Privacy Policy

ValleyCast AI, Inc. ("ValleyCast," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered podcast generation platform (the "Service"). This policy applies to all users of ValleyCast AI, including visitors to our website and registered account holders. By using the Service, you consent to the data practices described in this policy. If you have questions or concerns about this policy, please contact us at privacy@valleycast.ai.

We collect information in three primary ways: Information You Provide Directly: - Account registration details (name, email address, password) - Billing information (processed and stored by Stripe; we do not store full card numbers) - Content you input into the Service (topic descriptions, talking points, scripts) - Communications you send to our support team Information Collected Automatically: - Usage data (features accessed, episodes created, time spent on platform) - Device and browser information (IP address, browser type, operating system) - Log data (server requests, error reports, timestamps) - Cookies and similar tracking technologies (see Section 7) Information from Third Parties: - If you connect third-party services (e.g., podcast platforms), we receive data from those integrations - Authentication providers if you use social sign-in - Analytics providers (anonymized and aggregated)

We use the information we collect to: Service Delivery: - Provide, operate, and maintain the ValleyCast AI platform - Process your podcast generation requests and deliver outputs - Manage your account and subscription - Process payments through Stripe Product Improvement: - Analyze usage patterns to improve features and user experience - Train and improve our AI models using anonymized, aggregated data - Conduct research on platform performance and reliability - Fix bugs and troubleshoot issues Communication: - Send transactional emails (account confirmations, billing receipts, episode completion notifications) - Provide customer support responses - Send product updates and feature announcements (with opt-out option) Legal and Security: - Comply with applicable laws and regulations - Detect, prevent, and respond to fraud, abuse, and security threats - Enforce our Terms of Service

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances: Service Providers: We work with trusted third-party vendors who assist in delivering the Service, including: - Stripe (payment processing) — subject to Stripe's Privacy Policy - Supabase (database hosting) — subject to Supabase's Data Processing Agreement - Vercel (infrastructure) — subject to Vercel's Privacy Policy - Analytics providers (anonymized data only) All service providers are contractually obligated to handle your data according to this policy and applicable law. Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on the Service. With Your Consent: We may share your information for any other purpose with your explicit consent.

When you use ValleyCast AI to generate podcast episodes, you provide input data (topics, talking points, preferences) that our AI models process to produce audio content. Here is how that data is handled: Processing: Your input is sent to our servers for processing. The AI generation process is computationally intensive and requires cloud infrastructure. Storage: Generated episodes and associated metadata are stored in your account and accessible only to you (and, where applicable, your team members). Model Training: We may use anonymized, aggregated patterns from usage data to improve our AI models. We do not use your specific content inputs or generated episodes to train models in a way that would expose your data to other users. Deletion: When you delete an episode or close your account, your content is permanently removed from our servers within 30 days, except where retention is required by law.

We retain your personal information for as long as necessary to: - Maintain your active account and provide the Service - Comply with legal obligations and resolve disputes - Enforce our agreements Account data is retained for the duration of your account's existence. If you close your account, we will delete your personal data within 30 days, except for data we are required to retain for legal, tax, or fraud prevention purposes (typically 7 years for financial records). You may request deletion of your data at any time by contacting privacy@valleycast.ai.

We use cookies and similar technologies to: - Keep you logged in between sessions (essential cookies) - Remember your preferences (functional cookies) - Analyze how the Service is used to improve it (analytics cookies) Essential cookies are necessary for the Service to function and cannot be disabled. You may disable analytics cookies through our cookie settings or your browser settings, though this may affect some Service functionality. We do not use cookies for targeted advertising or sell cookie data to third parties.

Depending on your location, you may have the following rights regarding your personal data: - Access: Request a copy of the personal data we hold about you - Correction: Request correction of inaccurate or incomplete data - Deletion: Request deletion of your personal data ("right to be forgotten") - Portability: Request your data in a portable, machine-readable format - Objection: Object to certain types of data processing - Restriction: Request that we limit how we process your data California Residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information (we do not sell personal information). EU/UK Residents (GDPR): You have the rights listed above, plus the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email privacy@valleycast.ai. We will respond within 30 days.

We implement technical and organizational measures to protect your personal information, including: - Encryption of data in transit (TLS 1.3) and at rest (AES-256) - Role-based access controls and principle of least privilege - Regular security audits and penetration testing - Incident response procedures with breach notification No method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately at privacy@valleycast.ai and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will: - Post the updated policy on this page with a new "Last Updated" date - Send a notification to your registered email address - Display a prominent notice within the Service for 30 days Your continued use of the Service after such notice constitutes your acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or your personal data: ValleyCast AI, Inc. Attn: Privacy Team 548 Market Street, PMB 12345 San Francisco, CA 94104 Email: privacy@valleycast.ai Response time: Within 5 business days For urgent security concerns: security@valleycast.ai Last updated: May 1, 2025