Security and data
How Podra handles your data
Audio and exports in Cloudflare R2 under a per-workspace prefix; records in Postgres on Render; transcripts encrypted at rest (AES-256-GCM).
What Podra holds
- Uploaded recordings and the voices in them
- Transcripts with speaker names
- Show notes, chapters, clips and titles
- Show details and artwork for the RSS feed
- Team members' names and emails
How long it’s kept, and how to export or delete it
Original uploads are deleted 14 days after processing; masters, edits, transcripts and exports are kept until the episode or workspace is deleted. Sample-page runs are deleted after 24 hours.
The full detail is in Podra’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Cloudflare: private file storage (R2).
- Stripe: subscription and license payments (card details go to Stripe, never to us).
- Resend: sending email.
- OpenAI: transcribing recordings and telling speakers apart.
- Anthropic: drafting chapters, clips, show notes, titles and descriptions from transcripts.
Questions and security reports
Podra is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.