Privacy Policy

1. Introduction

This Privacy Policy describes how Podnami ("we," "us," or "our") collects, uses, and discloses information when you use our AI-powered podcast co-host service ("the Service"). By using the Service, you consent to the data practices described in this policy.

Important: We make reasonable efforts to protect your information, but we cannot guarantee absolute security. You use the Service at your own risk.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (encrypted), name, and profile data
• Payment Information: Billing details processed by third-party payment processors (we do not store full credit card numbers)
• User Content: Audio recordings, transcriptions, voice input, text input, and AI interaction data
• Settings and Preferences: Bot configurations, voice selections, LLM settings, and customization choices
• Communications: Support requests, feedback, and correspondence with us

2.2 Information Collected Automatically

• Usage Data: Features used, time spent, interaction patterns, and service usage statistics
• Device Information: Browser type, operating system, device identifiers, IP address
• Cookies and Tracking: Session cookies, authentication tokens, and analytics data
• Log Data: Access times, pages viewed, errors encountered, and system events

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google or GitHub, we receive basic profile information
• AI Service Providers: Data may be processed by OpenAI, OpenRouter, LemonFox, and other integrated services
• Payment Processors: Transaction confirmations and payment status

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service
• AI Processing: To generate AI responses, create TTS audio, and power conversational features
• Personalization: To customize your experience and remember your preferences
• Communication: To send service updates, technical notices, and support messages
• Analytics: To understand usage patterns and improve service quality
• Security: To detect fraud, prevent abuse, and protect user accounts
• Legal Compliance: To comply with legal obligations and enforce our Terms
• Billing: To process payments and manage subscriptions

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share data with third-party services that power our platform:

• AI Providers: OpenAI, OpenRouter, and others process your prompts and generate responses
• TTS Providers: OpenAI, LemonFox process text to generate audio
• Database: Supabase stores your account and settings data
• Hosting: Cloud infrastructure providers host our services
• Payment Processors: Process transactions (subject to their privacy policies)

Important: These third parties have their own privacy policies. We are not responsible for their data practices or security measures.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or legal process, or to:

• Comply with legal obligations or government requests
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Prevent fraud, security threats, or illegal activity
• Protect the rights, property, or safety of our users or the public

4.3 Business Transfers

If Podnami is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated Data

We may share aggregated, anonymized data that does not directly identify you for research, marketing, or other purposes.

5. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/SSL)
• Encrypted storage of sensitive data
• Access controls and authentication mechanisms
• Regular security assessments
• Multi-tenant isolation to separate user data

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information. You acknowledge that you provide information at your own risk.

6. Data Retention

We retain your information for as long as necessary to provide the Service or as required by law:

• Account Data: Retained while your account is active and for a reasonable period after closure
• Recordings: Retained until you delete them or your account is terminated
• Usage Logs: Typically retained for 30-90 days
• Billing Records: Retained as required by tax and accounting regulations

Note: We are not obligated to retain your data after account termination. We recommend backing up important content regularly.

7. Your Rights and Choices

7.1 Access and Correction

You may access and update your account information through the Service settings. You are responsible for keeping your information accurate and current.

7.2 Data Deletion

You may request deletion of your account and data by contacting us. Note that some information may be retained for legal or operational purposes.

7.3 Data Portability

You can download your recordings at any time. Upon request, we will provide your account data in a machine-readable format where technically feasible.

7.4 Marketing Communications

You may opt out of marketing emails by following the unsubscribe link. You cannot opt out of service-related communications (e.g., account verification, security alerts).

7.5 Cookies

Most browsers allow you to control cookies through settings. Disabling cookies may limit Service functionality.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to any country where we or our service providers operate.

9. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt-out of the "sale" of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us with a verifiable request.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under GDPR including:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us. You also have the right to lodge a complaint with your local supervisory authority.

12. AI and Data Processing Disclosure

Important Notice: Your voice input, text prompts, and interaction data are processed by third-party AI models. These services may:

• Use your data to improve their AI models (subject to their terms)
• Store your data on their servers
• Process your data in various jurisdictions
• Be subject to different privacy regulations

We are not responsible for how third-party AI providers handle your data. Review their privacy policies before using the Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

For material changes, we will provide additional notice (e.g., email notification or prominent notice on the Service).

14. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

15. Do Not Track Signals

We do not currently respond to "Do Not Track" browser signals. We may use cookies and tracking technologies for essential Service functionality.

16. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law. However, we are not liable for any damages resulting from unauthorized access to your information.

17. User API Keys

If you provide your own API keys for third-party services (e.g., OpenAI, OpenRouter), you are responsible for:

• Keeping your API keys secure
• Monitoring your API usage and costs
• Complying with third-party service terms
• Any charges incurred through your API keys

We store encrypted API keys but cannot guarantee absolute security. Use of API keys is at your own risk.

18. No Warranty of Privacy

WHILE WE MAKE REASONABLE EFFORTS TO PROTECT YOUR INFORMATION, WE MAKE NO WARRANTIES OR GUARANTEES REGARDING THE PRIVACY OR SECURITY OF YOUR DATA. You acknowledge and accept the risks associated with transmitting information over the internet.

19. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the Service support system or via email.

For privacy-related inquiries, rights requests, or data deletion requests, provide:

• Your account email address
• A detailed description of your request
• Verification of your identity

We will respond to verified requests within a reasonable timeframe as required by applicable law.