Privacy Policy

1. Data Controller

Controller: Artelax Inc.
Contact: [email protected]

2. Information We Collect

• Account Information: When you sign up via Google Sign-In we receive and store your email address. This is the only personal identifier we retain by default.
• Analytics & Usage Data: We collect anonymized analytics data (anonymized IP, device/browser information, usage events) via PostHog. PostHog processes anonymized analytics in Frankfurt, Germany. We configure analytics to avoid collection of personally identifiable information.
• Content You Submit: You may submit YouTube video links for conversion. Converted outputs (AI-generated audio/text) may be held temporarily to deliver playback. Artelax does not retain or store original YouTube video files unless required for service functionality; generated outputs are managed according to retention rules below.
• No Other Personal Data: We do not collect, store, or share profile pictures, usernames, or other Google profile fields unless you explicitly provide them within the app.
• Payment Information: We do not collect, store, or process any payment information or financial data. All in-app purchases are processed securely by Apple (via Apple Pay on iOS) or Google (via Google Play on Android). These platforms handle all payment processing and we only receive confirmation of successful transactions to provision credits to your account.

3. How We Use Information

We use your data for:

• Account creation, authentication, and basic account management;
• Generating AI podcasts and notes from content you choose to convert;
• Sending essential service communications, security alerts, and (if you consent) marketing newsletters and product updates to your registered email;
• Improving and securing our Service using anonymized analytics;
• Complying with legal obligations, including responding to takedown notices and lawful requests.

4. Legal Basis for Processing

We process personal data based on:

• Contract Performance: to provide the Service you requested (account setup and access to features);
• Consent: for optional marketing communications and non-essential cookies/analytics where consent is required; and
• Legitimate Interests: to analyze, improve, and secure our Service using anonymized analytics, while ensuring your rights and freedoms are not overridden.

5. Data Storage & Transfers

All user personal data is stored on secure servers located in the European Union. Analytics data is processed on PostHog servers in Frankfurt, Germany. Where third-party processors are used (e.g., Google for authentication, PostHog for analytics), we use contracts and technical measures to ensure EU-level protections.

6. Security Measures

We implement appropriate technical and organizational measures, including:

• AES-256 encryption for data at rest (including stored emails);
• TLS (HTTPS) for data in transit;
• Strict access controls, logging, and regular security reviews;
• End-to-end encryption for applicable communications and sensitive data flows where feasible.

7. Cookies & Analytics

We use PostHog for anonymized analytics. We do not use advertising cookies or sell personal data. Where cookies or local storage are used for non-essential purposes, we will request consent consistent with applicable laws.

8. Sharing & Disclosure

We do not sell or rent your personal information. We share data only with service providers necessary to operate the Service (e.g., Google for authentication, PostHog for analytics). We may disclose information when required by law or to protect Artelax’s rights, and to comply with valid legal process.

9. Copyright Takedown & Removal

Users are responsible for selecting videos for conversion. If a copyright owner contacts us at [email protected] with a valid claim, we will remove the infringing podcast and all related stored data from our EU servers within 7 days and will block the user/content to prevent re-uploading of the same infringing asset.

10. Retention

We retain personal data only for as long as necessary to provide the Service, comply with legal obligations, or enforce our agreements. If you delete your account or request erasure, we will remove your personal data in accordance with applicable law and our retention rules. Anonymized analytics data may be retained for performance and improvement purposes for up to 2 years.

11. How to Delete Your Account & Request Data Erasure (Guide for App Stores)

App stores such as Google Play and the Apple App Store require a clear guide for users to delete their account and personal data. Below are the methods you can use to remove your account and personal data from Podwist.

Method A — Delete via the Podwist App (Recommended)

1. Open the Podwist app on your device.
2. Go to Me > Settings > Delete Account (or similar).
3. Follow the on-screen prompts to confirm deletion. You may be asked to re-authenticate using Google Sign-In or 2FA to verify your identity.
4. After confirmation, your account will be deactivated immediately. We will remove your personal data from our active systems within 30 days. Please note anonymized analytics and temporary logs may remain in aggregated form and are not personally identifiable.

Method B — Request Deletion by Email

If you cannot access the app or prefer email, send a deletion request to [email protected] using the following template. This is suitable for submissions through App Store / Google Play privacy sections as well.

Subject: Data Deletion Request — [Your Registered Email] Hello Artelax / Podwist team, I request deletion of my Podwist account and all personal data associated with the account registered to this email address: Registered email: [[email protected]] App platform (if applicable): [iOS / Android / Web] Please confirm account deletion and removal of my personal data from your systems. Thank you, [Your Name — optional]

Verification: To protect your privacy, we may ask for additional information or verification (for example, re-authenticating via Google Sign-In) before processing deletion requests. We will only request information necessary to verify identity and will handle any documents securely.

What Happens After You Request Deletion

• Active systems: We will remove your personal data from active systems (user profiles, account records) within 30 days of verifying your request.
• Backups & logs: Copies of your data may persist in backups or logs for a limited time for disaster recovery and fraud prevention; such backups will be purged in accordance with our backup retention schedule (generally within 90 days), unless longer retention is required by law.
• Third-party processors: We do not share any personal data with any third-party provider. All personal data remains solely within Podwist/Artelax systems and is not transferred to external processors for any purpose.
• Exceptions: We may retain limited information where necessary to comply with legal obligations (e.g., tax or accounting records), resolve disputes, prevent fraud, or enforce our agreements. In such cases, we will retain the minimal data required and restrict its use to those purposes.

Additional Notes for App Store / Google Play Users

• If you purchased credits or subscriptions through Apple or Google, deleting your Podwist account does not automatically cancel or refund app-store-managed subscriptions. To cancel subscriptions, please follow Apple or Google Play subscription cancellation procedures in your device settings or the relevant app store.
• If you need assistance with deletion or subscription cancellation, contact [email protected] and include your registered email and platform (iOS/Android/Web).

12. Your Rights

Under GDPR and KVKK you have the right to:

• Access your personal data;
• Request correction of inaccurate data;
• Request deletion (erasure) of your personal data;
• Request restriction of processing;
• Object to processing based on legitimate interest;
• Request data portability;
• Withdraw consent where applicable.

To exercise your rights, contact [email protected]. We will verify requests and respond without undue delay and in any event within 30 days, unless lawfully extended.

12. Communication & Newsletters

We may send you service-related emails and important policy notices to your registered email. With your consent, we may also send newsletters, product updates, and promotional emails. You may opt out of marketing communications at any time via an unsubscribe link in the email or by contacting [email protected].

13. International Complaints & Supervisory Authorities

If you reside in the EU and are not satisfied with our response to a privacy request, you may lodge a complaint with your local data protection authority. In Turkey you may contact the Personal Data Protection Authority (KVKK) at kvkk.gov.tr.

14. Changes to this Policy

We may update this Privacy Policy. Material changes will be communicated to you by email or in-app notice. Continued use of the Service after the change indicates acceptance.

15. Contact

For privacy inquiries, rights requests, or other concerns, contact [email protected].