Privacy Policy

At PodPad, privacy isn't a feature - it's our foundation. This Privacy Policy explains how we handle your information with the respect it deserves.

Information We Collect

For Guest Users

When you use PodPad as a guest, we collect:

• Guest ID: An anonymous UUID stored in an HttpOnly cookie to track your active guest PodPad
• Content: The code or text you paste (temporarily stored until expiration)

We do NOT collect your IP address, browser fingerprint, or any personally identifiable information for guest users.

For Registered Users

When you create an account, we collect:

• Email address: For account authentication and password recovery
• Username: For account identification
• Password: Securely hashed using bcrypt (we never see or store your actual password)
• Content: The PodPads you create

For Pro Subscribers

In addition to the above, we process:

• Payment information: Processed by PayU payment gateway - we never see or store your card/UPI details
• Transaction records: Order IDs and payment status for subscription management

Information We DON'T Collect

Unlike most services, we explicitly do NOT collect:

• IP addresses (not logged or stored)
• Browser fingerprints
• Device identifiers
• Location data
• Browsing history
• Third-party cookies
• Analytics or tracking data
• Social media profiles

How We Use Your Information

We use your information solely to:

• Provide and maintain the PodPad service
• Authenticate your account access
• Process subscription payments (via PayU)
• Send password recovery emails (when you request them)
• Enforce our Terms of Service

We do NOT use your information for:

• Advertising or marketing
• Profiling or behavioral analysis
• Selling to third parties
• Any purpose other than providing the service

Information Sharing

We do not sell, rent, or share your personal information with third parties.

The only exceptions are:

• PayU: Payment information for Pro subscriptions (processed directly by PayU, not stored by us)
• Legal requirements: If required by law or valid legal process

Data Retention & Deletion

Automatic Deletion

• Guest PodPads: Permanently deleted after 3 hours — no recovery.
• Free User PodPads: Permanently deleted after expiry (3 hours maximum) — no recovery.
• Pro PodPads: Never auto-deleted. After expiry they become inactive and stay in your dashboard for reactivation. Permanently deleted only on your manual request.
• View-count expiry: Permanently deleted after reaching the view limit you set (Pro feature).

Manual Deletion

• You can delete any PodPad at any time
• You can delete your entire account from settings
• Account deletion removes all your data permanently

What We Keep

• Usage metadata: When a PodPad or Short URL is deleted or expires, we archive anonymized metadata (pad type, block count, size, whether a password was set, timestamps) linked to your account for your personal usage history and platform analytics. No content is ever stored in these records.
• Payment records: Transaction IDs and subscription status as required for billing management — no card, UPI, or payment credentials are ever stored by us.

Security Measures

We protect your data with:

• Password hashing: bcrypt with appropriate cost factor
• HTTPS: All connections are encrypted
• Secure cookies: HttpOnly and Secure flags
• CSRF protection: All forms protected against cross-site request forgery
• SQL injection prevention: Prepared statements for all database queries
• XSS protection: Output escaping and Content Security Policy

Cookies

We use minimal, essential cookies only:

• Session cookie: To maintain your login session
• Guest ID cookie: To track guest PodPads (HttpOnly, not accessible to JavaScript)
• CSRF token: Security token to prevent cross-site attacks

We do NOT use:

• Third-party cookies
• Tracking cookies
• Advertising cookies
• Analytics cookies

Your Rights

You have the right to:

• Access: View all data associated with your account
• Correction: Update your account information
• Deletion: Delete your account and all associated data
• Portability: Export your PodPads (copy function available)
• Objection: Contact us with any privacy concerns

Children's Privacy

PodPad is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

International Users

Our servers are located in India. By using PodPad, you consent to the transfer and processing of your information in India, in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting a notice on our website
• Updating the "Last updated" date at the top

Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: support@podpad.in