privacy

• Your email address. It is the account.
• A Stripe customer reference, and the card's brand, last four digits and expiry date. The full card number never reaches our servers: you type it on Stripe's page and Stripe keeps it.
• The documents you submit, held as a working copy while your episode is made.
• The transcript and the audio of every episode.
• Billing and usage records: credits granted and spent, what was charged, and which episodes were made when.
• Operational logs. They carry account ids, episode ids and error messages. Sign-in links and email addresses are never written to them, and IP addresses are stored as a one-way hash rather than in the clear.

One cookie, named sg_session. It is set when you sign in, and it is what keeps you signed in. It holds a random value, and the server stores only a hash of it.

There is no analytics cookie, no advertising cookie, and no third-party script on any page here.

• AI model providers. Your documents go to a third-party model to write the transcript, and the transcript goes to a text-to-speech model to be voiced. There is no way to make an episode without that step.
• Stripe. Payments, cards, invoices and the subscription itself live at Stripe. Checkout and the billing portal are Stripe's pages, not ours.
• Cloudflare. The code, the database, the audio storage and the mail carrying your sign-in link all run on Cloudflare.
• Google Fonts. Pages load one font file from fonts.gstatic.com, so your browser makes a request to Google when a page opens. Nothing about your account goes with it, and the page reads fine if the request fails.

We don't sell personal data and we don't hand it to advertisers.

Podcast apps don't send one, so the random string in your feed's address is the credential. Anyone you give it to can read the feed and play its episodes. Give it out carefully.

Episodes and their audio stay until the feed is retired and taken down. Retirement starts a thirty-day clock. After that the show comes down and its audio is deleted.

Billing records outlive the account. A record of what was charged is something a business has to keep.

Write to hello@vector.garden from the address on the account and say what you want removed. We will delete the account, its feed and its episodes, and tell you when it is done. The billing records stay, for the reason above.

The same address answers any question about what is stored or who it went to.

If this policy changes, the new version replaces this one and the date at the top changes with it. A change to what is collected, or to who it is sent to, gets an email as well.

Stargazer is a Vector Garden product. Write to hello@vector.garden and a person reads it.