PodManager.AI

GDPR overview

GDPR compliance is claimed explicitly but documented thinly. The features page states the platform is "GDPR, EU AI Act, UAE PDPL and UAE TDRA compliant", the homepage carries matching compliance badges, and the RealVoice page repeats the claim for voice models. The privacy policy lists the usual rights: access, correction, deletion, objection or restriction, and portability, though it frames them as depending on the user's location. A privacy contact is published at privacy@podmanager.ai, account deletion is self-service, and connected platforms can be disconnected at any time. Beyond that, the documentation is thin: no GDPR article is cited, no legal basis is named, no EU representative under Article 27 and no data protection officer are designated, international transfers are acknowledged with generic safeguards only, and the policy carries no effective date.

Who owns the data?

Users keep ownership of everything they upload or create. The terms of service state that you retain ownership of all your content, and grant PodManager.AI a non-exclusive, worldwide, royalty-free licence to host, process, reproduce and display it, strictly for operating and improving the service. That licence ends when the content is deleted, except where the law requires retention. Deleting an account is self-service, from Account Settings, and removes data tied to connected third-party services. Payment and transaction records sit with Stripe, the payment provider, and are kept for accounting, tax, fraud-prevention and audit purposes rather than by the vendor itself.

Reuse rights

Nothing in the terms restricts what creators do with their own recordings, transcripts, artwork or translated episodes: ownership stays with the user, the licence granted to the vendor is limited to running the service, and it lapses when content is deleted. No permission has to be requested to publish, sell, syndicate or repurpose an episode elsewhere. Free accounts are the one exception: they must publish with PodManager.AI branding, watermarking is enforced automatically and cannot be bypassed, while paid tiers can toggle it off. On the vendor's side, personal data is used to run the account, publish on the user's behalf, show analytics returned by connected platforms, generate content suggestions from usage and results, support, billing, debugging and fraud prevention. The company states that it does not sell personal data and does not sell Google user data. Whether customer content is used to train AI models is never addressed either way.

Data retention & training

Hosting summary

No hosting country or region is named anywhere on the site: not in the privacy policy, not in the terms of service, and there is no dedicated trust or security page. The privacy policy acknowledges international transfers, stating that information may be processed in countries different from where the user lives, depending on where the company and its service providers operate, and adds that appropriate safeguards are applied where required. No mechanism is named, so no standard contractual clauses and no adequacy decision are cited. Stripe is the only service provider identified by name, for payments; hosting, analytics and support vendors are referred to only as categories. On security, the vendor claims access controls, encryption in transit and monitoring, with encrypted media storage and encryption at rest for audio and voice models, while explicitly stating that no method of transmission or storage is fully secure. As a technical indication only, the domain resolves to an IP address operated by Microsoft in Dublin, Ireland; that is an observation, not a declaration by the publisher.