Privacy Policy
Effective date: October 9, 2026
1. Who we are
PM3K is operated by Nnamdi Okorafor. This policy explains what personal data we collect, why we collect it, and the rights you have over it.
2. Data we collect
Data you provide:
- Account data: email address and name. Passwords, if used, are stored only as a salted hash — never in plaintext.
- Your Content: the recordings you upload, their transcripts, show notes, and any guest or contact information you enter.
Data collected automatically:
- Usage data: which features you use, request timestamps, and error logs.
- Technical data: IP address, browser type, and device type, used for security and abuse prevention.
We do not sell your personal data.
3. How we use data
- To provide and operate the Service (transcription, editing, mastering, storage, publishing).
- To authenticate you and secure your account.
- To communicate with you about your account and the Service.
- To detect and prevent fraud and abuse.
4. Legal bases (GDPR)
Where the GDPR applies, we process personal data on the basis of: performance of a contract (providing the Service you requested); legitimate interests (security, fraud prevention, service improvement); and consent (where required, e.g. marketing — which you may withdraw).
5. AI processing & sub-processors
We use third-party sub-processors to operate the Service:
| Purpose | Provider | Data involved |
|---|---|---|
| Hosting, database, storage, compute | Cloudflare (Workers, D1, R2, Pages) | Account, content, usage |
| AI transcription / editing / notes | DeepSeek / OpenRouter | Uploaded audio + transcripts |
| Social scheduling (optional) | Postiz | Approved episode assets |
| Sign-in (optional) | Name, email |
Where AI models are used, content is processed solely to provide the feature and is not used to train third-party models unless a provider's terms state otherwise.
6. Data retention
- Account data is retained while your account is active, then deleted within 90 days of termination.
- Your Content is retained while your account is active. You may delete it at any time; deleted content is removed from primary storage within 30 days.
7. Data security
Passwords and API keys are stored only as cryptographic hashes. Data in transit is encrypted (TLS); data at rest is encrypted by our cloud provider.
8. Your rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; to object to or restrict certain processing; to export your data (portability); and to lodge a complaint with a supervisory authority.
To exercise any right, contact [email protected].
9. Children
The Service is not directed at children under 13, and we do not knowingly collect their data.
10. International transfers
Data is stored in the United States (Cloudflare's infrastructure). Where data is transferred from the EEA/UK, we rely on appropriate safeguards, including Standard Contractual Clauses with our sub-processors.
11. Changes
We will post changes to this policy and, for material changes, notify you by email or in-product notice.
12. Contact
Nnamdi Okorafor · St. Petersburg, FL · [email protected]