Privacy Policy

1. Who We Are (Data Controller)

The data controller is Prodlabs22, S.L., with registered office at Plaça Torrent del Titit, s/n, 43800 Valls (Tarragona), Spain. Contact: hello@podcastcraft.app. Full company details are available in our Legal Notice.

In this policy, "PodcastCraft", "we", "us" and "our" mean Prodlabs22, S.L.

2. Information We Collect

We collect the following information:

• Account information - Email address and name. If you sign in with a third-party account, that provider shares your name, email address and profile picture with us.
• Podcast content - Audio files you upload.
• Generated content - Transcriptions and other Content Kit outputs you create.
• Usage data - Login activity, features used, credit consumption.
• Payment information - Your purchase records (amount, date, credits). Card details are handled by our payment processor; we never see or store them.
• Technical data - IP address, browser and device information, and logs, used for security and to fix errors.

Your email address is required to create an account; without it we cannot provide the service. Buying credits also requires completing payment with our payment processor.

3. How We Use Your Information and Our Legal Basis

Under the GDPR we must tell you why we process your data and on what legal basis:

• Providing transcription and content generation, managing your account and credits - Performance of our contract with you (Art. 6(1)(b))
• Processing payments and keeping accounting records - Performance of the contract and compliance with our legal obligations (Art. 6(1)(b) and 6(1)(c))
• Service-related notifications (processing complete, low credits) - Performance of the contract (Art. 6(1)(b))
• Security, error monitoring, fraud and abuse prevention, and aggregate usage statistics - Our legitimate interest in operating a reliable and secure service (Art. 6(1)(f))
• Optional communications, where we ask for them - Your consent (Art. 6(1)(a)), which you can withdraw at any time

We do not train AI models on your content. Our AI providers are contractually prohibited from using data sent through their APIs to train their models. Improving our service means reviewing aggregate usage patterns and our own prompts, never learning from your podcasts.

We never sell your data to third parties.

4. Data Storage and Retention

• Audio files - Deleted automatically, normally within about 24 hours after transcription, or about 48 hours after upload if never transcribed.
• Transcriptions, generated content and account data - Kept while your account is active. You can delete an episode at any time.
• Deleted accounts - Data deleted from our database when you delete your account; copies in our database provider's backups expire under its retention schedule.
• Payment records - Amount, date and payment reference are kept in our payment processor account for at least six years, as Spanish commercial and tax law requires of us, even after account deletion.
• Logs - Kept for the retention period of our hosting and error-monitoring providers, and longer only if needed to investigate a specific incident.

When a retention period ends, we delete or anonymize the data.

5. Data Security

We apply appropriate technical and organizational measures to protect your data, including encryption in transit and at rest. However, no system is 100% secure—we recommend using strong passwords and enabling two-factor authentication when available.

6. Recipients

We do not sell your data. We use service providers in the following categories, acting as data processors under a data processing agreement:

• Hosting and infrastructure
• Database and file storage
• Authentication
• Transcription and AI processing
• Error monitoring
• Analytics
• Transactional email

Payments are handled by our payment processor as an independent controller, under its own privacy policy. If you sign in with a third-party account, that provider processes your login under its own privacy policy. We may also disclose data to public authorities when required by law.

The list of our processors is available on request at hello@podcastcraft.app.

7. International Data Transfers

Some of our service providers may process data outside the European Economic Area. In that case we transfer data only to countries covered by a European Commission adequacy decision or under the European Commission's Standard Contractual Clauses. You can request a copy of the applicable safeguards at hello@podcastcraft.app.

8. Content About Other People

Episodes often contain the voices and personal details of guests and other people. When you upload that content, you decide what is processed and you are responsible for having the right to do so, including the consent of everyone recorded — see our Terms of Service. We process it only to deliver the service to you, under the providers and safeguards described above. If someone who appears in an episode contacts us about their data, we will refer them to the account holder who uploaded it and assist as needed.

9. Your Rights

Under the GDPR you have the right to:

• Access your data at any time via your dashboard
• Rectify inaccurate or incomplete data
• Erase your data by deleting your account
• Port your transcriptions and content by exporting them in a machine-readable format
• Restrict processing in the circumstances set out in Art. 18
• Object to processing based on our legitimate interests (Art. 21)
• Withdraw consent at any time, where processing is based on it, without affecting processing carried out beforehand

To exercise any of these rights, write to hello@podcastcraft.app. We will reply within one month (extendable by two months for complex requests; we will tell you if so) and may ask for information to confirm your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the supervisory authority of the EU country where you live or work.

10. Cookies and Analytics

We use only essential cookies for authentication and session management. Our analytics are cookieless and aggregate: they do not profile you or track you across other websites.

11. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this privacy policy occasionally. Significant changes will be communicated via email. Continued use after changes indicates acceptance.

13. Contact Us

Questions about privacy? Contact us at hello@podcastcraft.app