Privacy Policy

Account Information

When you create an account, we collect your email address and authentication credentials. Authentication is handled through Supabase Auth, a third-party authentication provider.

Podcast Content You Provide

To deliver our optimization tools, we collect content you submit, including: podcast URLs and RSS feed data, episode titles, descriptions, and show notes, brand keywords and positioning information, and any other content you provide for AI processing (such as about page text or episode transcripts).

Generated Content

We store content generated by our AI tools on your behalf, including optimized episode titles, FAQ pages, show descriptions, and about page copy.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other payment instrument data on our servers. Stripe may collect information necessary to process your payment in accordance with their own privacy policy.

Usage and Technical Data

We automatically collect certain technical information when you use the Service, including IP address, browser type and version, pages visited, time and date of access, and device information. This data is collected through our hosting provider, Vercel, and is used to maintain and improve the Service.

Audio Data (Online Mic Test)

Our Online Mic Test tool processes audio entirely within your web browser. No audio data is transmitted to our servers or any third party. Audio analysis happens locally on your device and is discarded when you leave the page.

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating AI-optimized content for your podcast
• Process your content through AI language models to produce optimized titles, FAQs, descriptions, and other outputs
• Process transactions and manage your subscription
• Send you service-related communications, including account verification, billing notices, and support responses
• Improve and develop the Service based on usage patterns and feedback
• Detect, prevent, and address technical issues or abuse

We do not sell your personal information. We do not use your podcast content to train AI models. Your content is processed solely to generate the outputs you request.

Our Service uses third-party AI language model providers, including OpenAI, to process your podcast content and generate optimized outputs. When you use our AI-powered tools:

• Your submitted content (episode titles, descriptions, show notes, brand keywords) is sent to these AI providers for processing
• AI providers process this data according to their own terms and privacy policies
• We use API access with data processing agreements that prohibit these providers from using your content to train their models
• Generated outputs are returned to us and stored in your account

We select AI providers that offer enterprise-grade data handling and do not retain submitted content beyond the processing window. However, we encourage you to review the privacy policies of our AI providers if you have concerns about how your content is handled during processing.

Your data is stored in a Supabase-hosted PostgreSQL database with encryption at rest and in transit. Our application is hosted on Vercel. We implement industry-standard security measures including HTTPS encryption for all data in transit, encrypted database storage, role-based access controls, and regular security updates.

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your account information and generated content for as long as your account is active. If you delete your account, we will delete your personal data and generated content within 30 days, except where we are required to retain it for legal or compliance purposes.

Podcast content you submit for processing (episode URLs, descriptions, etc.) is retained in your account history so you can access past results. You may request deletion of specific content at any time.

Usage logs and analytics data are retained for up to 12 months for service improvement purposes, after which they are aggregated or deleted.

We use the following third-party services to operate the Service. Each handles data according to their own privacy policies:

We use essential cookies required for authentication and session management. We do not use advertising cookies or third-party tracking pixels. Our hosting provider (Vercel) may collect basic analytics data including page views and performance metrics.

You can configure your browser to refuse cookies, but this may prevent you from using certain features of the Service.

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to our processing of your data

Our legal basis for processing your data is: (a) performance of a contract when you use paid features, (b) your consent when you submit content for AI processing, and (c) our legitimate interest in operating and improving the Service.

To exercise any of these rights, contact us at support@polymash.com. We will respond within 30 days.

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To submit a request, email us at support@polymash.com or use the contact form on our website. We will verify your identity and respond within 45 days.

Our Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses and our service providers' data processing agreements to ensure adequate protection for international data transfers.

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will send an email notification to the address associated with your account.

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: