Privacy Policy
Last updated – 28 April 2025
1. Introduction
HotPod (we
, us
, our
) respects your privacy. This Privacy Policy explains what information we collect, why we collect it, how it is used, and the choices you have.
2. Scope
This Policy applies to the HotPod mobile apps, website, APIs, integrations, and all related services we provide (collectively, the Service
). If third-party sites or services are integrated, their policies govern those activities.
3. Information We Collect
- Account Data – name, username, email, password hash.
- Content & Usage – podcasts you follow, comments, messages, listening history, likes.
- Device & Log Data – IP address, browser/OS, language, referring URLs, crash reports.
- Payment Data – subscription status, masked card token (billing details are handled by our payment processor and are not stored on our servers).
- Cookies & Similar Technologies – to remember your preferences, measure traffic, and deliver relevant content.
- Voluntary Info – surveys, beta-feedback, support tickets, promo entries.
4. How We Use Information
- Operate, maintain, and improve the Service.
- Personalise recommendations and discoverability.
- Process payments, send receipts, and manage subscription life-cycle.
- Respond to inquiries and provide customer support.
- Send service-related or marketing communications (opt-out any time).
- Detect, prevent, and address fraud, abuse, or security issues.
- Comply with legal obligations and enforce our Terms.
5. Legal Bases (EEA + UK)
We process your personal data only when a legal basis applies, namely: (i) contract performance, (ii) legitimate interests (e.g., preventing fraud, improving the Service), (iii) consent (for certain marketing cookies), or (iv) compliance with legal obligations.
6. Sharing of Information
We share data only as needed with:
- Cloud hosting & infrastructure providers.
- Analytics services (aggregated, de-identified where possible).
- Payment processors for billing.
- Law-enforcement or regulators when required by applicable law or to protect rights, property, or safety.
- Successor entities in the event of merger, acquisition, or asset sale (you will be notified).
7. International Transfers
We are based in [insert country] and may transfer data to countries that have different data-protection laws. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
8. Data Retention
We keep personal data only as long as necessary for the purposes outlined in this Policy, unless a longer retention period is required by law. Account data is deleted within 30 days of verified account closure, backups within 90 days.
9. Security
We employ industry-standard measures such as end-to-end TLS, encryption at rest, role-based access controls, and regular penetration testing. No system is 100% secure; please protect your credentials.
10. Your Privacy Rights
- Access a copy of your personal data.
- Request correction or deletion.
- Object to or restrict processing.
- Port data to another provider.
- Withdraw consent at any time (for processing based on consent).
- Lodge a complaint with your supervisory authority.
11. Children’s Privacy
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children without verifiable parental consent.
12. Changes to This Policy
We may update this Policy periodically. Material changes will be announced via e-mail or in-app notice at least 14 days before they take effect.
13. Contact Us
Questions or requests? E-mail support@hotpod.ai