Podpage, Inc. ("Podpage," "Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit https://www.podpage.com or use Podpage’s account, website-building, and related platform services (collectively, the "Service"). It also applies to personal information Podpage processes for its own purposes in connection with Podcast Websites, but not to information Podpage processes solely on behalf of a Podcast Owner.
This Privacy Policy applies to individuals whose personal information may be processed by Podpage for its own purposes, including: (a) podcast owners and other customers that create or operate Podcast Websites using the Service (“Podcast Owners”), and individuals who create, access, or manage accounts through the Service, including on behalf of Podcast Owners; (b) visitors to Podpage.com and Podpage account, support, and other corporate-facing webpages, excluding Podcast Websites; (c) Podcast Website subscribers whose email-deliverability information Podpage processes for its own purposes; and (d) other individuals whose personal information is processed by Podpage for its own purposes through the Service. Please read this Privacy Policy carefully. By accessing or using the Service, you agree to the terms of this Privacy Policy.
This Privacy Policy describes only how Podpage processes personal information for its own purposes. It does not describe personal information Podpage processes solely on behalf of a Podcast Owner through a Podcast Website.
The applicable Podcast Owner is responsible for determining the purposes for which personal information is collected and used through its Podcast Website, providing appropriate privacy notices, establishing an appropriate legal basis for processing, obtaining any consent required by applicable law, and otherwise complying with applicable privacy and data protection laws. If you are a podcast listener, please review the applicable Podcast Owner’s privacy policy for information about how personal information collected through its Podcast Website is processed.
1. INFORMATION WE COLLECT
We collect information in several ways depending on how you interact with our Service. The personal information described below may be provided directly by you, collected automatically when you interact with the Service, or obtained from third parties.
Information You Provide Directly
Identifiers; Contact Information. If you create, access, or manage an account through the Service, we may process your name, email address, telephone number, billing address, social media links, basic profile information, account identifiers, and similar contact or account information, as well as OAuth access tokens and refresh tokens used to enable connected-account integrations, to create and administer your account, process your subscription, authenticate and secure your access to the Service, enable social media integrations, communicate with you, and provide features you request.
Commercial Information: If you create, access, or manage an account through the Service, we may process information about your subscription, plan, and transactions to administer your subscription, provide paid features, maintain billing and accounting records, and respond to billing inquiries. Payment information, such as your credit card number and billing address, is collected and processed by Stripe. We do not store your full payment card details on our servers. Where you access or manage an account on behalf of a Podcast Owner, this information may relate to the applicable Podcast Owner’s subscription or account.
Information Collected About You from Third Parties or Other Sources
If you create, access, or manage an account through the Service, we may receive personal information about you from service providers and other third parties in connection with your account and use of the Service:
Commercial Information: We process your subscription status and limited transaction information received from Stripe to administer the applicable Podcast Owner’s subscription, provide paid features, maintain billing records, and address payment or account issues.
Information Collected Automatically
We automatically collect, either ourselves or through third-party providers, certain types of personal information when you visit, use, or navigate the Service, whether you have an account or otherwise interact with the Service. We may also receive bounce and spam-report information relating to episode-alert emails sent to Podcast Website subscribers through the Service and use that information to protect our email-delivery systems and determine whether to suspend a Podcast Owner’s episode-alert functionality. This information, as described more fully below, is generally considered Internet or Other Electronic Network Activity Information under California law and may also include certain Identifiers.
Log and Usage Data: This includes your Internet Protocol (IP) address, browser type and version, operating system, referring URLs, pages visited, timestamps, session identifiers, traffic sources, UTM parameters, and user agent information. We collect this information through server logs and similar technologies when you interact with the Service. We use this information to analyze usage patterns, diagnose technical issues, improve the Service, detect spam, protect against unauthorized access, and maintain the integrity of the Service.
Cookies and Similar Technologies: We use cookies, local storage, tracking pixels, Google Analytics, internal analytics, email-tracking technologies, and information received from our email-delivery provider to collect information about your interactions with the Service, whether you have an account or otherwise interact with the Service, and certain delivery events relating to episode-alert emails. This information includes page views, traffic sources, UTM parameters, user agent information, interactions with our advertisements, and whether episode-alert emails bounced or were reported as spam. We use this information to analyze usage patterns, improve and promote the Service, measure marketing effectiveness, conduct advertising, protect our email-delivery systems, and determine whether to suspend a Podcast Owner’s episode-alert functionality. For more information about our use of cookies and similar technologies, please see Section 4 below.
2. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
To provide and maintain the Service: Creating and managing your account, administering your access to the Service, and providing account-related functionality you request.
To process payments: Managing subscriptions, processing billing through Stripe, and sending payment-related communications.
To communicate with you: Sending service-related emails, responding to support requests, and notifying you of product updates or changes.
To improve the Service: Analyzing usage patterns, diagnosing technical issues, and developing new features.
To ensure security and prevent fraud: Detecting spam, protecting against unauthorized access, and maintaining the integrity of the Service.
To comply with legal obligations: Responding to legal requests and fulfilling our regulatory obligations.
3. HOW WE DISCLOSE YOUR INFORMATION
We do not sell your personal information for monetary consideration. We may disclose your personal information in the following circumstances:
Third-Party Service Providers. We use third-party service providers that process personal information on behalf of Podpage to help us provide, maintain, support, administer, and secure the Service. These providers perform services such as payment processing, cloud hosting and infrastructure, content delivery, image processing, customer support, subscription management, analytics, marketing communications, and security. Examples include:
Stripe: Payment processing and subscription management.
SendGrid: Email delivery.
Loops: Marketing email communications to Podcast Owners and other account users.
Cloudflare: Content delivery, image processing, and DDoS protection.
Heroku / AWS: Cloud hosting and infrastructure.
Intercom: Customer support and in-app messaging.
Analytics and Advertising Partners. We may disclose personal information relating to visitors to Podpage.com, Podcast Owners and other account users, and other direct interactions with Podpage to third-party analytics and advertising providers, or allow those providers to collect such information through cookies, pixels, and similar technologies. We use these providers to understand how the Podpage-operated portions of the Service (such as Podpage.com) are used, measure traffic and engagement, improve the Service, and support Podpage’s advertising and marketing activities, including retargeting:
Google Analytics: Website and usage analytics, including analysis of traffic, engagement, and usage patterns.
Advertising and social media platforms, such as Meta Platforms, Twitter/X, LinkedIn, Reddit, and Google, where Podpage uses their technologies for advertising, campaign measurement, or related marketing purposes.
Where required by applicable law, we obtain consent before using non-essential analytics or advertising technologies and provide applicable choices regarding such processing.
Business Transfers
If Podpage is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information becomes subject to a different privacy policy.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request).
With Your Consent
We may disclose your information to third parties when you have given us explicit consent to do so.
4. YOUR PRIVACY CHOICES
Opting Out of Selling or Sharing Your Information. Depending on your state of residence and subject to applicable law, you may have the right to opt out of the sale or sharing of your personal information, as those terms are defined under applicable law, including certain disclosures for cross-context behavioral advertising. You may exercise any applicable right through our “Do Not Sell or Share My Personal Information” link. Please note that we do not sell your personal information for monetary consideration.
-
Manage Cookie Preferences. You may manage cookies and similar technologies used by Podpage through Cookie Preferences. Most browsers also allow you to remove or reject cookies through your browser settings. Please note that disabling cookies or similar technologies may affect the functionality of the Service. For users in the European Union, United Kingdom, and Switzerland, Podpage does not use non-essential cookies for its own purposes unless you provide any consent required by applicable law.
Important Notice – Cookies and Similar Technologies on Podcast Websites. Podpage does not control the cookies, advertising pixels, analytics tools, or similar technologies that a Podcast Owner chooses to use on its Podcast Website. The applicable Podcast Owner is responsible for selecting and using those technologies, explaining them to visitors, obtaining any required consent, and honoring applicable privacy choices. Podpage only provides technical tools that may allow Podcast Owners to display a cookie consent banner and manage visitor preferences. To manage technologies enabled by a Podcast Owner, please use the cookie-preference tools or contact information provided on the applicable Podcast Website.
Marketing Communications. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located at the bottom of any of our marketing emails or by contacting us as set forth in Section 15.
Do Not Track. We do not respond to “Do Not Track” settings at this time.
Universal Opt-Out Mechanisms. We honor universal opt-out signals, including browser or device-based indicators, that express your choice to opt out of targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects, to the extent required by applicable law.
Exercising Your Privacy Rights; Questions or Concerns. You may contact us to exercise your privacy rights or to relay any questions or concerns as set forth in Section 15.
5. DATA RETENTION
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Account Data: Retained for the duration of your account and deleted within 30 days of account deletion, except where we are required to retain it for legal, tax, or audit purposes.
Billing Records: Retained for up to 7 years after the end of the billing relationship, as required by tax and accounting regulations.
Analytics Data: Aggregate analytics data is retained indefinitely. Individual-level analytics data (hashed IPs, session identifiers) is retained for up to 26 months.
Email Deliverability Data: Bounce and spam-report information that Podpage uses to protect its email-delivery systems is retained for as long as reasonably necessary for security, deliverability, and platform-integrity purposes.
6. YOUR RIGHTS UNDER THE GDPR (EEA, UK, AND SWISS USERS)
Data Controller Contact and Status
Podpage as Data Controller: Podpage is the data controller for personal information it processes for its own purposes, including information relating to accounts and subscriptions, visitors’ interactions with the Service, and the limited email-deliverability information described in this Privacy Policy.
Podpage as Data Processor: When Podcast Owners collect subscriber emails, contact form submissions, survey responses, and other personal information through their Podcast Websites, the Podcast Owner is the data controller and Podpage acts as the data processor. Podcast Owners are responsible for providing appropriate privacy notices, establishing an appropriate legal basis for processing, and complying with applicable data protection laws for data they collect through their Podcast Websites.
Legal Bases for Processing Your Personal Information. Please Visit Appendix I for a description of the legal bases on which we process your personal information.
Please note that when we process your personal information on the basis of your consent, you have the right to withdraw your consent to such processing at any time—including where we use non-essential cookies, targeted advertising technologies, or electronic marketing communications directed to European users.
Additionally, for processing done on the basis of contractual necessity, if you choose not to provide this information, we may be unable to create your account, process requests or transactions, or deliver the services you request, as applicable.
Where we rely on our legitimate interests, you may have the right to object to that processing as described below.
Your Privacy Rights. If you are located in the EEA, UK, or Switzerland, subject to applicable law, you may have the right to:
Request a copy of the personal information we hold about you,
Request that we transmit your personal information to another controller (where applicable under the right of data portability),
Request that we correct inaccurate or incomplete data,
Request that your data be deleted,
Withdraw your consent, if you have consented to our use of personal information for a specific purpose,
Request that your data be restricted, and
Object to the processing of your personal information.
How to Submit Privacy Rights Requests
Contact Us. If you wish to exercise your rights enumerated above, please submit a request to us as set forth in Section 15. We may request additional information where reasonably necessary to confirm your identity and process your request.
Requests Relating to Information Controlled by Podcast Owners. Where Podpage processes personal information solely on behalf of a Podcast Owner, the Podcast Owner is responsible for responding to requests concerning that information. We may direct your request to the applicable Podcast Owner or provide the Podcast Owner with reasonable assistance in responding to the request.
-
Contact Your Data Protection Authority.
If you are in the EU and have a concern about our processing of personal information that we are not able to resolve, you have the right to lodge a complaint with the data protection authority where you reside. For contact details of your local Data Protection Authority, please see: https://edpb.europa.eu/about-edpb/board/members_en.
If you are in Switzerland and have such concerns, please see the Federal Data Protection and Information Commissioner website at https://www.edoeb.admin.ch/edoeb/en/home.html.
If you are in the UK and have such concerns, please see the Information Commissioner’s Office website at https://ico.org.uk/.
International Data Transfers. Podpage is based in the United States. If you are accessing the Service from the EEA, UK, or Switzerland, your personal information will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and other lawful transfer mechanisms to ensure adequate protection of your data.
7. CALIFORNIA AND ADDITIONAL U.S. STATE PRIVACY RIGHTS
This section summarizes certain privacy rights that may apply to residents of California and other U.S. states that have enacted comprehensive privacy laws. Additional disclosures specific to California residents, as required by the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), are provided in Section 8.
Depending on your state of residence, our relationship with you, and subject to applicable law, you may have certain rights regarding our collection, use, disclosure, sharing, and other processing of your personal information. To request to exercise such rights, contact us as set forth in Section 15. Please be aware that these rights may be subject to applicable definitions, limitations, verification requirements, and exceptions and may vary based on your jurisdiction.
Subject to applicable law, these rights may include:
The right to confirm whether we process your personal information and to access such personal information.
The right to request correction of inaccuracies in your personal information.
The right to request deletion of your personal information.
The right to request a copy of certain personal information you have provided to us, where required by law.
The right to opt out of certain types of processing, including processing for targeted advertising purposes, where applicable.
The right to opt out of profiling or automated decision-making in furtherance of decisions that produce legal or similarly significant effects, where provided by law.
The right to opt out of the sale or sharing of personal information, as defined under applicable law.
The right, where provided by applicable law, to limit, opt out of, or otherwise control the use and disclosure of sensitive personal information or sensitive data, as defined under applicable law.
The right to designate an authorized agent to submit a request on your behalf, where permitted by law.
The right to appeal a decision regarding your privacy rights request, where required by applicable law.
The right not to receive unlawful discriminatory treatment for exercising your privacy rights.
Verification. We may take reasonable steps to verify your identity and authority to make a request before processing it. We may request additional information where reasonably necessary to verify or respond to your request.
Appeals Process. If we deny your privacy rights request in whole or in part, we will inform you of the reasons for our decision. Where applicable law provides a right to appeal, you may appeal that decision by contacting us as set forth in Section 15 with "Privacy Appeal" in the subject line. Please include a description of the request that was denied and the basis for your appeal. We will respond to your appeal within the timeframe required by applicable law. If your appeal is denied, we will provide information on how to contact your state Attorney General or other applicable regulatory authority, where required by law.
Response Timeframes. We will respond to verifiable consumer requests within the timeframes required by applicable law. Where permitted, we may extend the applicable response period and will notify you as required by law.
8. YOUR RIGHTS UNDER THE CCPA (CALIFORNIA RESIDENTS)
This section supplements the rights described in Section 7 with additional disclosures required under California law. If you are a California resident, you are entitled to the rights and information enumerated in this Section 8.
Under the CCPA and CPRA, we are required to disclose the categories of personal information we collected, disclosed, and sold or shared (as defined by California law) in the previous 12 months. Visit Appendix I for a table describing these practices.
Please note that we do not sell personal information for monetary consideration. However, as described in Section 1 and Appendix I, we may share certain categories of personal information (Identifiers and Internet or Other Electronic Network Activity Information) with advertising partners for cross-context behavioral advertising purposes. You have the right to opt out of such sharing by submitting a request as described in Section 4.
Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, contact us as outlined in Section 15 below, and include in your request a current California address and your attestation that you are a California resident. Please note, however, that we do not share any personal information with third parties for such purposes.
9. SECURITY
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, loss, misuse, alteration, or disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
10. CHILDREN'S PRIVACY
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe that a child under 16 has provided us with personal information, please contact us at info@podpage.com.
11. THIRD-PARTY LINKS
The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.
12. YOUTUBE API SERVICES
Podpage uses YouTube API Services to provide YouTube-related features on Podcast Websites, including displaying YouTube videos and automatically matching podcast episodes to their corresponding YouTube videos.
If you enable or use these features, your use of the YouTube integration is subject to:
Data Collected via YouTube API
If you connect a YouTube channel or playlist to your Podpage account, we access data from the YouTube Data API, including video titles, descriptions, thumbnails, and publish dates. We use this data to display the applicable Podcast Owner’s content on its Podcast Website and to link episodes to their corresponding videos.
Data Retention and Deletion
YouTube API data may be cached as necessary to provide these features. If you disconnect your YouTube channel, revoke Podpage’s access, or delete your Podpage account, we will delete the associated YouTube API data in accordance with applicable YouTube API requirements. You may also revoke Podpage’s access to your Google data at any time through your Google security settings.
13. EMAIL COMMUNICATIONS
If you have an account with Podpage, we may send you service-related emails (e.g., account verification, billing notices, security alerts). These are transactional and cannot be opted out of while you maintain an account. We may also send you product updates and marketing communications, which you can opt out of at any time by following the unsubscribe link in the email or by contacting us at info@podpage.com.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the "Last Updated” date above. For material changes, we will also notify account holders by email at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated Privacy Policy.
15. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Podpage, Inc.
Email: info@podpage.com
Requests Concerning Information Processed on Behalf of Podcast Owners. Where Podpage processes personal information solely on behalf of a Podcast Owner, the Podcast Owner is generally responsible for responding to requests concerning that information. Podpage may direct your request to the applicable Podcast Owner and will provide reasonable assistance to the Podcast Owner in responding to the request where required by applicable law or contract.
Appendix I – CCPA/CPRA Disclosures and GDPR Legal Bases
The table below identifies the categories of personal information described in this Privacy Policy and indicates whether each category was collected or otherwise processed during the preceding 12 months, the principal GDPR legal bases relied upon for those activities, and whether the information was disclosed for business purposes or “shared” for cross-context behavioral advertising under the CCPA/CPRA.
| Category of Personal Information | Collected or Processed in preceding 12 months? | Examples | Disclosed to any parties for a business purpose in preceding 12 months? | Shared with any parties for cross-context behavioral advertising in preceding 12 months? | Legal Basis for Processing (GDPR) |
|---|---|---|---|---|---|
| 1. Identifiers | Yes | Name, email address, telephone number, billing address, social media links, basic profile information, account identifiers, IP address, cookie identifiers, session identifiers, OAuth access tokens, refresh tokens, and similar contact or account information. | Yes. Service providers that support payment processing, subscription management, cloud hosting and infrastructure, content delivery, customer support, email communications, analytics, advertising, security, and fraud prevention; legal or regulatory recipients where required; and parties involved in a business transfer. | Yes. IP addresses, cookie identifiers, session identifiers, and similar online identifiers may be shared with advertising, analytics, measurement, and social media partners for cross-context behavioral advertising, retargeting, campaign measurement, and related advertising purposes. | Collection and Use: Performance of a contract for account administration, authentication, requested functionality, subscription management, and communications; legitimate interests in operating, securing, improving, and promoting the Service; compliance with legal obligations; and consent where required for marketing or non-essential cookies. Disclosure: Performance of a contract; legitimate interests; legal obligation; and consent where required. Sharing: Consent where required; otherwise, legitimate interests in improving and promoting the Service, where permitted by applicable law.
|
| 2. Commercial Information | Yes | Subscription plan and status, limited transaction information, billing records, and related subscription or account information. Podpage does not store full payment-card details on its servers. | Yes. Stripe and other service providers supporting payment processing, subscription management, billing, accounting, cloud infrastructure, security, and legal compliance; legal or regulatory recipients where required; and parties involved in a business transfer. | No. Podpage does not describe sharing subscription, billing, or transaction information for cross-context behavioral advertising. | Collection and Use: Performance of a contract for subscription administration, billing, paid features, and payment-related communications; legitimate interests in maintaining financial and business records and addressing account or payment issues; and compliance with legal, tax, and accounting obligations. Disclosure: Performance of a contract; legitimate interests; and legal obligation. |
| 3. Internet or Other Electronic Network Activity Information | Yes | IP address, browser type and version, operating system, referring URLs, pages visited, timestamps, session identifiers, traffic sources, UTM parameters, user-agent information, page views, interactions with advertisements, cookie and pixel data, and bounce and spam-report information relating to episode-alert emails. | Yes. Cloud-hosting, content-delivery, analytics, advertising, marketing, measurement, email-delivery, security, fraud-prevention, and other technology providers; legal or regulatory recipients where required; and parties involved in a business transfer. | Yes. Online activity and device or cookie information may be shared with advertising, analytics, measurement, and social media partners for cross-context behavioral advertising, retargeting, attribution, campaign measurement, and related advertising purposes. | Collection and Use: Legitimate interests in analytics, diagnosing technical issues, improving and promoting the Service, measuring marketing effectiveness, preventing spam and unauthorized access, protecting email deliverability, and maintaining the integrity of the Service; performance of a contract where necessary to provide or secure account functionality; and consent where required for non-essential cookies, advertising, or similar tracking technologies. Disclosure: Legitimate interests; performance of a contract where applicable; legal obligation; and consent where required. Sharing: Consent where required; otherwise, legitimate interests in improving and promoting the Service, where permitted by applicable law.
|