Your privacy matters.

Account information: When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect payment information through our payment processor.

Signup IP address: We record the IP address used to create an account. We use it solely to detect and prevent abuse — in particular networks of accounts created to publish spam. It is never used for advertising or profiling, and it is automatically erased after 180 days — except for accounts suspended for abuse, where it is retained as evidence.

Google Sign-In: If you choose “Continue with Google”, Google shares with us your name, email address, and profile picture (the profile and email scopes only). We use them solely to create and sign you in to your PodView account and to contact you about it. We request no other Google data, such as Gmail, Drive, or Calendar content, and we do not use Google user data for advertising. PodView's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never sell this data, never transfer it to third parties except as needed to run the service, and never allow humans to read it except for security, legal compliance, or with your consent. You can revoke access at any time at myaccount.google.com/permissions; deleting your PodView account removes the data we received from Google.

Podcast data: We import podcast information from your RSS feed, including episode titles, descriptions, artwork, and audio file URLs. This data is publicly available via your RSS feed.

Usage data: We collect information about how you use our platform, including pages visited, features used, and actions taken within the dashboard.

Analytics and session recordings: We use analytics tools (Google Analytics, Amplitude, and Microsoft Clarity) to understand how our product is used. These tools record page views, clicks, and — in the case of Amplitude and Microsoft Clarity — anonymized session replays and heatmaps of your interactions with our marketing site and dashboard. Sensitive input (passwords, payment fields) is masked and never recorded. We also use Google Ads conversion tracking to measure our own advertising.

Affiliate referral tracking: If you arrive from a link published by one of our affiliates, our affiliate platform (Rewardful) sets a cookie recording which affiliate referred you, so that we can pay them if you later subscribe. It runs only on our public marketing pages, never while you are signed in, and only after you accept tracking where consent is required. If you sign up, the referral identifier is stored on your account for the same purpose. Withdrawing consent deletes the referral cookie and stops further referral tracking; because the platform provides no way to unload an already-loaded script, a script loaded earlier in that page view stops only when you navigate or reload.

Cookies: We use essential cookies to maintain your session and preferences, analytics cookies for the tools above, an affiliate referral cookie as described, and one first-party cookie of our own recording which of our channels you arrived from (see “Cookies”). Where consent is required by law, these are set only after you accept them; you can change your choice at any time from the “Cookie settings” link in the footer.

For each purpose, the legal basis we rely on where data-protection law such as the GDPR applies is shown in brackets:

• Create your account, sign you in with email or Google, and build and host your podcast website (contract)
• Process payments and manage subscriptions (contract); keep billing and tax records (legal obligation)
• Send service-related communications and respond to support requests (contract, legitimate interests)
• Detect and prevent fraud, spam, and abuse, and keep the service secure (legitimate interests)
• Understand and improve how the product is used, using aggregated or pseudonymous analytics (legitimate interests, or consent where the law requires it for analytics cookies)
• Measure our own advertising and credit affiliate referrals (consent where required, otherwise legitimate interests)
• Generate AI summaries of episodes, and transcribe audio you opt in to transcribe (contract; consent for transcription)

Where we rely on legitimate interests, they are running a secure, abuse-free service and improving it; we balance them against your rights and you may object (see “Your Rights”). Where we rely on consent, you can withdraw it at any time. Providing account and billing data is necessary to use paid features; without it we cannot provide the service.

We do not sell your personal information. We share data only with the service providers listed in “Service Providers We Use”, who process it on our behalf, and where the law requires it. All third-party providers are contractually obligated to protect your data.

We use the following providers to run PodView. Each receives only the data it needs for its role:

• Stripe — payments and subscriptions. We never see or store full card numbers.
• SendGrid — delivery of transactional email (sign-in, billing, notifications).
• DigitalOcean and Cloudflare — hosting, file storage, DNS, CDN, and security (including Cloudflare Turnstile bot checks on forms).
• Namecheap — domain registration, only when you buy a domain through us.
• OpenAI — generating episode summaries, takeaways, and FAQs from episode text (see “AI Processing” below).
• Groq — speech-to-text, only for episodes you opt in to transcribe.
• Google — sign-in, Google Analytics, and Google Ads conversion measurement.
• Amplitude and Microsoft Clarity — product analytics and session replay.
• Rewardful — affiliate referral tracking.

To generate episode summaries, takeaways, and FAQs, we send the text of your episodes (titles, descriptions, and transcripts where they exist) to OpenAI. If you opt in to AI transcription for an episode, the episode’s audio is sent to Groq for speech-to-text. Transcription is off unless you turn it on, and we do not transcribe audio you have not opted in. We do not use your content to train our own models,.

If you visit a podcast website built on PodView, the podcast’s owner controls that site and decides which features it offers: email sign-ups, reviews, voicemail messages, and contact forms. When you use one, the information you submit goes to the podcast owner, and PodView stores and processes it on their behalf. We also record privacy-respecting page-view and playback statistics for the owner. Contact the podcast owner for requests about data you submitted to their site; you can also reach us at the address below.

Our providers operate in several countries, including the United States, so your information may be processed outside the country where you live. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses and our providers’ data-processing terms.

We keep personal data only as long as needed for the purposes above:

• Account and podcast data: while your account is active. If you delete your account, it is deactivated at once and permanently deleted after a 30-day grace period.
• Signup IP address: 180 days, except for accounts suspended for abuse, where it is kept as evidence of the abuse.
• Billing records: as long as tax and accounting law requires, even after account deletion.
• Analytics and session recordings: for the retention period set in each analytics provider’s account configuration, which we keep to the minimum useful for product analysis.
• Support messages: for as long as needed to resolve your request and handle follow-ups.
• Backups: deleted data leaves backups on their normal rotation schedule.

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data at any time
• Opt out of non-essential communications

Regional rights: If you are in the European Economic Area, the United Kingdom, or California, you may also object to or ask us to restrict certain processing, and you may withdraw consent at any time. You can lodge a complaint with your local data-protection authority. We answer requests within one month (GDPR) or 45 days (US states), and may ask you to verify your identity first. We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at support@podview.com.

This section supplements the rest of this policy for residents of California, Colorado, Connecticut, Virginia, and other US states with privacy laws. In the last 12 months we collected the following categories of personal information, for the purposes and from the sources described above:

• Identifiers (name, email address, IP address, account and device identifiers) — from you and your devices.
• Commercial information (plan and subscription history) — from you and our payment processor.
• Internet or network activity (pages viewed, features used, session recordings) — from your devices.
• Audio, where you leave a voicemail on a podcast site that offers it — from you, on behalf of the podcast owner.
• Account log-in credentials, which the CPRA classes as sensitive personal information. We use them only to authenticate you and never to infer characteristics about you.

We disclose these categories to the service providers listed above for business purposes only. We do not sell personal information and do not share it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of anyone under 16. We honor Global Privacy Control signals as an opt-out. You may know, access, correct, delete, and port your data, and opt out of sale or sharing; we will not discriminate against you for doing so. Write to support@podview.com; we may need to verify your identity, and an authorized agent may act for you with your written permission. We respond within 45 days. If we decline a request you may appeal by replying to our response, and you may contact your state attorney general.

We do not make decisions that produce legal or similarly significant effects about you solely by automated means. We do use automated checks to block sign-ups from known disposable email domains and to flag suspected spam sites for review; suspending an account for abuse is decided by a person, and you can contact us to contest it.