Privacy Policy

Last updated: 2026/10/29

1. Introduction

Welcome to AIdeaFlow Podcast. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information that you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support. This includes your email address, your name (from Google sign-in, your account page or the contact form), your profile picture if you sign in with Google, and your intended use of the service. When you use the generator, we process the content that you submit: the text you paste, the text of the files you upload, the web pages you import, your messages to the podcast assistant and your cover image prompts. We store the podcasts, transcripts, titles, descriptions, show notes and cover images that we generate for you, and a record of your plan, of the credits you use and of the emails we send you.

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, as well as to communicate with you. In particular, we use it to generate your podcasts, show notes, cover images and assistant answers, to keep your podcasts in your library and show the ones you make public, to check the text of an episode before it becomes public, to apply the limits and credits of your plan, to bill your subscription, and to answer your messages. We also email you about your account: a welcome email and four short letters in your first month, a reminder when you leave a checkout unfinished, and a notice when a payment for your subscription fails. Each of these emails, except the payment notice, has a link to unsubscribe.

4. Sharing of Your Information

We do not sell your personal information. These service providers process it for us. OpenAI writes the scripts, titles, descriptions, show notes and assistant answers, and draws the cover images: it receives the text you paste, upload as a file or import from a web page, your messages to the podcast assistant, and your cover image prompts. With each message to the podcast assistant, each show notes request and each cover image prompt, it also receives your account ID. OpenAI also checks the title, description and script of an episode before the episode becomes public. ElevenLabs reads each line of the script aloud. When you play a voice sample, your browser loads it directly from ElevenLabs or from its storage at Google Cloud. Stripe takes payments: it receives your email address, your account ID, and the billing address and payment details that you enter at checkout. Supabase runs sign-in and our database: it stores your account details, your intended use, your plan, the credits you use, your podcast titles and descriptions, your show notes, a record of the emails we send you, and your email address if you unsubscribe from them. Cloudflare hosts the site. To finish a podcast or show notes after you leave the page, it keeps the request and its result, with your text and your session, while the work runs and for up to 1 day after it ends. Cloudflare R2 stores your audio files, transcripts and cover images. Anyone who has the web address of one of these files can open it, also when the podcast is private. Since 29 October 2026, each new file gets an address with a random part that is hard to guess. The audio files and transcripts of older podcasts have addresses made only from the time they were created, so they are easier to find. Google signs you in when you choose Sign in with Google and gives us your name, email address and profile picture. Resend delivers the emails we send you: it receives your email address, your first name, your account ID and the text of each email, which can include your plan, an amount to pay and a payment link. Cloudflare Turnstile and Resend also handle the contact form, as the next paragraph explains, and the section Cookies and Analytics describes PostHog, the Google Ads tag and Sentry. These providers can process your data outside your country, including in the United States.

Our contact form uses Cloudflare Turnstile to check that a person, not a bot, sends the message. Turnstile processes technical data from your browser and device, such as your IP address, but not the text you enter in the form. When you send a message, Resend delivers your name, email address, subject and message to our inbox, so that we can reply to you.

Our sign-in, sign-up and password reset forms also use Cloudflare Turnstile, to stop bots from making us send email or from guessing passwords. Turnstile processes the same technical data, but not your email address or password.

5. Your Rights

You have the right to access, correct, or delete your personal information, to restrict or object to its processing, and to receive the information that you gave us in a structured, machine-readable format (data portability). Where we process your information based on your consent, you can withdraw your consent at any time. The withdrawal does not affect the lawfulness of the processing before it. Please contact us to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you believe an infringement took place.

6. Cookies and Analytics

We use a few cookies and similar technologies. Some are needed for the site to work. Others help us understand how visitors use the site and measure our ads, and these depend on your choice.

Necessary: sign-in cookies keep you signed in, and the cookie_consent cookie keeps your choice below for one year. They are always on.

Analytics: PostHog records the pages you visit, the buttons you use and a recording of your session, with all page text, form fields, images and audio hidden. When you are signed in, it links this data to your account ID and email address. The data passes through e.aideaflowpodcast.com and is stored by PostHog in the United States.

Advertising: the Google Ads tag tells us when a visit from one of our ads leads to a sign-up. We do not use it to show you ads based on your visits.

In the European Economic Area, the United Kingdom and Switzerland, and when we cannot tell where you are, analytics cookies and the Google Ads tag run only after you select Accept. Elsewhere they are on by default, and you can turn them off below. If your browser sends the Global Privacy Control signal, we treat it as a refusal in every region until you select Accept cookies below.

If you decline, PostHog makes no session recording, and the Google Ads tag no longer loads when you come back or reload the page. If the tag has already loaded, it stops using cookies at once; cookies it set before stay until they expire or you delete them. PostHog still counts anonymous page views, clicks and steps such as a sign-up, a started checkout or a failed generation, without cookies: it keeps only your choice in your browser's local storage, and it tells visits apart by a hash of your IP address and browser that changes every day.

When you generate a podcast or a cover image, or start a subscription, our server reports that event to PostHog with your account ID, whatever your cookie choice, so we can see which features are used. Sentry receives error reports with the page and browser involved, so we can fix problems.

You can change your choice at any time:

You have not chosen yet. Until you do, these cookies are on, except in the European Economic Area, the United Kingdom and Switzerland, when we cannot tell where you are, and when your browser sends the Global Privacy Control signal.

For more information about our privacy practices, please contact us.

Return to Home