Privacy policy
CastMyDoc respects your privacy and is committed to protecting your personal data in accordance with the RGPD
Last update: December 3, 2025
Responsible for data processing
The person responsible for processing your personal data is :
Nom : François Bellay
SIREN : 992 148 122
Adresse : 4 Allée Sagardi, 64600 Anglet, France
Email : contact@castmydoc.com
Personal data collected
When using CastMyDoc, we collect the following data:
For presenters (hosts) :
- Uploaded PDF files
- Session data (identifier, current page, rotation)
- Technical data (IP address for rate limiting)
For guests:
- First name provided voluntarily
- Session presence data (login/logout)
Note : Note: We do not collect any browsing data or advertising cookies, and do not use any third-party tracking tools (Google Analytics, Facebook Pixel, etc.).
Purposes of processing
Your personal data is collected and processed for the following purposes:
- Share and present PDF documents in real time
- Manage presentation sessions and synchronization between presenter and audience
- Display the identity of spectators in the session
- Prevent abuse and limit excessive uploads (rate limiting)
- Ensure the smooth technical operation of the department
Legal basis for processing
The processing of your data is based on the following legal grounds:
- Exécution du contrat : Contract performance: The processing is necessary for the performance of the service you have requested (RGPD, art. 6.1.b)
- Intérêt légitime : Legitimate interest: Prevention of abuse and security of the service constitute a legitimate interest (RGPD, art. 6.1.f)
Data retention period
📄 Uploaded PDF files
4 hours maximum after session creation
Files are automatically deleted from our servers after this period.
🎯 Presentation sessions
Maximum 4 hours after creation
Session data (current page, rotation) is deleted after this time.
👤 First names of spectators
Session duration only
First names are stored locally in your browser and are never stored on our servers after you close your session.
🔒 IP addresses (rate limiting)
1 hour maximum
IP addresses used for rate limiting are automatically deleted after 1 hour.
Data recipients
Your personal data can only be accessed by :
- François Bellay (site editor) for service administration
- Supabase (database hosting and file storage) - Servers located in Europe
- Hostinger (web hosting) - Servers located in Europe
We do not sell, rent or share your data with third parties for commercial or advertising purposes.
Data transfers outside the European Union
Your personal data is hosted exclusively on servers located within the European Union:
- Supabase: European region (Frankfurt, Germany or equivalent)
- Hostinger: Europe
✅ ✅ No transfer outside the EU: Your data remains in the European Union and benefits from the protection of the RGPD.
Data security
We implement all appropriate technical and organizational measures to protect your personal data against :
- Unauthorized access
- Accidental loss, alteration or disclosure
- Cyber attacks and intrusions
Safety measures in place :
- Encrypted HTTPS connection (SSL/TLS)
- Row Level Security (RLS) on the database
- Rate limiting to prevent abuse
- Automatic data deletion after 4 hours
- Secure password policy
Your rights (RGPD)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
✅ Right of access (art. 15 RGPD)
Obtain a copy of your personal data
✏️ Right of rectification (art. 16 RGPD)
Correct inaccurate or incomplete data
🗑️ Right to erasure (art. 17 RGPD)
Request deletion of your data ("right to be forgotten")
⏸️ Right to limit processing (art. 18 RGPD)
Limiting the use of your data
📦 Right to portability (art. 20 RGPD)
Receive your data in a structured, readable format
🚫 Right to object (art. 21 RGPD)
object to the processing of your data for legitimate reasons
How to exercise your rights
To exercise any of these rights, please contact us at :
We will reply within a maximum of 1 month (in accordance with art. 12.3 RGPD).
If you feel that your rights have not been respected, you can lodge a complaint with the CNIL (French Data Protection Authority).
Cookies and similar technologies
CastMyDoc only uses technical cookies that are strictly necessary for the operation of the service:
- Supabase session cookies (authentication of presentation sessions)
- Local name storage (localStorage) for spectators
✅ ✅ No consent required: In accordance with article 82 of the French Data Protection Act, these technical cookies do not require prior consent.
We do not use any third-party tracking, advertising or analytical cookies (Google Analytics, Facebook Pixel, etc.).
Changes to this policy
We reserve the right to modify this privacy policy at any time. In the event of substantial modification, we will inform you by means of a notice visible on the site.
Contact us
For any question relating to the protection of your personal data or to exercise your rights :
Email : contact@castmydoc.com
Courrier : François Bellay, 4 Allée Sagardi, 64600 Anglet, France