Privacy Policy
Your privacy is important to us. This policy explains what information Tourbillon Labs Pty Ltd collects when you use Podbite, how it is used, and what choices you have.
Information We Collect
Account information
When you create an account, we collect your email address and, if you choose to set one, a display name, username, and short biography. Authentication is handled by Clerk — we do not store your password. If you set a public profile, your display name, username, and biography will be publicly visible.
Content you create
Bites, playlists, and captions you create are stored in our database and, where you make them public, are accessible to anyone. See the Terms of Service for what happens to this content if your account is closed.
Playback analytics
When a bite is played — on a Podbite page, in an embedded player on a third-party website, or via the Podbite app — we record an event that includes:
- A session identifier (not linked to any registered user)
- How much of the bite was listened to
- The source of the play (page, embed, or playlist)
- The approximate country of the listener, derived from their IP address
- The referring website and, for embedded players, the domain hosting the embed
This data is collected to provide bite creators with analytics about how their content is performing. It is not used to track individual listeners across the web. IP addresses are not stored directly — only a derived country code.
Subscription and payment information
Subscription management and payment processing are handled by Stripe. We store a Stripe customer identifier linked to your account. We do not store card numbers or payment details — these go directly to Stripe. For more information, see Stripe's privacy policy.
How We Use Your Information
- To provide and operate the Podbite service
- To show bite creators analytics about plays on their content
- To process subscription payments via Stripe
- To send transactional emails (account confirmation, subscription receipts) — not marketing emails unless you opt in
- To send waitlist and early-access communications to users who have opted in
- To monitor application errors and performance so we can fix problems quickly
- To understand how the product is used in aggregate so we can improve it
- To investigate abuse reports and enforce these terms
We do not sell personal data. We do not share it with third parties except as described in this policy or as required by law.
Third-Party Services
| Service | Purpose | Privacy policy |
|---|---|---|
| Clerk | Authentication and user management | clerk.com/privacy |
| Stripe | Payment processing and subscription management | stripe.com/privacy |
| Supabase | Database and file storage | supabase.com/privacy |
| Netlify | Web hosting | netlify.com/privacy |
| Cloudflare Turnstile | Bot protection on the waitlist form | cloudflare.com/privacypolicy · Turnstile Privacy Addendum |
| Loops | Waitlist and early-access email communications | loops.so/privacy |
| Resend | Transactional email delivery | resend.com/privacy |
| PostHog | Product analytics (aggregate, anonymised) | posthog.com/privacy |
| Sentry | Application error monitoring | sentry.io/privacy |
| Logflare | Application log aggregation | logflare.app/privacy |
Cloudflare Turnstile analyses passive browser signals (such as device and browser characteristics) to distinguish human visitors from bots. No CAPTCHA challenge is presented to the user. No personal data collected by Turnstile is shared with Podbite.
PostHog is configured without session recording or individual user tracking. Events captured include page views, feature interactions, and conversion events (e.g. waitlist submission). These are used in aggregate to understand product usage — not to build individual profiles.
Podcast audio is served directly from the podcast's original hosting provider — Podbite does not proxy or store audio.
Your Rights
Depending on where you are located, you may have rights regarding your personal data, including:
- Access: request a copy of the personal data we hold about you
- Portability: download your content and account data in a structured format from your account settings page
- Correction: update your profile information at any time from your account settings page
- Erasure: request deletion of your account and personal data by contacting us or closing your account from your account settings page
Regarding erasure: closing your account removes your profile, playlists, and personal information. Bites you have created are retained as unattributed records to preserve embedded players on third-party websites — see the Terms of Service for a full explanation. Personal comments you have added to bites are deleted. If you wish to request removal of bite captions as part of a formal erasure request, please contact us and we will respond within 30 days.
For EU users, our processing of personal data is based on the performance of our contract with you (providing the service) and, for analytics data, our legitimate interest in helping creators understand how their content performs.
Data Retention
We retain your account information for as long as your account is active. Playback analytics are retained indefinitely to support historical reporting for bite creators. If your account is closed, analytics events associated with your bites are retained in anonymised form (your account link is removed, events are associated only with the orphaned bite record).
Security
We use industry-standard practices to protect your data, including encryption in transit (HTTPS), encrypted storage, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Contact
For privacy-related questions or requests, contact us at hello@podbite.link.
This policy is effective as of 21 May, 2026. The previous version was effective from 20 May, 2026.
Published Monday 1 August 2022