Privacy Policy

1. Scope and controller

This Policy describes how TableHQ LLC(“Paused,” “we,” “us,” or “our”) handles personal information through Paused FYI. It covers account and profile pages, the private listening archive, public Podcast and Episode sources, published Moment and Collection pages, Billing, imports, playback, tracking, and exports. Provider players and sites handle information under their own policies.

2. Product and account boundary

Paused uses its own data tenant. Your Paused user, organization, private archive, custom tables, Stripe customer, and subscription are not reused by another product, even when you use the same email address there.

Public podcast and episode metadata may be normalized once to keep provider refreshes consistent. Your imports, collections, listening activity, notes, custom fields, and billing records remain attached only to your Paused account or organization.

3. Information we collect

Account and authentication information

We may collect your email address, name, avatar or profile details, organization and user identifiers, verification and login timestamps, session records, and information needed for passwordless or connected-provider authentication. If you use Google sign-in, Google provides the account information authorized by that flow; we do not receive your Google password.

Listening archive

We store podcasts and episodes you import, collect, or save moments from; normalized feed, artwork, and source metadata; collections and ordering; playback positions; Moment titles and notes; cropped custom sharing images and card titles; ratings, status, revisit dates, and other typed tracking; provider and stable IDs; import attempts, errors, and refresh timestamps; and your changes to those records.

When you choose or paste a sharing image, your browser prepares the crop before you save it. We store the cropped image with your Moment and its retained versions; the original file stays on your device. Sharing images and their saved versions are included in your export.

Public sources and published resources

Every addressable resource has one typed, unguessable identifier and canonical URL. Podcast and Episode sources are globally public and do not store listener visibility. Listener-owned Moments and Collections store a private or public visibility setting. Publishing changes that setting; it does not create a second share token or a frozen snapshot. Edits to a published resource therefore appear on its public page immediately.

A published Moment exposes its current title, note, saved playback range, sharing image and card title, and the public Podcast and Episode metadata needed to present it. A published Collection exposes its current name, description, ordered Episode and Moment membership, Collection notes, and any Moment content needed in that Collection context. Publishing a Collection does not make its Moments independently public.

Globally normalized Podcast and Episode source pages contain provider metadata and do not select listener notes, playback, tracking, Collection membership, or custom fields. Public Moment and Collection projections do not include account identity, playback history, or private custom-table values.

Anyone can view a public resource at its canonical URL, and search engines may index it. Unpublishing makes the canonical URL unavailable to non-owners, but the same URL works if you publish the resource again. Unpublishing cannot erase previews, screenshots, caches, or other copies already made by recipients or third parties.

Custom field tables

If you use custom columns, we store their schema and values in the Paused organization-scoped data service. Moment-specific rows refer to stable Moment IDs. Collection-specific custom rows refer to stable Collection Item IDs, allowing the same Episode or Moment to have different fields in different Collections. Podcast and Episode sources do not have custom columns. An export may identify a custom-table read error without exposing unrelated organizations.

Subscriptions and payments

We store your organization identifier, Stripe customer and subscription identifiers, selected price, subscription and invoice status, payment-method summary, billing event history, and related timestamps. Stripe collects and processes full payment-card and billing details. We do not receive or store complete card numbers.

Communications and technical information

If you contact us, we receive your contact details, message, and any information you choose to include. Our server and infrastructure may process IP address, request time, route, response status, referrer, browser or device information, authentication and security events, import failures, and error details in ordinary logs needed to deliver and protect the Service.

4. Podcast providers

Search, import, refresh, or playback can send a request to Podcast Index, a publisher or podcast host, Apple, YouTube, or another linked provider. On a public Podcast, Episode, Moment, or Collection page or embed, Paused does not load provider playback until a visitor selects Play. That playback request can disclose the visitor's IP address, browser details, requested media, and request time directly to the provider. Server-side search, import, and refresh requests, as well as social-card and embed artwork requests, disclose our infrastructure request and the search term or public URL involved.

YouTube imports use YouTube API Services to retrieve public video and channel metadata. Playing a video loads YouTube's official embedded player. Google may collect information through that player under the Google Privacy Policy. Importing a YouTube URL does not connect your YouTube account or grant Paused access to your private videos or watch history.

A playback request may identify Paused by its site origin when a provider requires client identification. Paused applies a strict origin referrer policy, so the canonical resource path and ID are not included in that referrer information.

We retain a normalized copy of public podcast and episode metadata so your archive remains coherent when a provider is temporarily unavailable. We do not control provider tracking, advertising, recommendations, account linking, or retention.

5. Sources of information

We receive information:

• from you when you authenticate, import, track, organize, manage Billing, or contact us;
• from Podcast Index, publishers, podcast hosts, Apple, YouTube, and other public podcast sources;
• from an authentication provider when you choose a connected sign-in method;
• from Stripe about customers, subscriptions, invoices, and payment status; and
• automatically from your browser and our infrastructure when you use the Service.

6. How we use information

We use information to:

• authenticate you and maintain a secure private workspace;
• import, normalize, refresh, organize, track, and export the archive you request;
• serve and update public Podcast and Episode sources and create, publish, or unpublish the Moments and Collections you request;
• provide trials, subscriptions, access control, and Billing;
• send account, verification, billing, and service messages;
• respond to support and privacy requests;
• prevent fraud, abuse, and unauthorized access;
• diagnose failures and maintain service reliability; and
• comply with law and enforce our agreements.

We do not sell personal information, share it for cross-context behavioral advertising, use private listening notes for targeted ads, or make decisions with legal or similarly significant effects based solely on automated processing.

7. Cookies and browser storage

Paused uses essential cookies for authentication, session security, sign-in return paths, selected plans, and preferences. Theme and limited interface or playback state may be stored locally in your browser. You can clear browser storage or block cookies, but doing so can sign you out, reset local preferences, or prevent account features from working.

Public Podcast, Episode, Moment, and Collection pages and embeds do not load our audience analytics, and Paused does not load session replay. A media provider may use separate browser technologies under its policy after a visitor chooses to load that provider.

8. How we disclose information

We may disclose information to:

• service providers for hosting, databases, the organization-scoped custom-table service, authentication, email, security, and technical operations;
• podcast providers for the searches, imports, refreshes, and playback interactions you request;
• anyone who receives a public Podcast, Episode, Moment, or Collection link, and a social or publishing service where you choose to post or embed it, for the content you select;
• Google or another provider for a sign-in interaction you request, and Stripe for billing and payment processing;
• advisers or authorities when reasonably necessary to comply with law, protect rights and safety, or investigate abuse; and
• a successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice.

9. Legal bases

Where data-protection law requires a legal basis, we process account, archive, import, custom-table, and billing information to perform our contract with you; security, reliability, support, and limited operational records for our legitimate interests; information needed to satisfy legal obligations; and information based on consent where we specifically request it. You may withdraw consent for future processing at any time, without affecting earlier processing.

10. Retention, export, and deletion

We generally retain account and archive information while your account remains open. Canceling a subscription does not automatically delete the account or archive. Account & data provides a JSON export of supported normalized and custom records, including referenced Podcast and Episode sources and listener-owned resource visibility.

Unpublishing a Moment or Collection retains it and its stable ID as private; deleting it removes its canonical page. Public source records may remain in the shared catalog after you remove your references. We retain billing, security, dispute, import-history, and backup records for as long as reasonably necessary for their purpose and legal obligations, then delete or de-identify them. To request account or archive deletion, email us from the account address. Because the workspace spans Prisma and organization-scoped custom tables, we will verify and coordinate the request rather than treating subscription cancellation as deletion.

11. International processing

We and our providers may process information in the United States and other countries whose laws differ from those where you live. Where required, we use a recognized transfer mechanism or another lawful safeguard. Contact us to ask about safeguards applicable to your information.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including account- and organization-scoped access. No transmission, storage, provider, or authentication system is completely secure, so we cannot guarantee absolute security.

13. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal a denied request. You may also complain to your local data-protection authority. You have the right to object to processing based on legitimate interests where applicable.

Submit a request to support@paused.fyi. We may verify your identity and authority before completing it. We will not discriminate against you for exercising a privacy right. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or targeted-ad opt-out to exercise.

14. Children

Paused is not directed to children under 13, and member accounts are limited to adults under our Terms. If you believe a child provided personal information, contact us so we can investigate and delete it where appropriate.

15. Changes and contact

We may update this Policy as the Service or law changes. We will post the new effective date and provide reasonable notice of material changes. Questions and privacy requests may be sent to support@paused.fyi.