiers.

Information from connected services

• YouTube (Google): if you connect your YouTube account to publish videos, we receive an access token and refresh token for the permissions you approve (uploading videos to your channel and reading your channel's basic information and the videos you published through CASAFI). See section 4.
• Plaid: if you link a bank account, Plaid gives us an access token for that link, the bank's name, account names, account types and the last 4 digits of the account numbers. Your bank login goes to Plaid and your bank, never to CASAFI. We do not receive or store full account numbers.
• Sign-in with a wallet: your public address and a signed message proving you own it.

Information collected automatically

• Usage and device data: pages and features used, approximate time spent, browser type, device type, operating system, IP address, referring page, error reports and performance logs.
• Livestream data: stream titles, viewer counts, chat and reactions, and technical connection data needed to deliver video between viewers and creators.
• Local storage: we store your sign-in session and a few preferences (such as sound or layout choices) in your browser's local storage. We do not use advertising cookies or sell browsing data.

2. How We Use Information

We use information to:

• Provide, operate and secure the Platform, including accounts, livestreams, pools, competitions, payouts, the marketplace and AI tools.
• Process entries, determine results, pay winners, keep financial records and meet tax and legal obligations.
• Generate the content you request with AI features (for example scripts, images, voice and video).
• Publish videos to YouTube or other destinations only when you ask us to.
• Show your public profile, public content and leaderboard positions to other users.
• Detect, investigate and prevent fraud, cheating, abuse, security incidents and violations of our Terms of Service.
• Answer support requests and send service messages (for example results, payouts and security notices).
• Understand how the Platform is used so we can fix problems and improve it.

3. How We Share Information

We do not sell your personal information. We share information only as described here:

• Other users: your username, display name, profile picture, public content, livestreams, chat messages, pool entries and leaderboard positions are visible to other users.
• Service providers: companies that help us run the Platform, such as hosting and storage, AI model providers (which process the prompts and media you submit to generate results), payment and banking providers (such as Plaid), blockchain networks and RPC providers (which process public wallet transactions), video delivery and email services. They may use the information only to provide their services to us.
• Blockchains: transactions you make on a public blockchain (such as Solana) are public and permanent by design. CASAFI cannot change or delete them.
• Legal and safety: when required by law, court order or legal process, or when needed to protect the rights, safety and property of CASAFI, our users or the public.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Privacy Policy.
• With your consent: in any other case where you ask us to or agree to it.

4. Google and YouTube Data

If you connect a YouTube account, CASAFI requests only these Google permissions:

• youtube.upload: to upload the videos you choose to publish to your YouTube channel.
• youtube.readonly: to read your channel's basic information and the status of the videos you published through CASAFI.

We use this data only to publish your videos and show their publishing status to you. We do not use Google user data for advertising, we do not sell it, and we do not let people read it except when you ask us for help, when needed for security, or when the law requires it. Your Google tokens are stored encrypted on our servers.

CASAFI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can disconnect YouTube at any time in CASAFI, and you can revoke CASAFI's access at any time on your Google security settings page. When you disconnect, we delete the stored YouTube tokens.

5. Bank Accounts (Plaid)

CASAFI uses Plaid Inc. ("Plaid") to link bank accounts. By linking a bank account you allow Plaid to collect data from your bank under the Plaid End User Privacy Policy. CASAFI keeps only the Plaid access token (encrypted), the bank name, account names, account types and the last 4 digits. You can remove a linked bank at any time in Wallet > Bank; we then remove the link at Plaid as well.

6. Data Retention

We keep information for as long as your account is active and as needed to provide the Platform. We keep transaction, payout and tax records for as long as the law requires. Livestream chat, logs and similar records are kept for a limited time and then deleted or trimmed. When you delete content or your account, we delete or anonymize the related information within a reasonable time, except where we must keep it for legal, security, fraud-prevention or financial record-keeping reasons. Backups are overwritten on a rolling schedule.

7. Security

We protect information with measures such as encrypted connections (HTTPS), hashed passwords, encrypted storage of access tokens and secrets, access controls and monitoring. No system is completely secure, so we cannot guarantee absolute security. Keep your password and wallet keys private and tell us right away if you believe your account was accessed without permission.

8. Your Choices and Rights

• Access and correction: you can view and edit most profile information in your account settings.
• Deletion: you can delete your content, and you can ask us to delete your account by contacting us.
• Connected services: you can disconnect YouTube and remove linked bank accounts at any time.
• Communications: you can turn off non-essential notifications in your settings.

Depending on where you live (for example the European Economic Area, the United Kingdom or California), you may have additional rights, such as the right to request a copy of your information, to have it deleted, to object to or restrict certain processing, to data portability, and to not be discriminated against for using these rights. To use any of these rights, contact us at Casafi125@gmail.com. We may need to confirm your identity before acting on a request.

9. Children

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Pools, competitions with entry fees, prizes, wallet and financial features require users to be at least 18 years old (or the age of majority where they live). If you believe a child has given us personal information, contact us and we will delete it.

10. International Users

CASAFI is operated from the United States. If you use the Platform from another country, your information may be transferred to, stored and processed in the United States or other countries where our service providers operate, which may have different data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the "Last Updated" date, and where required by law we will notify you before the changes take effect.

12. Contact Us

For questions or requests about this Privacy Policy or your information, contact CASAFI at Casafi125@gmail.com.