Privacy Policy

Podventory (“we”, “us”) helps you discover and listen to podcasts on the web and in our mobile apps. This policy explains what personal data we process, why, where it is stored, and your rights under the GDPR and applicable Nordic data-protection laws.

Data controller and contact

Podventory is the data controller for personal data described here. For privacy enquiries and to exercise your rights, contact our data protection contact at info@podventory.com.

Personal data we process

Depending on how you use Podventory, we may process:

• Account information — when you sign in with Google or Apple: email address, sign-in provider, and synced library, progress, queue, and preferences.
• Library and preferences on your device — followed shows, likes, queue, listening history, theme, and settings stored in your browser or app (local storage).
• Usage and analytics data — if you consent, aggregated page views and events via Vercel Analytics and, when configured, Google Analytics.
• Technical data — IP address, browser or app type, device information, and server logs for security, abuse prevention, and operations.
• Search and catalog queries — when you search or browse, requests are processed against our catalog database to return results.

Where podcast data comes from

Podcast metadata and episode information are obtained from publicly available RSS feeds and related open catalog sources. We do not host podcast audio files; playback streams from publishers’ own URLs.

Purposes and legal bases

• Providing the service (Art. 6(1)(b) GDPR) — delivering search, discovery, playback, and saving your preferences.
• Analytics (Art. 6(1)(a) GDPR) — measuring traffic and improving Podventory, only after your consent.
• Security and operations (Art. 6(1)(f) GDPR) — protecting the service, debugging errors, and maintaining infrastructure.

Hosting and processors

Our website is hosted on Vercel (frontend, edge, and analytics when consented). Our catalog database and related backend services run on Supabase (PostgreSQL and storage). Error monitoring may use Sentry. These providers process data on our behalf under data-processing agreements where required.

Local storage vs server data

When you browse as a guest, your library, progress, queue, and preferences are stored locally on your device. When you sign in, we also store synced listening data and preferences in Supabase (EU-hosted PostgreSQL). Catalog, search, and operational data are processed on Supabase and Vercel.

Cookies

We use essential cookies and local storage as described in our Cookie Policy. Analytics cookies or similar technologies are used only with your consent.

Retention

• Local library and preference data — kept on your device until you clear site data or uninstall the app.
• Synced account data — deleted when you delete your account from Account settings, or when you ask us to erase your data.
• Analytics — retained according to Vercel and Google’s policies, typically in aggregated form for a limited period.
• Server and security logs — kept for a limited period necessary for security and troubleshooting.
• Catalog metadata — retained while the show remains in our index or as needed to operate the service.

Sharing

We do not sell your personal data. We share data with infrastructure providers (Vercel, Supabase, Sentry, and analytics providers if consented) only as needed to run Podventory, and when required by law.

International transfers

Some providers may process data outside the EU/EEA (for example in the United States). Where this occurs, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and provider commitments.

Your rights

If you are in the EU, EEA, or UK, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase data (“right to be forgotten”) where applicable.
• Receive data you provided in a portable format where applicable.
• Restrict processing in certain cases.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for consent-based processing (such as analytics).
• Lodge a complaint with your supervisory authority (for example IMY in Sweden, Datatilsynet in Norway, Datatilsynet in Denmark, or Tietosuojavaltuutettu in Finland).

To exercise these rights, email info@podventory.com. We respond within one month unless the request is complex.

Children

Podventory is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data.

Changes

We may update this policy. Material changes will be reflected on this page with a new “last updated” date.

Contact

Questions about privacy: info@podventory.com.