Privacy Policy
Draft — review with counsel before public launch.
Last updated 2026-07-07
Orson turns newsletters you forward into a private podcast feed you can listen to in any podcast app. This policy explains what we collect, why, where it is stored, and the choices you have. It is written to be readable; where a term is legally significant we try to say so plainly.
What we collect
- Account details. When you claim an account we receive your email address and basic profile (name, avatar) from Google Sign-In. We do not receive your Google password.
- Forwarded email. The newsletters you forward to your Orson address, including their full content, sender, and subject, so we can convert them into audio.
- Generated audio. The podcast episodes we produce from that content, and the metadata of your personal feed.
- Usage and credits. Records needed to run the service — episodes produced, credits consumed, and basic operational logs.
Why we use it
We use this data for one purpose: to produce and deliver your private podcast feed. That means narrating the newsletters you forward, hosting the resulting episodes for your feed, maintaining your account, metering usage, and keeping the service secure and working. We do not sell your data, and we do not use the content of your newsletters to advertise to you.
Where it is stored
Orson is operated with EU data residency: account data, forwarded email content, and generated audio are stored on infrastructure located in the European Union. Some third-party processors (below) may process limited data in transit to deliver their part of the service.
How long we keep it
We keep your account data and feed for as long as your account is active. Unclaimed addresses and their generated shows are temporary and may be deleted automatically. When you delete your account we delete your account data, forwarded content, and generated audio, except where we are required to retain limited records (for example, billing records) to meet legal obligations.
Third-party processors
We rely on a small set of vendors to run Orson, each processing only the data needed for its function:
- Text-to-speech and language-model providers, to narrate and adapt newsletter text.
- Resend, to send transactional email (such as sign-in and claim links).
- Polar, to process billing and subscriptions.
- Our hosting and storage providers, to run the service and store audio.
Your rights
If you are in the EU/EEA, the GDPR gives you the right to access, correct, export, and delete your personal data, to object to or restrict certain processing, and to lodge a complaint with your local supervisory authority. You can export or delete most of your data from within the app; for anything else, contact us and we will help.
Contact
Questions or requests about your privacy? Email privacy@orson.fm.