Privacy Notice
Last updated: June 14, 2026
1. Who we are
PodDesk is operated by Goodley Productions ("we", "us", "our"). Goodley Productions is the data controller responsible for the personal data processed through the PodDesk service. If you have any questions about this notice, contact us at the email address provided on our website.
2. Personal data we collect
- Account data — name, email address, and login credentials used to create and access your account.
- Profile and content data — podcast details, guest records, outreach messages, intake-form submissions, and other content you create in the app.
- Usage and telemetry — pages viewed, features used, and interactions, used to operate and improve the service.
- Device and technical data — IP address, browser type, and device identifiers collected automatically for security and analytics.
- Support communications — messages you send us when requesting help.
3. How and why we use your data
- To create and administer your account — legal basis: performance of a contract.
- To provide and maintain the service and its features — legal basis: performance of a contract.
- To secure the service and prevent fraud — legal basis: legitimate interests.
- To improve our product and develop new features — legal basis: legitimate interests.
- To provide customer support — legal basis: performance of a contract / legitimate interests.
- To send service and, where permitted, marketing communications — legal basis: legitimate interests or consent.
4. Who we share data with
- Service providers / subprocessors — hosting, database, analytics, and support tooling that help us run PodDesk.
- Paddle (Merchant of Record) — Paddle.com handles the sale of our products, subscription management, payments, tax compliance, and invoicing. Payment data is collected and processed by Paddle under its own privacy terms.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required to comply with the law or protect our rights.
5. Data retention
We keep your personal data only as long as needed to provide the service and for legitimate business or legal purposes. When data is no longer needed, we delete or anonymise it.
6. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. EEA/UK users may also lodge a complaint with their supervisory authority; we aim to respond to requests within one month. To exercise any right, contact us using the details on our website.
7. International transfers
Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
8. Security
We use appropriate technical and organisational measures — including encryption in transit and access controls — to protect your personal data.
9. Cookies
We use essential cookies required to operate the service and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.