Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your name, email address, and authentication credentials (via our managed identity provider). If you sign in with Google, Facebook, or Apple, we receive your profile information from those providers.

Content you provide: Text, articles, URLs, and other source material you upload for podcast creation. AI-generated scripts and audio produced from your inputs.

Usage data: TTS minutes consumed, scripts generated, images created, feature usage patterns, and billing information.

Technical data: IP address, browser type, device information, and request logs for security and performance monitoring.

2. How We Use Your Information

• To provide and operate the podcast creation service
• To process payments and manage subscriptions (via Stripe)
• To send transactional emails (account verification, billing receipts, usage alerts)
• To improve the service and fix issues
• To enforce our Terms of Service and prevent abuse

We do not sell your personal information to third parties. We do not use your content to train AI models.

3. Third-Party Services

We rely on a small set of trusted sub-processors to operate the platform:

• Cloud infrastructure — Hosting, compute, storage, content delivery (United States)
• AI providers — Script generation and text-to-speech (industry-leading model providers)
• Identity provider — Account authentication and session management
• Stripe — Payment processing and subscription management (PCI-compliant)
• Email service — Transactional email delivery (account, billing, alerts)
• Observability — Error monitoring and AI call tracing for audit and debugging

A current sub-processor list with vendor names is available on request via our support page. Your content is sent to AI providers only for the purpose of generating scripts and audio as you request — not for model training.

4. Data Storage & Security

Your data is stored on enterprise cloud infrastructure in the United States. We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) and at rest (industry-standard managed encryption)
• JWT-based authentication with secure httpOnly cookies
• Workspace-level access controls (users can only access their own data)
• API secrets stored in an encrypted, access-controlled secrets manager
• Media files served via signed URLs from a global CDN (time-limited access)

5. Data Retention

Free-tier audio files are retained for 7 days. Paid plans include extended retention as specified in plan details. Account data is retained for the duration of your account. Upon account deletion, your data is permanently removed within 30 days. Database point-in-time recovery enables data restoration within a 35-day window for disaster-recovery purposes.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data (podcast audio files, scripts)
• Withdraw consent for data processing

To exercise these rights, contact us through our support page.

7. Cookies

We use essential cookies only — authentication tokens (httpOnly, secure, SameSite=Lax) required for the application to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email. The "Last updated" date at the top reflects the most recent revision.

9. Contact

For privacy-related questions, contact us at our support page.