PodcastsToText

Privacy Policy

Effective Date: September 12, 2026

1. Information We Collect

To provide our podcast transcription services, we collect the following types of information:

  • Account Data: Name, email address, and authentication identifiers when you sign up.
  • Service Data: The Spotify or Apple Podcast URLs you submit for transcription.
  • Generated Content: The text transcripts generated from the audio files you request.
  • Payment Data: Payment processing is handled securely by Stripe; we do not store your credit card details on our servers.

2. Audio Processing & Transcription

We act as a processing bridge between podcast platforms and transcription engines:

  • No Audio Storage: We do not store original audio files. Audio is fetched from the source URL, processed into text, and the temporary audio data is purged immediately after processing.
  • Transcript Ownership: You retain the rights to the transcripts you generate, subject to the copyright of the original content creator.

3. Data Security

We use industry-standard encryption (AES-256) and secure socket layers (SSL/TLS) to protect your data during transmission. While no method of electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional security layers to safeguard your account.

4. Third-Party Services

We share data with third-party service providers only when necessary to provide the Service:

  • LemonFox AI: To convert audio to text.
  • Stripe: For secure billing and subscription management.
  • Google Analytics: To understand how users interact with our platform.
  • Cloudflare: For bot detection on our free preview and contact forms (see section 6).
  • PostHog: Product analytics, which steps of the service are used and where people stop. Only when enabled; the same records are kept in our own database either way.

We also keep our own record of how the service is used: which steps you reached, whether a transcription was accepted or refused and why, and how long the episode was. To join those steps into one visit before you have an account, we set a first-party cookie (pt_aid), if you allow analytics cookies, holding a random identifier and nothing else. It is not shared with advertisers, it does not contain your email address or the links you paste, and if you ask us to delete your account the identifier stops being connected to you.

5. Cookies

Strictly necessary cookies are always on, because the site cannot work without them. Google Analytics, our own visit id (pt_aid) and the Meta Pixel are used only if you allow their category in the cookie banner, so none of their cookies exist until you do. Your choice is kept for six months, after which we ask again. You can change it at any time, and withdrawing a category deletes its cookies.

CookieCategoryPurposeLasts
pt_consentStrictly necessaryRemembers your cookie choice6 months
sb-*Strictly necessaryKeeps you signed in (Supabase)Session / until sign-out
Cloudflare TurnstileStrictly necessaryBot protection on the free preview and contact form (see section 6)Short-lived
pt_aidAnalyticsJoins the steps of one preview visit before you have an account (see section 4); set only when you paste a link1 year
_ga, _ga_*AnalyticsGoogle AnalyticsUp to 2 years
_fbp, _fbcMarketingMeta Pixel: measures whether our ads lead to sign-upsUp to 90 days

We also use Vercel Analytics and clicks.page, which count page views without setting cookies. YouTube videos in the editor use YouTube’s privacy-enhanced mode.

6. Bot Protection (Cloudflare Turnstile)

To stop automated abuse of our free transcript preview and our contact form, we use Cloudflare Turnstile in its invisible mode. Turnstile runs silently in the background: there is no puzzle to solve and nothing appears on screen.

Turnstile processes a small set of client-side signals (your IP address, TLS fingerprint, User-Agent header, and the site key of the page you are on) solely to distinguish human visitors from bots. Cloudflare cannot directly identify individuals from these signals, and they are not used to profile, track, or target you. Cloudflare acts as our processor when securing this site, and as a controller when it uses the same signals to improve Turnstile’s bot detection, relying on its legitimate interests. The signals and any cookies Turnstile sets are strictly necessary for this security purpose.

For full details, see Cloudflare’s Turnstile Privacy Addendum and its Privacy Policy. Questions about Cloudflare’s own processing can be sent to its Data Protection Officer at dpo@cloudflare.com; questions about our use of it can be sent to us using the details below.

7. Your Data Rights (GDPR & CCPA)

Depending on your location, you have the right to:

  • Request a copy of the data we hold about you.
  • Request that we delete your entire account and all associated transcripts.
  • Opt-out of marketing communications.

8. Contact Us

If you have any questions about your privacy or wish to request data deletion, please reach out to us:

podcaststotext@gmail.com