Privacy Policy
Heartcaster is operated by Infinite Logic, PBC. ("we", "us"). This policy describes what personal information we collect when you use Heartcaster, how we use it, who we share it with, how long we keep it, and the rights you have over it.
Information we collect
Account and authentication
- Passkey identifier: a UUID issued by our authentication provider, AuthGravity. We never see or store your passkey itself.
- Email address that you optionally provide, used to identify you in invitations and as the sender name on outgoing invites.
Heartcast (workspace) data
- Heartcast name, notification email recipients, and other settings you enter.
- Buzzsprout API credentials you provide for publishing — stored encrypted at rest, used only to upload episodes to your Buzzsprout account.
- Membership records linking users to heartcasts.
Zoom integration
- OAuth access and refresh tokens for your connected Zoom account, used only to fetch cloud recording files when Zoom notifies us of a completed recording.
- Cloud recording audio and transcript files downloaded from Zoom, stored in our object storage for the lifetime of the corresponding episode record.
- Meeting metadata (meeting id, uuid, start time, recording-file ids) needed to match audio with transcripts.
Billing
- Stripe customer and subscription identifiers for your heartcast. Payment card details are handled exclusively by Stripe; we never see or store them.
Operational logs
Standard request logs (IP address, user agent, timestamp, path) are kept by Cloudflare for a short period for security and reliability purposes.
How we use information
- To provide the service: receiving Zoom recordings, generating draft titles and descriptions, delivering review emails, and publishing to your Buzzsprout account.
- To send you transactional notifications (an episode is ready for review; subscription changes).
- To process payments via Stripe.
- To respond to support requests.
- To diagnose errors and improve the service.
We do not sell your personal information, use it for advertising, or share it for marketing purposes.
Who we share information with
We share information only with the subprocessors required to run the service:
- Cloudflare — hosting, database (D1), object storage (R2), email sending, AI inference for transcript title generation.
- AuthGravity — passkey authentication.
- Stripe — payment processing.
- Zoom — to receive cloud recordings, governed by the permissions you grant when you install our Marketplace app.
- Buzzsprout — to publish episodes you choose to publish, governed by your own Buzzsprout account.
How long we keep data
- Account, heartcast, episode, and Zoom-installation records remain while your account is active.
- You may request deletion at any time (see "Your rights" below). On deletion we remove your records from our database and object storage within 30 days, except where law requires retention.
- Cancelled Stripe subscriptions keep customer records as required for tax and accounting purposes.
Your rights
Depending on your jurisdiction (including the EEA/UK under GDPR, California under CCPA/CPRA, and similar regimes), you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information ("right to be forgotten").
- Export a portable copy of your data.
- Object to or restrict certain processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@heartcaster.com. We will respond within 30 days. We will not discriminate against you for exercising these rights.
International data transfers
Our infrastructure is operated by Cloudflare across globally distributed regions. When we transfer personal data across borders we rely on appropriate safeguards, including Standard Contractual Clauses where required.
Children
Heartcaster is not intended for users under 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. We will post the revised version here and update the "Last updated" date. Material changes will be communicated by email or in-app notice.
Contact
Questions about this policy: privacy@heartcaster.com