Privacy policy

Data controller

The data controller is Decoding AI, reachable at podcast@decoding.ai.

Please use that address for any question relating to personal data.

What we collect

We collect only the data voluntarily submitted through the website forms:

• Guest suggestion: the name, email and relationship of the person suggesting, plus public professional details of the suggested guest.
• Partnerships: name, work email, role, organisation, website and information about the proposed collaboration.
• Events: name, work email, organisation and information about the event.
• Contact: name, email, organisation (optional) and the content of the message.

Technical data

For each submission we record an identifier derived from the IP address and the browser user-agent, solely to prevent abuse and automated submissions.

The IP address itself is never stored. Only an irreversible cryptographic hash is kept, which means the originating device cannot be identified from our records.

Purpose and legal basis

Submitted data is used exclusively to assess and respond to the submission in question.

The legal basis is the explicit consent collected at the point of submission, together with Decoding AI’s legitimate interest in preventing abuse of the forms.

Audience measurement

When enabled, audience measurement runs on self-hosted infrastructure, with no tracking cookies, no persistent identifiers and no sharing of data with third parties for advertising purposes.

Measurement is only enabled after explicit consent. Declining does not limit any website functionality.

Embedded content

Episode pages may embed YouTube videos. A video is only loaded after an explicit action by the visitor; until then no connection is made to YouTube servers.

Once you load the video, Google’s terms and privacy policy apply.

Sharing and retention

Submitted data is never sold, transferred or shared with third parties.

It is accessible only to the Decoding AI editorial team, through an administration area protected by authentication.

Submissions are retained for as long as needed to assess them and for any editorial follow-up, up to a maximum of {{RETENTION_PERIOD}} months, after which they are deleted.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, portability and objection in relation to your personal data.

To exercise any of these rights, contact us at podcast@decoding.ai. We will respond within 30 days at the latest.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).

Security

All communication with this website is encrypted end-to-end over HTTPS.

Data is stored on infrastructure hosted in the European Union. Administrative access requires authentication and passwords are stored only as a cryptographic digest (Argon2id).