Privacy & data protection
Privacy Policy
This policy explains how FIS Global Oy processes personal data when you use Podcax.ai.
Last updated 10 October 2026
1. Data controller
FIS Global Oy, Finland, is the controller for personal data processed through Podcax.ai. Privacy enquiries and data-rights requests can be sent to info@fis-global.fi.
2. Data we process
- Account data, such as email address, name, company details and login-session information.
- Lesson data, including topics, language choices, generated content, saved preferences and publishing settings.
- Transaction data, such as credit purchases, invoices, payment status and tax information. Payment-card details are handled by the payment provider and are not stored in full by Podcax.
- Technical and usage data, such as device, browser, security events, feature interactions and diagnostic information.
- Communications, support requests, fault reports and consent preferences.
3. Why we use data
We process data to provide accounts and lessons, authenticate users, deliver purchases, protect the service, respond to support, prevent abuse and comply with legal obligations.
Depending on the activity, our legal basis is performance of a contract, legitimate interests in operating a secure and reliable service, compliance with law, or consent for optional technologies and communications.
4. AI and service providers
Content submitted for lesson generation may be processed by contracted AI, hosting, email, storage, analytics and payment providers. We limit data shared with providers to what is needed for the relevant function and use contractual safeguards where required.
Do not include sensitive personal data, confidential information or information about children in lesson prompts unless you are authorised and have a valid legal basis.
5. International transfers
Some providers may process data outside Finland or the European Economic Area. Where required, we use recognised safeguards such as European Commission adequacy decisions or standard contractual clauses.
6. Retention
We keep personal data only for as long as needed for the service, security, accounting, dispute handling and legal obligations. Retention periods vary by record type. Consent preferences are normally requested again after 30 days. You may ask us for information about a specific retention period.
7. Cookies and local storage
Essential storage supports login, account security, lesson progress and preferences you request. Optional page-usage, Collection-view and challenge statistics require analytics consent. Base44 SDK automatic analytics and heartbeat tracking are disabled. Podcax currently has no active marketing trackers.
Use the Cookie settings button on any page, the footer link, or to change or withdraw your choice. Withdrawal stops future optional measurements and removes optional identifiers from your device; it does not automatically delete statistics already sent. Contact us for a personal-data deletion request.
| Storage | Purpose | Duration |
|---|---|---|
| podcax_consent_v1 / podcax_consent | Essential: privacy choice, time and policy version | 30 days |
| podcax_session_v1 | Essential: account session | 30-day session validity |
| podcax-otp-request-v2:* | Essential: recover login requests securely | Tab session |
| Language, playback and display preferences | Remember settings you select | Until changed or browser storage is cleared |
| podcax_collection_view_key | Optional analytics: avoid counting repeated lesson views; random identifier | Tab session or until consent withdrawal |
This describes Podcax application storage. Hosting infrastructure and external services may also process technical data needed to deliver the service.
8. Your rights
Subject to the GDPR and applicable law, you may have the right to access, correct, delete or restrict your data; object to certain processing; receive portable data; and withdraw consent without affecting earlier lawful processing.
You may also lodge a complaint with the Finnish Data Protection Ombudsman or another competent supervisory authority.
9. Children
Podcax can create learning material for children, but account holders and supervising adults are responsible for using the service appropriately. We do not knowingly request children to provide personal data directly. Contact us if you believe a child’s data has been submitted improperly.
10. Security
We apply reasonable technical and organisational measures intended to protect personal data. No online service can guarantee absolute security; please protect login codes and notify us promptly of suspected unauthorised access.
11. Updates and contact
We may update this policy when the service, providers or legal requirements change. The current version and update date will remain available here. Contact info@fis-global.fi or use our Contact page.