Privacy Policy

1. Information we process

• Account information. Your email address, sign-in identity, account identifiers, API key records, and account settings. If you choose Google sign-in, we receive the identity information needed to authenticate your account.
• Billing information. Your billing details, subscription, credit balance, purchases, and payment references. Stripe processes payment details; our application does not receive your full card number.
• Usage and technical information. Requests, episode selections, job status, credits charged, timestamps, and diagnostic records. Our hosting providers may process IP addresses, browser information, and request metadata to deliver and secure the service.
• Podcast content. Public feed metadata, audio, publisher transcripts, and generated transcripts. This content can include names, voices, and other personal information about hosts, guests, or people discussed in an episode.
• Communications. Information you provide when contacting us about your account, a payment, a privacy request, or a content concern.

2. How and why we use information

We use account, billing, and request information to provide the service, authenticate you, process payments, deliver transcripts, and respond to requests. Where data protection law requires a legal basis, this processing is necessary to perform our contract with you or take steps you request before entering a contract.

We also process information for our legitimate interests in securing the service, preventing abuse and duplicate free-credit claims, diagnosing failures, and operating a public podcast transcript service, subject to the rights and interests of affected people. We retain and use financial records where necessary to meet legal obligations. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.

3. Public podcasts and transcript caching

Audivo retrieves podcast information from public sources, including RSS feeds, podcast directories, and publishers. Audio may be sent to our transcription provider to generate text. Transcripts are cached and may be delivered to other customers requesting the same episode; they are not private account documents. Deleting an account does not automatically remove a public episode or its shared transcript.

Public availability does not remove a person’s privacy rights. If an episode or transcript contains personal information about you, you may request access, correction, or removal as described below.

4. Service providers and disclosures

We use providers to operate the service, including:

• Vercel for website and dashboard hosting.
• Amazon Web Services for authentication, processing, storage, and operational logs.
• Stripe for checkout, subscriptions, and payment processing.
• DeepInfra for speech-to-text processing of podcast audio.
• Google for authentication when you choose Google sign-in.

Requests to podcast directories and publishers disclose the information necessary to retrieve the selected content. We may also disclose information when required by law, to respond to lawful requests, or to protect people and the service against fraud or abuse.

5. Cookies and browser storage

The dashboard uses a secure session cookie to keep you signed in. It lasts up to 30 days and is protected against access by browser scripts. Authentication flows may also use short-lived cookies, and browser storage may remember interface preferences. Blocking required cookies can prevent sign-in from working.

The marketing site does not currently include advertising trackers or analytics scripts. Our hosting providers still process the technical information needed to serve requests.

6. Retention and account deletion

We keep account information while needed to provide your account. Customer request logs are scheduled to expire after 30 days. Downloadable account exports are scheduled for deletion after one day, and their download links expire sooner. Automated storage deletion may take additional time to complete.

You can export your account data and request account deletion from the dashboard. Deletion revokes API keys, removes your sign-in identity and request logs, and removes identifying profile information from the account record. Financial records, payment references, and an abuse-prevention marker may remain for accounting, disputes, and prevention of repeated free-credit claims. Public transcripts are retained separately as part of the shared cache. Retention depends on the purpose of the record and applicable legal requirements.

7. Security and international processing

We use access controls, encrypted connections, and restricted storage to protect information. No online service can guarantee absolute security. Keep your account credentials and API keys confidential.

Our providers may process information outside your country, where data protection laws may differ. Where applicable law requires safeguards for international transfers, those transfers must have an appropriate legal basis and safeguards. You may request information about the arrangements that apply to your data.

8. Your rights

Depending on your location and the circumstances, you may have rights to access, correct, erase, or receive a portable copy of your personal information, restrict processing, object to processing based on legitimate interests, and withdraw consent. We may need to verify your identity before acting on a request. Some information must be retained to comply with law or resolve disputes.

You may also complain to your local data protection authority. The European Commission provides an overview of individual data protection rights.

9. Changes to this policy

We will update this page when our practices change and revise the date above. Where required, we will provide additional notice of material changes. Our Terms of Service explain the conditions for using Audivo.