Privacy Policy

1. Who We Are

The controller responsible for your personal data is:

SEQUEL AI LTD

Registered number: 16897137

Registered office: 128 City Road, London, United Kingdom, EC1V 2NX

privacy@podkrafter.com

2. About the Service

PodKrafter is a software service that helps users create and publish podcast content. Depending on how you use the Service, you may create or upload scripts, generate episode outlines, voiceovers, cover art, show notes, transcripts and RSS feeds, configure shows and formats, and distribute audio to podcast directories.

3. The Personal Data We Collect

We may collect and process the following categories of personal data:

a. Account data

Login and account details; email verification status; profile and account preferences. Passwords are hashed and are not stored in readable form.

b. Subscription and billing information

Subscription plan and status; payment-related reference information such as customer and subscription identifiers; refund status where relevant; affiliate payout information where applicable, including Stripe payout details for affiliate administration. We do not store full payment card details. Payments are processed by Stripe.

c. Content and usage data

Scripts you upload or write; scripts, artwork, voiceovers, show notes and audio generated through the Service; topics, niches, show settings, voice selections and publishing history; operational records and troubleshooting logs.

d. Technical data

IP address; device information; general application and security logs; cookie preferences; affiliate referral attribution data.

e. Support and communications data

Emails and messages you send to us; records of support and privacy requests.

4. How We Use Your Personal Data

We use personal data to:

• Create and manage user accounts
• Provide, operate and maintain the Service
• Generate content requested by you
• Store your settings, preferences and shows
• Administer affiliate relationships and payouts where applicable
• Send service-related, administrative and security communications
• Monitor, troubleshoot and improve service reliability and performance
• Prevent fraud, abuse, misuse and unauthorised access
• Comply with legal, regulatory, tax and accounting obligations
• Send marketing communications where permitted by law or where you have consented

5. Legal Bases for Processing

Depending on the circumstances, we rely on the following legal bases under UK data protection law:

Contract:

where processing is necessary to provide the Service you requested, including account creation, subscription management, content generation, rendering and service communications

Legitimate interests:

where processing is necessary for security, fraud prevention, service administration, operational monitoring, support, debugging and maintaining the reliability of the Service

Consent:

where required for marketing communications and non-essential cookies

Legal obligation:

where we need to comply with legal, tax, accounting, regulatory or law enforcement obligations

6. AI Providers and Automated Content Generation

To provide the Service, we use third-party AI providers for tasks such as research, script generation, voice synthesis and image generation (which may include OpenAI, Anthropic, xAI and ElevenLabs). When using these providers, we send the content inputs needed to generate the output you requested. We do not intentionally send your email address or other direct user identifiers as part of routine content generation requests. In limited cases, authorised personnel may review content or account-related information where reasonably necessary for support, debugging, abuse prevention, quality control or service reliability. We do not use your content to train our own models.

7. Podcast Distribution

When you publish an episode, we generate a public RSS feed containing your show metadata, episode audio and artwork so that podcast directories (Spotify, Apple Podcasts, Amazon Music, YouTube Music and others) can syndicate it. Content you publish is public by design. Each directory's handling of your content is governed by its own terms.

8. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service and remember your preferences.

• Necessary cookies required for authentication, security and core site functionality
• Optional analytics cookies
• Optional marketing cookies
• Affiliate referral cookies (45-day attribution window) where you arrive via a partner link

9. How We Share Personal Data

We may share personal data with trusted third parties where necessary to operate the Service, including:

• Payment processors such as Stripe
• AI service providers used for content generation (LLM, TTS and image providers)
• Cloud hosting, database and storage providers
• Email and communications providers
• Podcast directories you choose to distribute to
• Professional advisers, auditors, insurers or legal representatives where reasonably necessary
• Regulators, authorities or law enforcement where required by law

10. Requests from Public Authorities

If a court, regulator, law enforcement agency or other public authority asks us for personal data, we: review every request to confirm it is legally valid; challenge requests we consider unlawful, overly broad or inappropriate using available legal remedies; disclose only the minimum data necessary; and keep a record of each request, our response, the legal basis relied on and who was involved.

11. International Transfers

Because we use service providers and integrations that may operate in different countries, your personal data may be transferred to and processed outside the UK or your home country. Where required, we take appropriate steps to ensure such transfers are subject to suitable safeguards in accordance with applicable data protection law.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access, including encryption in transit using HTTPS/TLS, access controls and restricted internal access, encrypted storage of sensitive tokens, and security logging. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

13. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy. In general: account information is retained while your account remains active and for a reasonable period afterwards where necessary; billing and financial records may be retained longer where required by law; generated content and scripts are retained for as long as reasonably necessary for service operation and legitimate business purposes; deleted data may remain in backups for a limited period before those backups expire.

14. Account Deletion and Data Deletion Requests

You may delete your account yourself in Dashboard → Settings → Delete account, or request deletion by contacting privacy@podkrafter.com. We will review and action valid requests within a reasonable period and in accordance with applicable law. In some cases we may need to retain certain information where required for legal, tax, accounting, fraud prevention, dispute resolution or regulatory reasons.

15. Marketing Communications

We may send you service-related communications necessary to operate your account. We may also send product updates and marketing communications where permitted by law. You can opt out of marketing emails at any time via the unsubscribe link or by contacting us. Opting out does not stop essential service communications.

16. Your Rights

Depending on where you are located and subject to applicable law, you may have rights including:

• The right to access your personal data (self-serve export available in Settings)
• The right to correct inaccurate personal data
• The right to request deletion of personal data
• The right to restrict certain processing
• The right to object to certain processing
• The right to data portability

17. Children

The Service is not intended for children or minors, and we do not target minors through the Service.

18. Third-Party Services and Platforms

The Service may contain links to or integrations with third-party services and platforms. Their privacy practices are governed by their own policies and terms. We encourage you to review those policies when using third-party services.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, legal requirements or our data practices. If we make material changes, we will take reasonable steps to notify users where appropriate, such as through the Service or by email.

20. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact privacy@podkrafter.com.

SEQUEL AI LTD

128 City Road

London

United Kingdom

EC1V 2NX

If you are in the UK and are unhappy with how we handle your personal data, you also have the right to complain to the Information Commissioner's Office (ICO).