Privacy Policy
Effective date: September 24, 2026
At PODLY LLC ("Podly"), we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.
Remember that your use of Podly's Services is at all times subject to our Terms of Service, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Service.
If you have a disability, you may access this Privacy Policy in an alternative format by contacting hello@podly.co.
Privacy Policy Table of Contents
- What this Privacy Policy Covers
- Personal Data (Categories of Personal Data We Collect, Categories of Sources of Personal Data, Our Commercial or Business Purposes for Collecting Personal Data)
- How We Share Your Personal Data
- Google Sign-In
- Podly Chrome Extension
- Payments
- Tracking Tools and Opt-Out
- Data Security and Retention
- Personal Data of Children
- Other State Law Privacy Rights
- European Union Data Subject Rights
- Changes to this Privacy Policy
- Contact Information
What this Privacy Policy Covers
This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules or regulations. This Privacy Policy does not cover the practices of companies we don't own or control or people we don't manage.
Personal Data
Categories of Personal Data We Collect
This list details the categories of Personal Data that we collect and have collected over the past 12 months:
Profile or Contact Data
- Examples: First and last name, Email, Date of birth, Physical address, Unique identifiers such as passwords
- Shared with: Service Providers, Parties You Authorize, Access or Authenticate
Payment Data
- Examples: Payment card type, Last 4 digits of payment card, Billing address, phone number, and email
- Shared with: Service Providers (specifically our payment processing partner)
Device/IP Data
- Examples: IP address, Device ID, Domain server, Type of device/operating system/browser used to access the Services
- Shared with: Service Providers, Parties You Authorize, Access or Authenticate
Web Analytics
- Examples: Web page interactions, Referring webpage/source, Non-identifiable request IDs, Statistics associated with the interaction between device or browser and the Services
- Shared with: Service Providers, Parties You Authorize, Access or Authenticate
Social Network Data
- Examples: Email, Phone number, User name, IP address, Device ID
- Shared with: Service Providers, Parties You Authorize, Access or Authenticate
Other Identifying Information that You Voluntarily Choose to Provide
- Examples: Identifying information in emails or letters you send us
- Shared with: Service Providers, Business Partners, Parties You Authorize, Access or Authenticate
Categories of Sources of Personal Data
We collect Personal Data about you from the following categories of sources:
You
- When you provide such information directly to us (creating an account, using interactive tools, providing information in free-form text boxes, sending us an email)
- When you use the Services and such information is collected automatically (through Cookies, location data, application data)
Third Parties
- Vendors (analytics providers, customer support third parties)
- Google, when you sign up or log in with Google
Our Commercial or Business Purposes for Collecting Personal Data
- Providing, Customizing and Improving the Services: Creating and managing your account, Processing orders/transactions, Providing requested products/services/information, Meeting/fulfilling the reason you provided the information, Providing support and assistance, Improving the Services (testing, research, internal analytics, product development), Personalizing the Services, Doing fraud protection/security/debugging, Carrying out other business purposes stated when collecting your Personal Data
- Marketing the Services: Marketing and selling the Services
- Corresponding with You: Responding to correspondence, contacting you when necessary, sending information about Podly or the Services, sending emails and communications
- Meeting Legal Requirements and Enforcing Legal Terms: Fulfilling legal obligations, Protecting rights/property/safety, Enforcing agreements, Responding to claims, Resolving disputes
We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.
How We Share Your Personal Data
We disclose your Personal Data to the categories of service providers and other parties listed in this section.
- Service Providers: Hosting, technology and communication providers; Security and fraud prevention consultants; Analytics providers; Support and customer service vendors; Product fulfillment and delivery providers; Payment processors (our payment processing partner collects your voluntarily-provided payment card information necessary to process your payment)
- Business Partners: Businesses that you have a relationship with; Companies that we partner with to offer joint promotional offers or opportunities
- Parties You Authorize, Access or Authenticate: Third parties you access through the services; Social media services; Other users
Legal Obligations: We may share any Personal Data that we collect with third parties in conjunction with meeting legal requirements and enforcing legal terms.
Business Transfers: All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction.
Data that is Not Personal Data: We may create aggregated, de-identified or anonymized data from the Personal Data we collect and share it with third parties for our lawful business purposes.
Our main service providers: Paddle (payments), Cloudflare (website hosting, Turnstile bot checks on sign-up and storage of Podly Design images), Loops (account emails), OpenAI (AI listing generation), fal (Podly Design image generation, with models from OpenAI, Google, Bria, Topaz, BiRefNet and Recraft), OpenRouter (Podly Design prompt improvement), and the analytics and affiliate tools listed under Tracking Tools and Opt-Out.
Podly Design: when you use Podly Design, we store the images you create in your account until you delete them, and we keep the record of each request (its prompt, options and credits) with your account for billing, support and abuse prevention. To create an image, our server sends your prompt and the reference images you choose to fal, and, when you ask us to improve a prompt, sends the prompt to OpenRouter.
Google Sign-In
You can create a Podly account or log in with your Google account. When you do, Google shares these details with us: your email address, your name, your profile picture and your Google account ID.
We use them only to create your account, sign you in and show your name and picture in Podly. We don't ask Google for access to your Gmail, Drive, contacts, calendar or any other Google data. We don't sell this data, use it for advertising, or share it with anyone else, except the service providers that host Podly for us or when the law requires it.
Podly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Podly's access at any time from your Google Account permissions page. This stops Google Sign-In for Podly but doesn't delete your Podly account. To delete your account and its data, email hello@podly.co.
Podly Chrome Extension
The Podly Chrome extension runs on Amazon (amazon.com, .co.uk, .de, .fr, .it and .es) and on the Merch by Amazon website.
What it reads. To show its research, the extension reads the Amazon pages you open. It can also load more Amazon product and search pages from your browser to calculate BSR, sales estimates and niche scores. These calculations happen in your browser, and the results are cached in your browser's storage.
What it sends to Podly. When you open an Amazon page, the extension sends Podly the product identifiers (ASINs) that appear on that page and the Amazon marketplace. It does this whether or not you are logged in. We use these identifiers to keep Podly's product data complete and up to date. When you use a feature, the extension also sends what that feature needs:
- Keyword insights: the product's ASIN, title, brand and first two bullet points.
- Trademark checks: the listing text you check.
- AI listing generation and translation: the search terms, listing text or design image you submit. Our server sends them to our AI provider to create the result.
The extension doesn't send Podly your Amazon or Merch by Amazon account details, orders or royalties.
Login. When you log in, the extension stores a Podly login token and your email address in Chrome's local extension storage. Logging out of the extension deletes the token.
Analytics. The extension sends usage events to PostHog, hosted in the EU. These events include the features you use, the Amazon search term and product ASIN of the pages where the extension runs, the keywords you enter for AI generation, and your email address once you are logged in.
Payments
Paddle (paddle.com) is our reseller and merchant of record. Paddle processes your payment, collects your card details, and handles billing, invoices and sales tax. We never see your full card number. Paddle shares with us your email address, country, the plan you bought and the payment status. Paddle's own privacy policy applies to the payment data it processes.
Tracking Tools and Opt-Out
The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, "Cookies") to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services.
We use the following types of Cookies:
- Essential Cookies: Required for providing you with features or services that you have requested.
- Functional Cookies: Used to record your choices and settings, maintain your preferences over time, and recognize you when you return.
- Performance/Analytical Cookies: Allow us to understand how visitors use our Services.
On podly.co and in the Podly app we use these tools:
- Google Tag Manager and Google Analytics, to measure visits and conversions.
- PostHog (hosted in the EU), to understand how people use the website, the app and the Chrome extension.
- Pirsch, for website visit statistics.
- Tapfiliate, for our affiliate program. When you arrive through an affiliate link, it sets a cookie so the affiliate gets credit for your purchase.
- ProfitWell (part of Paddle), for subscription metrics in the app.
When you sign up, we store how you found Podly: the affiliate code and campaign tags in the link you used, if any.
You can decide whether or not to accept Cookies through your internet browser's settings. To find out more information about Cookies, please visit http://www.allaboutcookies.org/.
Data Security and Retention
We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures. No method of transmitting data over the internet or storing data is completely secure.
We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide you with our Services.
Personal Data of Children
As noted in the Terms of Service, we do not knowingly collect or solicit Personal Information from anyone under the age of 13. If we learn that we have collected Personal Information from a child under age 13, we will delete that information as quickly as possible. Contact us at hello@podly.co.
State Law Privacy Rights
California Resident Rights: Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for direct marketing purposes; contact us at hello@podly.co.
Nevada Resident Rights: If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data. Contact us at hello@podly.co with the subject line "Nevada Do Not Sell Request."
European Union Data Subject Rights
If you are a resident of the European Union ("EU"), United Kingdom, Lichtenstein, Norway or Iceland, you may have additional rights under the EU General Data Protection Regulation (the "GDPR").
Podly will be the controller of your Personal Data processed in connection with the Services.
Personal Data Use and Processing Grounds:
- Contractual Necessity: Profile or Contact Data, Web Analytics, Payment Data, Social Network Data, Device Data, Other Identifying Information
- Legitimate Interest: Providing/customizing/improving the Services, Marketing the Services, Corresponding with you, Meeting legal requirements, Completing corporate transactions
- Consent: In some cases we process Personal Data based on your express consent
- Other Processing Grounds: Legal obligations, vital interests, public interest tasks
EU Data Subject Rights:
- Access: Request information about and a copy of your Personal Data
- Rectification: Request correction of incorrect or incomplete data
- Erasure: Request deletion of your Personal Data
- Withdrawal of Consent: Withdraw your consent at any time
- Portability: Request a copy in machine-readable format
- Objection: Object to further use or disclosure for certain purposes
- Restriction of Processing: Ask us to restrict further processing
- Right to File Complaint: Lodge a complaint with the supervisory authority of your country or EU Member State. List available at: https://edpb.europa.eu/about-edpb/board/members_en
Transfers of Personal Data: The Services are hosted and operated in the United States through Podly and its service providers.
Changes to this Privacy Policy
We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time, but we will alert you to any such changes by placing a notice on the Podly website, by sending you an email and/or by some other means.
Contact Information
If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at:
Email: hello@podly.co
Address: 2105 VISTA OESTE ST, ALBUQUERQUE, NM, 87120, USA