Showpress Privacy Policy

Who we are and what this covers

This Privacy Policy explains how Pod Bros Media LLC (“Pod Bros Media,” “we”) collects, uses and shares information in Showpress (the “Service”), including our website, the logged-in app and the accounts you connect.

When an agency uses Showpress for its clients, the agency decides what client information goes into the Service, and we process it to provide the Service to that agency. Client users should also read their agency's privacy notice.

Information we collect

• Account information: name, email address, password (stored by our authentication provider as a hash), role and workspace memberships.
• Workspace content: show and episode details, audio and video files, transcripts, artwork, brand kits, notes, onboarding answers, and information about hosts and guests such as names, photos, bios and social handles.
• Connected account data: access tokens and the profile, page, channel and analytics data a connected service returns, described below.
• Billing information: plan, subscription status, and Stripe customer and subscription identifiers. Card details go directly to Stripe; we never see or store full card numbers.
• Usage and device data: log entries, IP address, browser type, pages visited and actions taken, used to run and secure the Service.
• Messages you send us, such as support emails.

How we use information

We use information to:

• provide the Service: store your work, run onboarding, create folders and documents, publish what you schedule, and show analytics;
• generate AI-assisted drafts you request, such as titles, descriptions, captions, transcripts, keyword research and images;
• process payments and manage subscriptions;
• send service emails such as invitations, sign-in links, billing notices and reports;
• secure the Service, prevent abuse and fix problems;
• comply with the law and enforce our Terms.

We do not sell personal information, and we do not use it for third-party advertising.

Google user data (Drive, Docs, Sheets, YouTube)

If you connect a Google account, Showpress uses Google APIs to create and organize folders and files in Google Drive for your shows; create and update Docs and Sheets such as client overviews and reports; upload videos and set titles, descriptions, thumbnails, playlists and visibility on YouTube; read your channel, video and playlist details to confirm where you publish and to show upload status; read your channel's YouTube Analytics reports, such as views, watch time, subscribers gained and lost, likes, comments and shares, audience age, gender and location, traffic sources and search terms, along with the titles, thumbnail links, publish dates and durations of your most-viewed videos, including videos Showpress did not upload, to show analytics to you and your agency on the Analytics pages, video pages and monthly reports; and, if you connect it, manage your Google Business Profile listing.

Showpress uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

From YouTube, Showpress stores your channel's ID, title and profile image, and the details of the videos Showpress uploads for you (such as video IDs, titles, descriptions, chapters, thumbnails, playlists and status). From YouTube Analytics, Showpress also stores your channel's daily statistics, the titles, thumbnail links, publish dates and durations of your most-viewed videos (including videos Showpress did not upload), and the results of the reports it has requested, which can include search terms, audience locations and the titles of videos on other channels that send viewers to yours. We use this data only to run the features you use in Showpress. We share it only with the service providers listed under “Service providers we use” that run those features for us, such as our AI providers when they draft titles and descriptions for your channel, and with destinations you choose, such as your podcast episode or companion article when we add your video's YouTube link, or an app you give a workspace API token. YouTube Analytics data is shown to your agency's team and to the client's own users in Showpress, and appears in the monthly report emails sent to the recipients your workspace chooses. We do not sell YouTube data or use it for advertising, and our providers may use it only to provide their services to us.

Showpress's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you use. We do not use it to develop, improve or train generalized AI or machine-learning models. People at Pod Bros Media read it only with your permission, for security, or as required by law.

You can revoke Showpress's access at any time in your Google Account permissions (myaccount.google.com/permissions) or by disconnecting in Settings. When you disconnect in Settings or ask us to delete your data, we delete the stored tokens and the YouTube API data we hold for that connection within 7 days. If you revoke access only in Google's settings, we stop using the connection once Google rejects it and delete the stored data within 30 days. We refresh or delete other stored YouTube API data, apart from statistics, at least every 30 days: video details and saved report results are refreshed about daily and deleted once they are 30 days old. If we cannot successfully reach YouTube for your channel for 30 days, we delete the stored statistics too.

Google Search Console, Analytics and Tag Manager (client blogs)

If you connect the Showpress Sites app for a client blog, we use a separate Google Cloud OAuth client from Drive and YouTube. Search Console is the first, non-sensitive step: we verify the blog domain, add the Search Console property, submit the sitemap after each post, and read search performance (queries, pages, clicks, impressions and position) to show it next to the blog and as a supplemental signal in keyword research. That first consent does not request Analytics or Tag Manager.

Analytics and Tag Manager are a later opt-in (“Connect Analytics & Tag Manager”) using incremental authorization. That step requests read and edit access to Google Analytics and read, container-edit and publish access to Tag Manager so we can list or create a GA4 property and web data stream for the verified blog, list or create a Tag Manager container, add a GA4 configuration tag with the measurement ID, publish the container, inject the Tag Manager snippet (or a gtag fallback) into pages we publish, and pull daily sessions, users, pageviews, top pages and traffic sources. We store the measurement ID, container public ID, and those daily totals. Tokens stay encrypted. We do not use this data for advertising or to train generalized AI models.

Showpress's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's handling of your data is described in the Google Privacy Policy. You can revoke access in your Google Account permissions (myaccount.google.com/permissions) or by disconnecting Search Console in Settings, which also disconnects Analytics and Tag Manager for that client.

Facebook, Instagram and Threads (Meta)

Facebook Login for Business connects the Pages you choose. Instagram Login connects one Instagram professional (Creator or Business) account per login; personal Instagram profiles cannot be connected. Threads uses Threads Login. We access only what those grants allow, typically:

• your Meta user profile basics needed to identify the connection, such as name and user ID;
• the Facebook Pages you administer and choose: Page identity, roles and the content you manage in Showpress;
• connected Instagram professional accounts: profile, media and publishing;
• connected Threads profiles: profile and media needed to publish and review posts;
• insights and performance metrics for connected Pages, Instagram and Threads accounts.

We use this data only so your team can draft, schedule, publish and review social content and see related analytics in your workspace. Meta access and refresh tokens are encrypted at rest on our servers and are never exposed to the browser.

You can disconnect Facebook, Instagram or Threads in your workspace settings. To ask us to delete Meta-related data, including after removing Showpress from your Meta account, follow the data deletion instructions. Meta may also call our automated data-deletion callback; we return a confirmation code and a status page.

TikTok

If you connect TikTok, we receive your TikTok account's basic profile (open ID, display name and avatar) and an access token. We use them to show which account is connected and to upload the videos you choose, with the privacy and interaction settings you select. Showpress does not add a watermark. You can disconnect TikTok in Settings at any time, which deletes the stored token.

LinkedIn

If you connect LinkedIn, we receive your basic profile and the organization pages you can post for, and use them only to publish the posts you schedule to the profile or page you choose.

Service providers we use

We share information with providers that run parts of the Service for us, only as needed for their role:

• Supabase: database, authentication and file storage
• Vercel: application hosting
• Stripe: payments and subscription billing
• Resend: transactional email
• Transistor: podcast hosting and analytics for shows on the Showpress network
• Metricool: social scheduling and analytics, through the Metricool account your agency connects
• OpenAI and Ollama: AI drafting of text and images
• ElevenLabs: audio transcription
• Serper: search data for keyword research
• Inngest: background job processing
• Google, Meta, TikTok, LinkedIn, WordPress and other services you connect: to perform the actions you request

These providers may process data in the United States and other countries. We require them to protect it and to use it only to provide their services to us.

Other sharing

• With your agency: if you are a client user, the agency that manages your workspace can see and manage it.
• At your instruction: when you publish, the content goes to the platform you chose.
• For legal reasons: to comply with law, enforce our Terms, or protect rights and safety.
• Business transfers: as part of a merger, acquisition or sale of assets, subject to this policy. Google user data moves this way only with your explicit prior consent.

Cookies and local storage

We use essential cookies to keep you signed in and to secure the Service, and browser storage to remember preferences such as appearance. We do not use advertising cookies.

Security

Connected-account tokens are encrypted at rest, data is encrypted in transit, and access is limited by workspace roles. No system is perfectly secure; tell us at nick@podbrosmedia.com if you suspect a problem.

Retention and deletion

We keep information while your account is active. When you disconnect a service we delete its stored tokens. After an account closes, we delete or anonymize workspace data within 30 days of a deletion request, except records we must keep for legal, tax or security reasons. Stripe also keeps billing records under its own policy. YouTube API data follows the shorter deadlines in the Google user data section above, including deletion within 7 days of a disconnect or deletion request; those deadlines apply even where this section or our Terms allow longer.

Your choices and rights

You can access, correct and export most information in the app, and disconnect any connected account in Settings. You can ask us to access, correct, delete or export your personal information, or object to or restrict how we use it, by emailing nick@podbrosmedia.com. Depending on where you live, for example California, the EU or the UK, you may have additional rights; we will respond as the law requires and will not discriminate against you for using them.

Children

The Service is for business use and is not directed to children under 16. We do not knowingly collect their personal information.

Changes to this policy

We will post updates here and change the date above. If a change is material, we will notify workspace owners by email or in the app.

Contact

Privacy questions or requests: nick@podbrosmedia.com. Showpress is operated by Pod Bros Media LLC.