Privacy Policy
Effective: February 24, 2026
Pandocast Inc. (“Pandocast,” “we,” “us,” “our”) operates the Pandocast platform at pandocast.ai. This policy explains how we collect, use, store, and protect your information when you use our service.
1. Information We Collect
Account information: When you create an account, we collect your name, email address, and password. If you sign in via Google or Apple, we receive your name and email from that provider.
Content you provide: We store the content you upload for transformation (blog posts, transcripts, articles, videos) and the generated outputs we create from that content.
Connected platform data: When you connect social media accounts (Twitter/X, LinkedIn, Instagram, YouTube, TikTok), we store OAuth access tokens and refresh tokens in encrypted form to publish content and retrieve analytics on your behalf. We also collect your public profile information (username, display name, follower count) and post-level analytics (impressions, engagements, shares, comments) for posts published through our platform.
Payment information: Payments are processed by Stripe. We store your Stripe customer ID and subscription status but never store credit card numbers, bank account details, or other payment instrument data on our servers.
Usage data: We collect information about how you use the platform, including features accessed, content uploaded, outputs generated, and posts published. We also collect device type, browser type, and IP address for security and analytics purposes.
2. How We Use Your Information
- To provide the Pandocast service: transforming your content, publishing to your connected platforms, and displaying analytics.
- To manage your account and process payments.
- To improve our service based on aggregated, anonymized usage patterns.
- To send transactional emails (account verification, billing, publishing status).
- To detect and prevent fraud, abuse, and security threats.
We do not sell your personal information. We do not use your content to train, fine-tune, or improve any AI or machine learning models — whether ours, our AI providers’, or any third party’s. Your uploaded content is processed through AI services solely to generate outputs for your use. Your content is yours.
3. Third-Party Services
We share data with third parties only as necessary to provide the service:
- Stripe — payment processing.
- Anthropic (Claude AI) — content analysis and generation. Content is sent to Anthropic’s API for processing. We use zero-data-retention API configurations where available, meaning Anthropic does not retain your content after processing. We contractually require that our AI providers do not use your content for model training.
- Google Cloud Platform — infrastructure hosting, data storage, and background job processing.
- Social media platforms (Twitter/X, LinkedIn, Meta/Instagram, YouTube, TikTok) — we access their APIs to publish content and retrieve analytics using your authorized credentials.
We do not share, sell, or provide your personal information or content to data brokers, advertisers, or any other third parties not listed above.
4. Data Storage and Security
Your data is stored on Google Cloud Platform infrastructure in the United States. Social media access tokens are encrypted at rest using AES-256-GCM encryption with keys managed through Google Cloud Secret Manager. We use HTTPS/TLS for all data in transit. Access to production systems is restricted to authorized personnel and is audited.
5. Data Retention
We retain your account data and content for as long as your account is active. If you delete your account, we initiate a 30-day grace period during which your account can be recovered. After 30 days, we permanently delete all your data, including uploaded content, generated outputs, analytics data, encrypted platform tokens, and account information. Anonymized, aggregated analytics (which cannot be linked back to you) may be retained for service improvement.
6. Your Rights
You have the right to:
- Access your data — request a complete export of all data we hold about you.
- Correct your data — update your account information at any time.
- Delete your data — delete your account and all associated data.
- Disconnect platforms — revoke Pandocast’s access to any connected social media account at any time.
- Port your data — export your content and analytics in standard formats.
- Object to processing — where applicable under your local laws.
To exercise these rights, contact us at privacy@pandocast.ai or use the account settings page. We will respond to data rights requests within 30 days.
7. International Users
If you are located in the European Union, European Economic Area, United Kingdom, or other jurisdictions with data protection laws, you may have additional rights under applicable law (such as the GDPR or UK GDPR). We process your data on the basis of: (a) performance of our contract with you (these Terms), (b) your consent (where applicable), and (c) our legitimate interests in providing and improving the Service. You may contact us at privacy@pandocast.ai to exercise any rights under your local data protection laws.
8. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. We may use analytics cookies to understand aggregate usage patterns; these do not identify you personally.
9. Children’s Privacy
Pandocast is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete that information promptly.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notification at least 30 days before the changes take effect. The updated policy will be posted on this page with a revised effective date.
11. Contact
For privacy-related questions or data rights requests:
Email: hello@pandocast.ai
General support: support@pandocast.ai