Ninacast's Privacy Policy

Welcome to Ninacast

In Short: We collect account, content, usage, and device data needed to run Ninacast. We also share data with service providers that handle authentication, AI features, analytics, and media storage. We use cookies and browser storage to operate the app and remember your preferences.

Thank you for choosing to be part of our community at mZork ("Company," "we," "us," or "our"). This privacy notice explains what data we collect, how we use it, and the choices available to you when you use Ninacast, including the ninacast.com website and related services.

If you have questions or concerns about this privacy notice or our data practices, please contact us at [email protected].

This privacy notice applies if you:

• Visit our website at https://ninacast.com
• Create an account, upload media, edit feeds, or use our AI-powered podcast tools
• Engage with us in other related ways, including support, marketing, or events

Please read this privacy notice carefully so you understand what we collect, how we use it, and who processes it with us.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

In Short: We collect information you provide to us, information generated when you use Ninacast, and certain device, browser, and analytics data.

The information we collect depends on the features you use. It may include:

• Account and profile data. If you sign up or sign in, we collect account information such as your email address, display name, profile image, Clerk user ID, and related authentication metadata.
• Podcast and workspace content. We collect podcast feed data, episode titles, descriptions, subtitles, transcripts, prompts, XML, uploaded audio, artwork, editor images, avatars, and other content you create, upload, or store through Ninacast. Depending on the feature and your publishing choices, some uploaded podcast media or website assets may be served from public URLs.
• AI inputs and outputs. When you use transcription, metadata extraction, summarization, editing, description generation, or cover art features, the prompts, files, transcripts, and outputs involved in that feature are processed by us and the applicable AI provider.
• User-provided API keys. If you provide your own OpenAI or Anthropic API key, we store that key in our database and use it to make requests on your behalf.
• Payment and billing data. If you subscribe to a paid plan, Stripe collects and processes your payment card details, billing address, and transaction history on our behalf. Ninacast does not directly store your full card number. Stripe may share limited billing metadata (such as subscription status, plan type, and last four digits of your card) with us so we can manage your account.
• Usage, device, and diagnostics data. We and our analytics providers may collect IP address, browser type, device characteristics, referring URLs, pages viewed, feature usage, timestamps, and error or exception data.
• Browser storage data. We store some information on your device using localStorage, cookies, and similar browser storage as described below.

2. HOW DO WE USE YOUR INFORMATION?

In Short: We use your information to authenticate you, provide the product, run AI features, store media, understand product usage, and meet legal and security obligations.

• To create and manage your account and keep you signed in.
• To store, sync, export, publish, and otherwise operate your podcast feeds, episodes, media, and profile.
• To process AI-assisted features such as transcription, metadata extraction, description generation, summarization, content editing, and cover art generation.
• To remember your preferences, browser-side feed data, draft state, cookie choices, and related settings.
• To analyze product usage, diagnose problems, monitor performance, and improve the service.
• To process subscription billing and payments through Stripe, manage your plan, and provide access to the Stripe Customer Portal for self-service billing management.
• To respond to support requests, account issues, feedback, and other inquiries.
• To protect the security and integrity of Ninacast and to comply with law, legal process, or lawful requests.

3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

In Short: We share information with service providers and processors that help us run Ninacast, and when required for legal, security, or business transfer reasons.

We may share information with the following processors and service providers:

We may also disclose information if required by law, to protect our rights or the security of our users, or in connection with a merger, acquisition, financing, or sale of assets.

AI data processing and user-provided API keys

When you use AI features, the content you submit is sent to the provider needed to complete that feature. For example, audio files may be sent to OpenAI for transcription, episode text and prompts may be sent to OpenAI or Anthropic for metadata extraction or writing assistance, and podcast titles or descriptions may be sent to Google Gemini for cover art generation.

If you provide your own OpenAI or Anthropic API key, we store that key in our database so we can make API calls on your behalf. Those keys remain stored until you remove or replace them, or until your account is deleted. We do not expose raw stored API keys in normal profile API responses.

Data sent to OpenAI, Anthropic, Google, or other processors is also subject to those providers' own terms, privacy notices, and retention practices. Those providers may retain prompts, files, outputs, and related metadata for logging, abuse prevention, security, or service improvement purposes according to their policies and your configured settings, and we do not control those third-party retention periods.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes. We use cookies, localStorage, consent state, and similar technologies to run the service and support analytics and marketing choices.

Ninacast uses a cookie consent manager. Necessary cookies and similar technologies support authentication, security, navigation, and core product functions. Your cookie preferences are stored in browser storage and in a consent cookie so we can remember your choice.

If you opt in, Google Analytics and Google Tag Manager may collect browsing and campaign measurement data. We also use PostHog for product analytics and diagnostics, and Plausible for website analytics, as described in Section 3.

5. WHAT DO WE STORE IN LOCAL STORAGE OR OTHER BROWSER STORAGE?

In Short: We store some information directly on your device so the product can work smoothly and remember your choices.

Examples include:

• Feed data, feed selection, feed summaries, snippet analysis caches, and sync-related state.
• Create-flow drafts, cover art generation options, guest cache data, transcription language choices, and XML formatting preferences.
• Cookie preferences, locale preferences, sidebar or UI preferences, and guest-banner dismissal state.
• Temporary browser storage used to monitor or recover from storage quota issues and other client-side app state.

Browser storage stays on your device until you clear it, we remove it, or your browser purges it according to its own rules.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep information for as long as needed to provide the service, maintain security, comply with law, and resolve disputes.

• Account and profile information is generally kept while your account is active and for a reasonable period afterward as needed for legal, security, backup, or operational reasons.
• Feed data, transcripts, prompts, media, and related app content are generally kept until you delete them, delete your account, or we no longer need them to provide the service.
• User-provided OpenAI and Anthropic API keys remain stored until you remove them, replace them, or delete your account.
• Browser storage remains on your device until cleared by you, removed by the app, or purged by the browser.
• Third-party processors may keep data under their own retention schedules and policies, which may differ from ours.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use reasonable technical and organizational measures to protect personal information, but no system is perfectly secure.

We work to protect personal information through access controls, authentication, infrastructure safeguards, and operational practices. However, no electronic transmission or storage system can be guaranteed to be 100% secure, so you use the service at your own risk.

8. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on where you live, you may have rights to access, correct, delete, or object to certain uses of your personal information, or to request data portability.

You can also manage some information directly through your account, browser storage, cookie preferences, or by contacting us at [email protected].

9. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. California residents may have rights to know, access, correct, delete, and limit certain processing of their personal information, subject to applicable exceptions.

CCPA Privacy Notice

We have collected the following categories of personal information in the past twelve (12) months:

We do not sell personal information for money. We do disclose personal information to processors and service providers that help us operate Ninacast, as described in Section 3.

To exercise California privacy rights, contact us at [email protected]. We may need to verify your identity before completing your request.

10. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes. We may update this privacy notice from time to time to reflect product, legal, or operational changes.

When we update this notice, we will revise the last updated date at the top of the page. Material changes may also be highlighted in the product or on our website.

11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at [email protected] or by post to:

mZork, United States

12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on applicable law, you may have the right to request access to, correction of, or deletion of personal information we hold about you. You can contact us at [email protected] or visit https://ninacast.com/delete to request account deletion.