VRCaster · Your account

Privacy notice

Version 2026-09-05. This is a restricted acceptance-test service.

Who is responsible

Binteca Pty Ltd

What we process and why

We use your email, display name, password hash and verification status to operate your account. We keep session records for security. Creator/talent applications contain your submitted public profile links, biography and human review outcome. These are visible to authorized reviewers, not other users.

Account and streaming data are necessary to provide the service you request. Security and human vetting protect users and the service. Optional profile discovery and Instagram photo sharing require a separate choice and default off. We do not use advertising trackers or sell personal information.

Live media and other users

Video and audio are transmitted to connected viewers and are not recorded by VRCaster. Other viewers can still record their screens. Peer-to-peer media can expose network addresses to peers; do not broadcast if this is unacceptable. Public-profile discovery means visibility to signed-in members, not the public web. Keep it off to prevent others joining your stream.

Retention

Sessions expire after 8 hours or 30 minutes of inactivity. Verification and reset links expire after 30 minutes. Unverified registrations are removed after 7 days. Security events are retained for 90 days; resolved privacy requests and reports are removed after 90 days. Pending applications remain until you withdraw or delete your account. Live signaling expires within minutes. Deletion removes your account, profile, sessions and linked tokens from the active database. Encrypted backups and their retention must be approved before production launch.

Your choices and rights

Account settings let you correct your display name, export your information, restrict processing, change visibility, end sessions and delete your account. You can submit an objection or another privacy request there. The operator must review requests, explain any lawful exception, and respond within applicable deadlines. You may complain to South Africa's Information Regulator or your applicable EU supervisory authority.

Service providers and transfers

The pilot runs on the UAT infrastructure registered for VRCaster. Email delivery uses the operator-configured service. Live connections use Cloudflare STUN and a configured TURN relay where available. Instagram connections and photo sharing are currently disabled. Any future connection will require Meta authorization and a separate sharing choice. The operator must approve processor agreements, hosting locations, international-transfer safeguards and breach procedures before production launch.

This notice describes implemented pilot behavior. It is not a certification of GDPR or POPIA compliance. Manage your privacy.