Podcast Marketing AI

GDPR overview

Implementation is partial. The privacy policy devotes a section to people in the EU and the UK, cites the GDPR and the UK GDPR, names the legal bases relied on — consent, legal obligations, vital interests — and grants the full set of rights: access and a copy, rectification, erasure, restriction, portability and objection, plus withdrawal of consent at any time and the right to complain to a supervisory authority, with a link to the European Commission's directory. Requests go to support@podcastmarketing.ai or the contact form. What is missing weighs heavily: no Article 27 representative is designated although the publisher is established in India, no data protection officer is named, no data processing agreement is offered, and no sub-processor list is published — only categories. Data is transferred to and processed in India as a condition of use. Policy dated 12 January 2023.

Who owns the data?

The terms draw a sharp line. Content you upload or post — your Contributions — stays yours: the publisher states it asserts no ownership and that you keep every intellectual property right attached to it. In exchange you grant a licence that is worldwide, perpetual, irrevocable, transferable, sub-licensable, royalty-free and open to commercial use, covering hosting, reproduction, disclosure, publication, translation, resale and distribution. The publisher may also edit, recategorise, pre-screen or delete any Contribution without notice. Submissions are treated quite differently: questions, comments, suggestions, ideas and feedback sent to the company become its sole property outright. A separate clause disclaims all liability for lost or corrupted data.

Reuse rights

Because you keep ownership of what you upload and of the assets generated from it, you can publish, edit, repurpose and monetise them without asking permission — nothing in the terms restricts commercial reuse of your own episode material. On the vendor's side, the privacy policy lists names, email addresses, postal addresses, usernames and passwords, alongside automatically collected IP addresses, device and browser characteristics, location and usage logs. Payment details are handled and stored by Stripe. Data may be shared with categories of third parties — cloud computing, storage, analytics, payment processing, sales and marketing, authentication and web hosting — none of which are named, and may be transferred in a merger or acquisition. The company states it has neither sold nor shared personal information in the preceding twelve months, and says nothing whatsoever about using customer data to train AI models.

Data retention & training

Hosting summary

The terms of use state plainly that the platform is hosted in India, and make continued use of the service the mechanism by which a user elsewhere consents to their data being transferred there and processed under Indian law. No alternative region is offered and there is no data residency option, so buyers with an EU or UK residency requirement have nothing to select. Payment data is the one documented exception: it is handled and stored by Stripe, outside the publisher's own perimeter. Beyond that, the privacy policy names no infrastructure provider at all — it lists categories of third parties such as cloud computing, data storage and website hosting without a single supplier name, and publishes no sub-processor list. No security certification such as SOC 2 or ISO 27001 is claimed; the commitment is described only as appropriate and reasonable technical and organisational measures. Network lookups place the domain behind Cloudflare on an anycast address, which identifies a CDN edge and says nothing about where the data itself sits.