This explains what Podvidi knows about you, why, who else sees it, and how to make us stop.
Consultant Infonuagique Inc., a corporation continued under the laws of Ontario, Canada, is responsible for the personal data described here. Write to support@podvidi.com about anything on this page.
Your account. Your email address, your name, the language you prefer, and a phone number if you give us one. Your password is stored only as a hash — we cannot read it and neither can anyone who steals the database.
Keeping your account yours. When you sign in we record the time. If you turn on two-factor sign-in we hold the secret your authenticator app needs, your unused backup codes, and the one-time codes we email you, which expire quickly. Sign-in sessions last seven days.
What you record. Audio and video from your sessions, the transcripts we generate from them, the speaker labels attached to them, and anything you type around them — titles, descriptions, chapters, notes. Recordings routinely contain other people. Section 8 is about them.
Bookings and use. The sessions you book, when, for how long, whether you showed up, and how many hours and bytes you have used against your plan.
Signing up, and stopping one person from being a hundred. When an account is created we store a keyed hash of the browser fingerprint, a keyed hash of the IP address, a keyed hash of the user agent, and the network operator (ASN) and country. These are hashes, not the values themselves: they can be matched against another signup, and they cannot be turned back into your address or your device. We use them for one thing — deciding whether a new account is the same person collecting free hours again. Read section 6 for how long they last, because the answer is unusual and deliberate.
Studio enquiries. If you write to us through the walk-in page instead of opening an account, we keep your name, phone number, email if you gave one, what you asked for, and your IP address and browser, so we can answer you and show we answered within the time we promised.
Billing. Your subscription's status and history, and the identifiers PayPal gives us. We never receive your card number, your bank details or your PayPal password.
Legal acceptances. Each time you accept one of our documents we record which document, which version, in which language, when, from which IP address and browser, together with a copy of the text you were shown. The copy exists so that what you agreed to can be produced later exactly as it read that day.
Messages. The emails we send you and whether sending succeeded.
To give you an account and let you back into it; to record, store, transcribe, search and publish your work; to take payment and apply your plan's limits; to answer you; to send the notifications and reminders you have not turned off; to keep the service standing up and to investigate abuse; and to meet our legal obligations. We do not sell personal data, we do not rent it, and we do not run advertising on it.
Cloudflare, Inc. runs essentially all of our infrastructure: the database holding your account and transcripts, the object storage holding your recording masters, the video service holding delivery copies, the servers that carry a live call between you and your guests, the AI models described in section 5, the search index and our operational metrics.
Resend delivers our email — verification, password resets, one-time codes, notifications.
PayPal takes the money. When you subscribe you leave Podvidi for PayPal and deal with them under their terms and their privacy policy.
Meta Platforms, only if you choose it. The walk-in page offers a WhatsApp button. Tapping it opens WhatsApp and hands that conversation to Meta under their terms. Nothing about you goes to Meta unless you tap it.
That is the complete list. If it changes, this page changes with it and gets a new version number.
Transcription runs on Cloudflare Workers AI using Whisper. Search works by turning your transcripts into embeddings with a Cloudflare model. The in-app assistant sends the question you typed, plus which screen you were on and your interface language, to a Llama model on Cloudflare Workers AI — it is not sent your recordings, your transcripts or your account details.
All three run inside Cloudflare's platform. Your audio is not sent to a separate AI company, and neither Cloudflare nor we use your recordings or transcripts to train models.
No automated decision here has a legal effect on you. The signup check in section 2 can withhold a free hour until a person looks at it; it can never take an account, a payment or a recording away from you, and it does not apply to paying workspaces at all.
Your recordings and transcripts stay as long as your account does. We keep the master copy of every recording; a second, faster copy is made for delivery and is removed about a week after the session once we have confirmed byte for byte that the master is intact — the master itself is never removed by that process.
Your account details stay while the account is open. Records of legal acceptances, invoices and payments are kept afterwards for as long as the law requires us to be able to produce them. Sign-in sessions expire in seven days, one-time codes in minutes.
The signup hashes in section 2 outlive the account on purpose. If closing an account erased them, closing and reopening would be the published way around the free-tier limit, and the control would protect nothing. They are hashes and they are not linked to you once the account is gone.
We are a Canadian company. Cloudflare stores and processes data across a global network, so your data is handled outside Canada and outside Morocco, including in the United States. Our other processors are outside Canada too. We rely on their contractual data-protection commitments for those transfers.
If you record someone, you decide what happens to that recording; we hold it for you. Telling them they are being recorded and getting their agreement is your obligation, not ours — the Content Policy says so and you accepted it.
If you appear in someone's Podvidi recording and want it dealt with, write to support@podvidi.com. We will pass it to the account holder, and we will act ourselves where the recording breaks the Content Policy or the law.
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and withdraw a consent you gave. Ask at support@podvidi.com and we will answer within 30 days.
Deleting your account is a button in the product and it takes effect immediately. It cancels any subscription with the payment provider first, then removes your recordings and their files, then removes your workspace and empties your account of anything personal. You are signed out of every device the moment it completes.
Two honest limits. It does not reach the signup hashes in section 6, for the reason given there. And it does not reach records we are legally required to keep — your acceptance of these documents, and billing history. If you own a shared workspace that other people are still in, we will ask you to hand it over or remove them first, because deleting it would take their recordings with it.
If you think we have handled your data badly, tell us first — but you can complain to the Office of the Privacy Commissioner of Canada, or to the CNDP in Morocco if you dealt with us there.
Traffic is encrypted in transit. Passwords are hashed. The signup signals are hashed with a key that is not in the database. Two-factor sign-in is available and we recommend it. No system is perfect; if a breach affects you, we will tell you and the relevant regulator as the law requires.
Podvidi is not for anyone under 16 and we do not knowingly hold their data. If a child has given us data, write to us and we will remove it. This is about account holders — a child appearing in a recording is covered by section 8, and consent for that comes from their parent or guardian.
If this policy changes we publish a new version on this page with a new date. Where the change materially affects how we handle your data, we will write to the address on your account before it takes effect, rather than treating your silence as agreement.
This is version 1.1 and has not yet been reviewed by a lawyer. Podvidi is run by an Ontario company and operates a studio in Morocco, so PIPEDA and Moroccan law 09-08 both bear on it; have counsel read this before relying on it.