Privacy Policy

Information We Collect

When you use Podato, we may collect the following information:

• Account Information: Email address and authentication data when you create an account
• Podcast Files: Audio files you upload for analysis
• Generated Content: Analysis results, episode summaries, and marketing assets we create
• Usage Data: Information about how you interact with our service

How We Use Your Information

We use your information to:

• Provide podcast analysis and content generation services
• Improve our AI analysis algorithms and service quality
• Communicate with you about your account and our services
• Ensure the security and proper functioning of our platform

Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase for secure data storage and user authentication. Your podcast files are processed for analysis and may be temporarily stored during processing.

Third-Party Services

We may use third-party services for:

• Authentication: Google OAuth for sign-in convenience
• AI Processing: External AI services for podcast analysis
• Infrastructure: Cloud services for hosting and data storage

Google user data

Podato's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This covers what Podato receives from Google when you sign in with Google, connect a YouTube channel or connect a Google Calendar.

• Google sign-in: your name, email address and profile picture.
• YouTube: the channel data listed under YouTube below.
• Google Calendar: the email address of the Google account you connect, the names of your calendars, and the times you're busy. We never see event titles, descriptions, attendees or locations, and we never write to your calendar.

Who we share it with

We never sell Google user data, use it for advertising, or use it to train AI models, and we don't send it to AI services. We share it only in these cases:

• People you choose: members you invite to a show can see that show's YouTube numbers. Guests who open your booking page see which times are free, never your calendar or its events.
• Service providers who run Podato for us. They process it only on our instructions and only to provide Podato:
  • Supabase (database, sign-in and servers) stores and processes all of the data in this section.
  • Stripe receives your email address if you subscribe, for billing.
  • Resend receives your email address, to send you emails from Podato.
  • PostHog receives your email address, your name and how you use Podato, including session recordings with everything you type hidden, so we can improve the app.
• When the law requires it: for example, a valid court order.

How we protect it

• Encryption: all data travels over HTTPS (TLS) and is encrypted at rest (AES-256).
• Google access keys: the keys Google gives us to read your YouTube channel or calendar are encrypted again with AES-256-GCM before we store them. They sit in tables the app can't reach and are only decrypted on our servers.
• Access controls: database rules (row-level security) let each account read only its own shows' data.
• Least access: every Google permission we ask for is read-only, and we only ask when you choose to connect.
• People: nobody at Podato reads your Google data unless you ask us to for support, it's needed for security, or the law requires it.
• Deletion: disconnecting YouTube or your calendar deletes that connection's data straight away, and deleting your account deletes all of it.

YouTube

If you connect a YouTube channel, Podato uses YouTube API Services to read it. By connecting, you agree to YouTube's Terms of Service. Google's handling of your data is covered by the Google Privacy Policy.

• What we read: your channel's name and picture, its list of videos, and their analytics: views, watch time, average view duration, likes, comments, subscribers, impressions and click-through rate. Access is read-only.
• How we use it: to show your YouTube numbers in Podato next to your episodes. We never sell it, and we share it only as described under Google user data above.
• Deletion: disconnecting YouTube in Podato deletes your YouTube data straight away. If you remove Podato's access from your Google account instead, we delete it within 30 days.
• Revoking access: you can remove Podato at any time from your Google security settings.

Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data
• Opt out of certain data processing activities

Data Retention

We retain your data only as long as necessary to provide our services. You can delete your account and associated data at any time through your account settings.

Cookies and Tracking

We use essential cookies for authentication and service functionality. We do not use tracking cookies for advertising purposes.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or through our service.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@podato.io