Security Policy

01Our approach

We protect your account and recordings with reasonable security safeguards, as India's Digital Personal Data Protection Act, 2023 and its Rules require. This page describes the main ones. No system is perfectly secure, and we keep improving these measures as the service grows.

02Your account

• Passwords are scrambled (hashed) before they are stored, so no one, including us, can read them.
• Password resets, erasing your data and deleting your account need a one-time code sent to your email. Codes expire within minutes, are stored scrambled so no one can read them, and stop working after a few wrong tries.
• You can see and sign out the devices signed in to your account in Settings › Security.
• We email you when your password changes or your account is scheduled for deletion.

03Your recordings and files

• Everything sent between you and PodcastFlow is encrypted.
• Files are kept in private storage and opened only through private links that stop working after a short time.
• Your files are used only to make your edits. We don't use them for advertising or sell them.
• Creations you remove can't be opened or downloaded by our staff.

04Staff access

Only a small number of authorised staff can use our admin tools, and only to support you, run the service or investigate abuse. When staff open your account to help with a problem, they can't erase your data or delete your account. Admin actions are recorded in an audit log, kept for at least one year.

05Service providers

We use trusted providers for hosting, storage, media processing, email and payments, as listed in our Privacy Policy. They may use your data only to provide their service to us. Card and bank details are handled by our payment processors and never reach our servers.

06If something goes wrong

If we learn of a personal data breach, we act to contain it, investigate it, and tell the people affected without delay: what happened, what it means for them, what we are doing and what they can do. We also report it to the Data Protection Board of India as the law requires.

07Reporting a security problem

If you find a vulnerability or think your account has been compromised, email support@deepsoch.ai with the details. Please give us a reasonable time to fix a vulnerability before telling anyone else, and don't access other people's data, disrupt the service, or test against accounts that aren't yours. We won't take action against good-faith reports that follow these rules.