Privacy Policy

Effective Date: October 29, 2025

Rooy Development ("Company", "we", "us", "our") operates the podcast generation service available at podcast-generator.ai and app.podcast-generator.ai (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information obtained through the Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy legislation.

1. Information We Collect

1.1 Account and Registration Information

When you create an account, we collect your email address and authentication credentials. Passwords are securely hashed using industry-standard encryption protocols and are never stored in plain text.

1.2 Payment Information

Payment transactions are processed by our third-party payment processor, Stripe. We do not store complete credit card numbers on our servers. We retain transaction history and billing information necessary to manage your subscription.

1.3 User-Generated Content

We collect and process content you provide to the Service, including text input, document uploads, URLs, and any instructions or preferences you specify for podcast generation.

1.4 Automatically Collected Information

We automatically collect certain technical information when you access the Service, including IP addresses, browser types, operating systems, and usage patterns. This information is collected to maintain security, prevent abuse, and improve the Service.

1.5 Cookies and Similar Technologies

We use cookies and similar tracking technologies to maintain session state, remember preferences, and analyze usage patterns. You may disable cookies through your browser settings, though this may limit certain functionality.

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Service Provision

• User authentication and account management
• Generation of podcast scripts and audio using artificial intelligence
• Storage and delivery of generated content
• Processing of payments and subscription management
• Delivery of transactional communications (account notifications, receipts, service updates)

2.2 Service Improvement and Analytics

• Analysis of usage patterns to enhance features and user experience
• Performance monitoring and technical troubleshooting
• Product development and research

2.3 Communications

• Transactional emails related to your account and service usage
• Product updates, feature announcements, and promotional communications (with opt-out available)

2.4 Security and Legal Compliance

• Prevention of fraud, abuse, and unauthorized access
• Enforcement of our Terms of Service
• Compliance with legal obligations and valid legal requests

3. Third-Party Service Providers

We engage certain third-party service providers to perform functions on our behalf. These providers have access to your information only as necessary to perform their designated functions and are obligated to maintain confidentiality.

3.1 Artificial Intelligence and Content Processing

• OpenAI: Script generation and text-to-speech synthesis
• Google (Gemini): Alternative AI processing for script generation
• ElevenLabs: Text-to-speech services

Your content is transmitted to these providers solely for processing purposes and is subject to their respective privacy policies. We do not use your content to train proprietary models. Where providers offer data control settings (including model training opt-outs), we configure those controls to restrict use of submitted data for training.

3.2 Infrastructure and Storage

• Cloudflare R2: Content delivery and file storage

3.3 Payment Processing

• Stripe: Payment processing and subscription management

3.4 Communications

• Resend: Email delivery infrastructure

3.5 Analytics

• PostHog: Product analytics and usage insights

3.6 Authentication

• Google OAuth: Optional third-party authentication service

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Information is retained while your account remains active
• Deleted Accounts: Upon account deletion request, personal data is removed from active systems; certain data may persist in backup systems for up to 30 days
• Generated Content: Retained until deletion by you or termination of your account
• Transaction Records: Billing and payment records retained as required by law for tax and accounting purposes

5. Your Rights Under Data Protection Law

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with applicable data protection laws, you have certain rights regarding your personal information:

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy thereof
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format
• Right to Object: Object to processing of your personal data for certain purposes, including marketing
• Right to Restrict Processing: Request limitation of processing under certain circumstances
• Right to Withdraw Consent: Withdraw previously granted consent for data processing

To exercise any of these rights, please contact us at stan@podcast-generator.ai. We will respond to your request within the timeframe required by applicable law (typically 30 days).

6. Data Security

We implement reasonable technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, secure password hashing, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction.

When we transfer personal data from the EEA to other jurisdictions, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure adequate protection of your information in accordance with applicable data protection laws.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate parental consent, we will take steps to delete such information promptly.

9. Marketing Communications

With your consent, we may send you promotional communications about new features, special offers, and other information we believe may interest you. You may opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your communication preferences in your account settings
• Contacting us at stan@podcast-generator.ai

Please note that even if you opt out of marketing communications, we will continue to send transactional emails related to your account and service usage.

10. Public Content and User Visibility

Certain features of the Service allow you to make content publicly accessible. Please be aware that:

• Content remains private unless you choose to publish or share it using features provided by the Service
• You can control visibility settings and may change them at any time, subject to caching and indexing delays
• Content marked as public may be indexed by search engines and accessible to the general public

Exercise caution when deciding to make personal or sensitive information publicly available.

11. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Effective Date" at the top of this policy and, where appropriate, provide additional notice (such as via email or a prominent notice on the Service).

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Information

Data Controller:

Privacy Inquiries:

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: stan@podcast-generator.ai
Subject Line: Privacy Inquiry

14. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. For users in the Netherlands, the relevant authority is:

Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl

By using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.