Privacy Policy

Last Updated: September 24, 2026

This Privacy Policy describes how Pushpod.net ("we," "us," or "our") collects, uses, and discloses your personal information when you use our Service (Pushpod.net). We are committed to protecting your privacy and ensuring the security of your personal information. This policy is governed by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Information We Collect

The types of information we collect depend on how you use the Service.

Account Information You Provide:

Registration details: your email address and name when you create an account.
Profile details: the public nickname used in your RSS feed addresses, and any profile information you choose to add.
Communications: if you contact us directly, we collect your name, email address, and the content of your communications.

Sign-In with Google or Microsoft:

You may sign in with a Google or Microsoft account instead of a password. When you do, the identity provider tells us your email address (and basic profile information such as your name), which we use to create your account or match and link the sign-in to your existing PushPod account. We never see your password with those providers.

Cloud Storage Connections:

To generate feeds from your own cloud storage, you connect a storage account from a supported provider (Google Drive, OneDrive, Dropbox, or Box). With your authorization via OAuth, we store the credentials (access and refresh tokens) needed to read that storage on your behalf, along with the connected account's email address and a display label.
Where a provider offers change notifications, we register a subscription with that provider so syncing can happen automatically; these registrations are removed when you disconnect the account or delete your account.
We index the names and metadata of the audio files and folders in the connected storage (file names, folder structure, sizes, durations, and any metadata you write such as titles, descriptions, or artwork). Your audio files themselves are not copied to us — they stay in your cloud storage, and feeds link listeners to them directly.

Payments:

Paid access is processed by Stripe. We store only a reference to the resulting payment; we do not receive or store your card or bank details on PushPod servers.

Information Collected Automatically:

Log data: our servers keep logs of requests (including IP address, browser type, and pages requested) for security and troubleshooting. Provider links are recorded without any embedded credentials.
Feed counters: we count how often your podcasts and feed links are accessed so you can see usage.
Cookies: we use cookies to keep you signed in and for core site functionality. You can control cookies through your browser settings, though the Service requires sign-in cookies to function.
Advertising measurement: our public website carries the Reddit pixel (a script and cookie from Reddit) so we can measure the performance of our own ads — page visits, sign-ups, and purchases. This sends Reddit your IP address and a pseudonymous cookie identifier. You can opt out of ad personalization through your Reddit account settings.

Email preferences:

We store your choice about receiving occasional product update emails, and a token that lets you unsubscribe from those emails from any email footer. Service emails (such as registration confirmation and password reset) are not optional.

2. How We Use Your Information

To provide the Service: create and maintain your account, connect your cloud storage, index your audio file metadata, generate and serve your RSS feeds, and keep content in sync with your storage using provider APIs and change notifications.
To communicate with you: send service emails (registration confirmation, password reset, storage reconnection notices), respond to support requests, and — only with your opt-in — occasional product updates you can unsubscribe from at any time.
To process payments: via Stripe, and to record whether your account has paid access.
To support and secure the Service: debugging, resolving technical issues, preventing abuse, and protecting the Service and its users, including administrative access to accounts for support purposes as described in our Terms of Use.
To comply with legal obligations.

We do not sell your personal information, and we do not use your content or storage data for advertising.

3. How We Disclose Your Information

Cloud storage providers: when you connect a storage account, your provider receives API requests from us authenticated with the tokens you authorized. You can revoke that authorization at any time (and your data can be removed from our systems without affecting your provider account).
Stripe: payment processing. Stripe handles your payment details under its own privacy policy; we retain only a payment reference.
Email delivery: transactional and update emails are sent through an email delivery provider.
Hosting providers: the Service runs on hosted infrastructure.
Feed listeners: anyone you give a feed URL to can access that feed — feed URLs are unlisted (not published anywhere) but are not password-protected, so share them only with people you intend to have access.
Legal authorities: where required by law or legal process, or to protect our rights, property, or safety or that of others.
Business transfers: in the event of a merger or acquisition, with notice in this policy.

4. Data Security

Transport encryption (HTTPS) for traffic to the Service.
Storage credentials are kept server-side and are never embedded in feed contents or logs; provider URLs written to our logs are stripped of any credentials they may contain.
Access to production data by our personnel is limited to authorized personnel and to what is necessary for support and debugging.

However, no method of transmission over the internet, or method of electronic storage, is completely secure. Therefore, we cannot guarantee the absolute security of your personal information.

5. Data Retention and Account Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

You can delete your account yourself at any time from your account settings (this requires typed confirmation). Deleting your account removes your profile information, your podcasts, episodes, feed data, and connected storage accounts and their stored credentials from our systems. As part of deletion we also ask the connected providers to revoke the authorizations you granted us (Google, Dropbox) and remove change-notification subscriptions (OneDrive), and we send a confirmation email to your address as proof of erasure. If you registered with Google or Microsoft sign-in, deleting your PushPod account does not delete your account with those providers.

6. Your Rights and Choices

Access & correction: you can view and correct your account details in your account settings, or contact us.
Erasure: you can delete your account and associated personal information yourself at any time (see Section 5), or contact us to do it for you.
Disconnect storage: you can disconnect any cloud storage account at any time from the Storage page, which stops syncing and triggers removal of provider subscriptions.
Email preferences: you can opt out of product update emails at any time using the unsubscribe link in any such email.
Objection, restriction, portability: you may have additional rights under applicable law; contact us and we will respond within a reasonable timeframe.
Complaint: you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au, if you believe we have violated your privacy rights.

7. International Data Transfers

Your personal information may be processed in countries other than Australia, including by our hosting, email, and payment providers. Where information is transferred, we take appropriate safeguards to ensure it is protected in accordance with this Privacy Policy and applicable law.

8. Children's Privacy

The Service is not intended for children under the age of 13, and we do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe that we have collected personal information from a child under the age of 13, please contact us immediately, and we will take steps to delete that information.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our information practices. If we make any material changes, we will notify you by posting the updated Privacy Policy on our website and/or by other means, as required by applicable law. We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

bradley@pushpod.net