Privacy Policy

Privacy Policy – ThePod.fm

Effective Date: 6th Oct 2025

At ThePod.fm (“we”, “our”, “us”), we take your privacy and data security seriously. This Privacy Policy explains how we collect, use, and protect personal information in connection with our podcast management and growth services.

1. Who We Work With

ThePod.fm is a private, B2B service. We only work with contracted business clients who engage us to manage and grow their podcasts. Our integrations, including Google Calendar, are only available to authorized clients under a service agreement. We do not offer a public-facing or consumer app.

2. Information We Collect

When you connect your Google account, we may access:

• Calendar event metadata (event titles, times, attendees, meeting links)

• User profile information (name, email address)

If you schedule a call through our booking tool (Cal.com), we may also collect:

• Your name, email, and meeting preferences

• Consent to contact you regarding our services

We do not collect or process any unrelated data from your Google account.

3. How We Use Data

We use your data only to:

• Schedule and manage podcast introduction calls

• Automatically manage meeting bots for transcription and production

• Facilitate guest management and communication

• Provide updates about booked calls and contracted services

We do not use your Google data for advertising, profiling, or resale.

4. Data Protection and Security

We implement strict technical and organizational measures to protect your data, including:

• Encryption: OAuth tokens and calendar data are stored securely using industry-standard encryption (AES-256 at rest, HTTPS/TLS in transit).

• Access Control: Access to client data is restricted to authorized team members on a least-privilege basis.

• Token Handling: OAuth tokens are stored securely and used only for the duration of the integration. Tokens are never exposed to clients or shared externally.

• Secure Infrastructure: All data is hosted on reputable cloud infrastructure (e.g., Google Cloud, Vercel) with continuous monitoring and security best practices.

• Audit and Monitoring: We routinely review data handling practices to ensure compliance with Google’s API Services User Data Policy and relevant privacy regulations (including GDPR where applicable).

5. Sharing Data

We may share limited information only as necessary to deliver our services:

• With service providers: For example, Recall.ai (for meeting transcription/recording).

• With consent: Data is only shared when required to perform the agreed service.

• Never sold: We do not sell, rent, or trade your Google data.

6. Data Retention & Revocation

• OAuth tokens and calendar data are retained only for the duration of the client relationship.

• Clients can revoke access at any time via Google Account Permissions.

• Upon termination or revocation, all OAuth tokens and associated data are permanently deleted within 30 days.

7. Your Rights

You may:

• Request access to or correction of your data.

• Revoke consent at any time.

• Request deletion of all stored information.

All requests can be made by emailing support@thepod.fm.

8. Contact

If you have any questions about this policy or our data practices, contact us at:

📧 support@thepod.fm

9. Compliance

ThePod.fm complies with Google’s User Data Policy for the OAuth API Verification process and ensures that all data access, usage, and storage are transparent, limited, and secure.