Privacy Policy

Depending on how you use Podsworth, we collect:

a. Order details: your name, email address, the files you upload or import, and your processing choices.
b. Account details: your name, email address and password (we store only a secure hash of it), or, if you sign in with Google, the name, email address and account ID that Google shares with us. If you turn on two-step sign-in, also your authenticator app’s key (encrypted) and your recovery codes (as secure hashes).
c. Team details: the teams you belong to, your role in each, and the email addresses of people you or your teammates invite. If your team has shows: their names, settings and artwork.
d. Payment details: what you bought and when, receipts, and the type and last four digits of your card. Card payments are handled by our payment processor; we never receive your full card number. With a monthly plan, auto top-up or invoices, also your plan and its renewals, your auto top-up settings, and your invoices and whether they’re paid. Bank payments are handled by our payment processor too; we don’t receive your bank account number.
e. Usage details: your orders, your credit balance and history, and, if you use the Podsworth API, your API keys (stored as secure hashes) and when they were last used. If you set up webhooks: the addresses you send events to, the events, and a log of each delivery. If you connect apps: see Connected apps and AI assistants below.
f. Technical details: your IP address, browser, and the pages and requests you make, which we use to keep the Service secure and working, and, in a form that can’t identify you, to count visits to our website (see our Cookie Policy).
g. Anything you send us when you contact support, and your email preferences.
h. Newsletter: if you sign up for our Worthy News newsletter, your email address, the page you signed up on, and when you confirmed or unsubscribed.

We collect information when you place an order, create an account or sign in, create or join a team, buy credits, use the Podsworth API, change your settings, subscribe to our email list, or contact us. We also collect it when you subscribe to a plan, set up auto top-up, ask for an invoice, create a show, or set up webhooks. The same goes for connecting an app to your account. When you browse our website we count the visit without cookies, and our app uses a few essential cookies, as described below and in our Cookie Policy.

We use the information we collect to:

a. Process your orders and deliver your files.
b. Run your account: sign you in, keep track of your credits, run teams and invitations, and send the emails you need, such as receipts, team invitations and low-balance notices. With a plan, auto top-up or invoices, we also charge your saved card or send invoices as you’ve asked, and email the account’s owners and billing members when a payment fails or an invoice is due.
c. Process payments, prevent fraud and abuse (for example, limiting free trials to one per person), and keep the Service secure.
d. Respond to your customer service requests and follow up on correspondence by email.
e. Improve our website and our audio processing.
f. Send periodic emails about your orders and, unless you opt out, reminders about unfinished orders and news about our products and services.
g. Meet our legal, tax and accounting obligations.

a. All connections to our website, app and API are encrypted with TLS.
b. Passwords and API keys are stored only as secure hashes, and sign-in sessions use secure, HTTP-only cookies.
c. Your personal information is kept on secured networks and is only accessible by a limited number of people who have special access rights to those systems and are required to keep the information confidential.
d. All card payments are handled by our payment processor; card details are never stored or processed on our servers.
e. We review our systems regularly for security issues and known vulnerabilities.

Yes, but only the ones our website and app need to work. We don’t use cookies for analytics or advertising.

Some are essential. For example, when you sign in, our app sets a secure cookie that keeps you signed in, and a short-lived cookie while you sign in with Google. Our app also stores a few settings in your browser, such as which team account you’re working in. Our website counts visits without cookies. You can learn more in our Cookie Policy.

We do not sell, trade, or rent your Personally Identifiable Information. This does not include trusted service providers who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential and use it only to provide their services to us.

Our newsletter sign-up form uses Cloudflare Turnstile to keep bots from signing up. When you start filling in the form, your browser connects to Cloudflare, which looks at signals such as your IP address and browser to tell people from bots and tells us whether you passed. Cloudflare describes what it collects in its Turnstile Privacy Addendum.

If you belong to a team, its other members can see the team’s orders and credit history, and its owners and admins can see members’ names and email addresses. We also send your information where you tell us to: your account’s events to the webhook endpoints you set up, and your processed files to the folders you connect. Apps you connect get what you allowed them to see, as described below. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety. Non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users.

We have not enabled Google AdSense on our site.

The Podsworth App only accesses the Google Drive files you choose, in order to process them. We save a copy of those files in our cloud storage, and it is automatically deleted 30 days later, unless you keep the project. We do not share any user files from any source with any other application or service.

If you sign in with Google, Google shares your name, email address and Google account ID with us. We use them only to create your account and sign you in; we don’t access your Google contacts, email, or other data.

Podsworth’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect Google Drive or Dropbox to your account, that service gives us access so we can add files for you. We keep that access encrypted and use it only to create folders and save your processed files in the folders you choose. On Google Drive, Podsworth can only see the folders you pick and the files it creates. On Dropbox, it lists folder names so you can choose one, and it doesn’t open your files. You can disconnect at any time in your account settings, which ends our access.

If you connect an app, such as an AI assistant, to your account, we keep the app’s name and web address as it gave them to us, what you allowed it to do, its monthly limits, the show it’s limited to, and when it last used your account. We store only secure hashes of the tokens it signs in with.

The app can see and do what you allowed: for example, your account’s name and balance, your projects and their files, and your usage. What the app does with that information is governed by its maker’s privacy policy, not ours, so connect only apps you trust. You can disconnect an app at any time on your account page, which ends its access at once. The account’s owners and admins can see and disconnect every app connected to it.

a. Uploaded and processed files: deleted automatically 30 days after they’re created, unless you keep a project, whose files are then kept until you delete them or close your account. API users can delete them sooner. Copies we send to your own folders are yours. If we ever stop offering Keep, we’ll email you at least 30 days before we delete kept files. We may keep selected excerpts longer to improve our audio processing, as described in our Terms of Service.
b. Account details, including your shows and their artwork: kept while your account is open. When you ask us to close your account, we delete or anonymize them, except what we must keep for the reasons below.
c. Orders, payments and credit history: kept as long as we need them for accounting, tax and legal purposes.
d. Technical logs: kept for up to 30 days.
e. Newsletter sign-ups: kept until you unsubscribe. After that we keep your address only to record that you unsubscribed, so we don’t email you again.
f. Website visit counts: kept as totals; the daily visitor codes can’t identify you.
g. Backups: our database is backed up for disaster recovery, and older backups are replaced on a rolling basis.
h. Webhook events and their delivery logs: kept for 30 days.
i. Connected apps: the record of each app you connected (what it was allowed and when it last used your account) is kept while your account is open. Disconnecting an app, or 90 days without use, ends its access.

a. You can ask us for a copy of your personal information, or ask us to correct or delete it, by emailing info@podsworth.com.
b. You can close your account at any time by emailing info@podsworth.com.
c. On your account page, you can turn off reminders about unfinished orders and choose when we send low-balance emails. Every marketing email also has an unsubscribe link.
d. Emails about orders you’ve placed, receipts, sign-in and security, and team invitations sent to you are part of the Service and can’t be turned off, and so are emails about payments for a plan, auto top-up and invoices.

Depending on where you live, you may have additional rights under local law. Contact us and we’ll help.

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. See more here.

According to CalOPPA, we agree to the following:

a. Users can visit our site anonymously.
b. Once this privacy policy is created, we will add a link to it on our home page or, as a minimum, on the first significant page after entering our website.
c. Our Privacy Policy link includes the word ‘Privacy’ and can easily be found on the page specified above.
d. You will be notified of any Privacy Policy changes via updates to our Privacy Policy Page. We may also send you an email notification about such changes.
e. You can change your personal information by emailing us at any time.

We honor Do Not Track signals: we don’t track you, plant advertising cookies or show ads.

It is also important to note that we do not allow third-party behavioral tracking.
We have not enabled Google AdSense on our site.

When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.

We do not specifically market to children under the age of 13 years old.

The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices, we will take the following responsive action, should a data breach occur:

a. We will notify you via email within 7 business days.
b. We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

We collect your email address in order to:

a. Process orders and to send information and updates pertaining to orders.
b. Send you additional information related to your product and/or services.
c. Send information and respond to inquiries and/or other requests or questions.
d. Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.

To be in accordance with CAN-SPAM, we agree to the following:

a. Not use false or misleading subjects or email addresses.
b. Identify advertising messages as advertisements in some reasonable way.
c. Include our mailing address.
d. Monitor third-party email marketing services for compliance, if one is used.
e. Honor opt-out/unsubscribe requests quickly.
f. Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can click the link at the bottom of each email or email us at info@podsworth.com and we will promptly remove you from ALL correspondence.