Legal
Privacy and Cookie Notice
Version 1.0 · Last updated October 17, 2026
The short version
A plain summary. The full notice below is what applies.
1. Who we are and how to contact us
Cast is a synthetic-user research service available at castofusers.com (the "Service"). It is operated by Enhance Ventures ("Enhance", "we", "us" or "our"), a venture studio based in the Dubai International Financial Centre (DIFC) and in Baku. You can learn more about us at www.enhance.online.
For the personal data described in this notice, we are the controller. If you have any question about privacy, or want to exercise your rights, email privacy@castofusers.com.
2. What this notice covers
This notice explains how we collect, use, share and protect personal data when you visit our website, create an account, run studies, buy a plan or contact us. It also explains how we use cookies.
Where an organization uses Cast and puts personal data into its own workspace, we process that data on the organization's behalf as a processor, under our Terms and Data Processing Addendum. In that case the organization's own privacy notice also applies.
This notice does not cover third-party websites or services that we link to.
3. Data we collect
Account data: your name, email address, password (stored only in hashed form), organization, role, and your workspace and team settings.
Billing data: your billing name and address, tax details, plan and payment history. Payments are processed by Stripe. We never see or store your full card number.
Study content you provide: the briefs, questions, documents, logos and other material you submit, and the interviews, reports and other outputs generated for you.
Usage and device data: pages and features you use, actions you take, timestamps, IP address, approximate location derived from it, browser and device type, and error logs.
Cookies and similar technologies: see the Cookies section below.
Communications: messages you send us by email, chat or feedback forms, and records of the service emails we send you.
4. How we use it and our legal bases
To provide the Service you ask for: creating your account, running studies, generating outputs, handling billing and giving support. Legal basis: performance of our contract with you.
To keep the Service secure and reliable, prevent fraud and abuse, understand how the Service is used in aggregate, and improve it. Legal basis: our legitimate interests, balanced against your rights.
To send optional marketing emails, and to use analytics cookies. Legal basis: your consent, which you can withdraw at any time.
To keep tax and accounting records, respond to lawful requests and meet other legal duties. Legal basis: legal obligation.
We do not use your personal data for automated decisions that have legal or similarly significant effects on you.
5. AI processing
To generate interviews and reports, your study content is processed by third-party AI model providers. We use these providers under data protection terms that prohibit them from using your content to train their models.
AI users are synthetic. They are generated from general public knowledge and models of human behavior. We do not create profiles of real people, and AI users are not based on any identifiable individual.
Please do not put personal data of your real customers, employees or other individuals into briefs, questions or uploaded documents. Studies work best with descriptions of audiences and situations, not named people.
6. Sharing and subprocessors
We do not sell your personal data. We share it only with service providers (subprocessors) who help us run the Service, and only as needed for that purpose. They fall into these categories: cloud hosting and storage; AI model providers; payment processing; email delivery; and analytics, only where you have given consent.
Each subprocessor is bound by a written agreement that requires it to protect personal data and use it only on our instructions. A current list of subprocessors is available on request at privacy@castofusers.com.
We may also disclose data where required by law or to protect rights and safety, and to a buyer or successor if our business or the Service is sold or reorganized, subject to this notice.
7. International transfers
Our team and providers operate in several countries, so your personal data may be processed outside the country where you live. When we transfer personal data, we use appropriate safeguards, such as standard contractual clauses approved by the relevant authorities, adequacy decisions, or other mechanisms permitted under the law that applies to you.
8. How long we keep data
Account data and study content: for the life of your account, and up to 30 days after you delete your account or workspace.
Billing records: for as long as tax and accounting law requires.
Backups: deleted data may remain in encrypted backups for up to 90 days before it is overwritten.
Where we keep data longer because the law requires it, or to resolve a dispute, we limit its use to that purpose.
9. Security
We use technical and organizational measures designed to protect personal data, including encryption in transit and at rest, access controls based on least privilege, logging and monitoring, and vetted providers.
No system is completely secure. If you believe your account has been compromised, contact security@castofusers.com right away.
10. Your rights and how to exercise them
Depending on where you live, you may have the right to: access your personal data; correct it; delete it; receive it in a portable format; object to processing based on legitimate interests; restrict processing; withdraw consent at any time, without affecting earlier processing; and complain to a data protection supervisory authority.
You can export or delete much of your data yourself from the Settings page. For anything else, email privacy@castofusers.com. We may need to verify your identity first. We respond within 30 days, and will tell you if we need longer where the law allows it.
We will not treat you differently for exercising your rights.
11. Regional rights
EU and UK: if the EU or UK General Data Protection Regulation applies, you have the rights listed above and may complain to the supervisory authority where you live or work.
United Arab Emirates: where Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies, we process your data in line with it and you may exercise the rights it grants.
DIFC: as a DIFC-based business, we comply with the DIFC Data Protection Law No. 5 of 2020. You may complain to the DIFC Commissioner of Data Protection.
Saudi Arabia: where the Personal Data Protection Law (PDPL) and its implementing regulations apply, we process your data in line with them, and you may exercise your rights under them, including complaining to the Saudi Data and AI Authority (SDAIA).
California: if the CCPA, as amended by the CPRA, applies, you have the right to know, delete and correct personal information, and to limit use of sensitive personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly collect sensitive personal information for purposes that require a right to limit.
12. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you think a child has given us personal data, contact privacy@castofusers.com and we will delete it.
14. How to change your cookie choices
You can change or withdraw your cookie consent at any time using the "Cookie settings" link in the footer of our home page. You can also block or delete cookies in your browser settings, although blocking essential cookies may stop the Service from working properly.
15. Changes to this notice
We may update this notice from time to time. We will change the version number and the "Last updated" date above, and for material changes we will tell you by email or in the Service before they take effect.
16. Contact
Privacy questions and requests: privacy@castofusers.com. Security issues: security@castofusers.com. Legal questions: legal@castofusers.com.