Privacy Policy

01

Who We Are

MomentCast ("MomentCast," "we," "us," or "our") is a live streaming platform at momentcast.live that enables photographers, videographers, and other event professionals ("Streamers") to broadcast live events to their clients' guests ("Viewers") in real time.

This Privacy Policy describes how MomentCast collects, uses, stores, and protects personal information when you use our marketing site at momentcast.live, our streamer dashboard at app.momentcast.live, or our viewer pages at go.momentcast.live.

By using MomentCast, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

02

Information We Collect

Information you provide directly

Information collected automatically

Information from third-party services

When you sign in using Google, we receive your Google account name, email address, and profile photo as authorized by you on Google's consent screen. We do not receive or store your Google password or access to any Google services beyond what you explicitly authorize.

03

Google User Data

What Google data we access

MomentCast uses Google Sign-In for authentication only. When you sign in with Google, we request access to the following data:

• Email address — used as your account identifier and for service communications.
• Display name — used to personalize your dashboard experience.
• Profile photo URL — optionally displayed in your account settings.

We do not request access to your Google Drive, Gmail, Google Calendar, Google Contacts, or any other Google service. We do not request sensitive or restricted OAuth scopes beyond basic profile and email identification.

How we use Google user data

Google user data is used exclusively to:

• Create and authenticate your MomentCast account.
• Display your name within your personal dashboard.
• Send transactional emails related to your account and events (e.g., event confirmations, support responses).

We do not use Google user data for advertising, profiling, data brokerage, or any purpose beyond providing and improving your MomentCast experience. We do not transfer, sell, or share Google user data with any third party except as described in Section 5.

How we store Google user data

Your name, email address, and profile photo URL are stored securely in our database hosted on Supabase (PostgreSQL), protected by encryption at rest and in transit. See Section 6 for details.

How to revoke Google access

You can revoke MomentCast's access to your Google account at any time by visiting Google Account Permissions and removing MomentCast. Revoking access will not delete your MomentCast account or event data; contact support@momentcast.live to request full account deletion.

04

How We Use Your Data

We use the information we collect to:

• Create, maintain, and authenticate your MomentCast account.
• Enable Streamers to create and manage live events.
• Deliver live video streams and recorded replays to authorized Viewers.
• Process payments and manage event credits.
• Send transactional communications (event confirmations, receipts, support responses).
• Monitor platform performance, diagnose technical issues, and improve the service.
• Measure viewer engagement through aggregated, anonymized analytics.
• Comply with applicable legal obligations.

We do not use your data for behavioral advertising, do not build advertising profiles, and do not sell or rent your personal information.

05

Data Sharing & Disclosure

MomentCast does not sell your personal information. We share data only in the following limited circumstances:

Service providers (processors)

Legal requirements

We may disclose your information if required by law, court order, or government authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.

Business transfers

If MomentCast is acquired, merged, or undergoes a change of ownership, your information may be transferred to the successor entity under the same privacy protections described here. We will notify you of any such change via email or prominent notice on our website.

What we never do

• We never sell personal data or Google user data to any third party.
• We never share Google user data with advertisers or data brokers.
• We never use Google user data to serve targeted advertisements.
• We never transfer Google user data to any party other than those listed above.

06

Data Security

We take reasonable, industry-standard measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your browser and our servers uses HTTPS/TLS.
• Encryption at rest: User data stored in Supabase is encrypted at rest.
• Access controls: Database access is restricted to authenticated application processes; no public access is permitted.
• Secure infrastructure: We operate on Cloudflare Pages and Cloudflare Workers, which enforce HTTPS for all requests.
• Authentication tokens: OAuth tokens are short-lived and stored using secure, httpOnly mechanisms.

No security system is impenetrable. In the event of a data breach that affects your rights or freedoms, we will notify affected users promptly as required by applicable law.

07

Data Retention & Deletion

How to request deletion

To delete your account and associated data, email support@momentcast.live with the subject line "Account Deletion Request." We will confirm receipt within 5 business days and complete deletion within 30 days, except for data we are legally required to retain (e.g., billing records).

08

Cookies & Analytics

Cookies we use

• Session cookies: Used to keep you logged into your Streamer dashboard. These expire when you close your browser or sign out.
• Authentication cookies: Set by Supabase Auth to maintain your authenticated session securely.
• Analytics cookies: Google Analytics 4 (GA4) cookies are set on viewer pages (go.momentcast.live) to measure page views and engagement. These are anonymized and do not identify you personally.

Viewers (unauthenticated)

Viewers of event pages at go.momentcast.live do not need to create an account. Their viewing experience is anonymous. GA4 may set analytics cookies; viewers can opt out using their browser's cookie settings or a browser-based ad blocker.

Third-party analytics

We use Google Analytics 4 (tag G-KL4FM3L62J) on viewer pages to understand aggregate traffic patterns, and Cloudflare Analytics on all properties for performance monitoring. Neither service is given access to personally identifiable information.

09

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention obligations).
• Portability: Request your data in a structured, machine-readable format.
• Withdrawal of consent: Revoke Google Sign-In authorization at any time via Google Account Permissions, or contact us to withdraw other consents.
• Opt-out of analytics: Disable GA4 tracking via your browser's cookie controls or Google's opt-out tool.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact support@momentcast.live. We will respond within 30 days.

10

Children's Privacy

MomentCast is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact support@momentcast.live and we will delete it promptly.

Consistent with Google's COPPA requirements for OAuth applications, MomentCast's Streamer dashboard (which uses Google Sign-In) is intended for adult professionals only.

11

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify registered Streamers by email and update the "Last Updated" date at the top of this page.

If you use Google Sign-In and we begin using Google user data in a new way, we will notify you and prompt you to consent to the updated policy before making any such change.

Your continued use of MomentCast after a policy update constitutes your acceptance of the revised Privacy Policy.

12

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out:

We aim to respond to all privacy-related requests within 5 business days and to resolve them within 30 days.