Privacy Policy

Version 2026-11-01 · Effective date: 2026-11-01 · Operator: Kexie (operated by an individual)

This Privacy Policy is maintained in Simplified Chinese and English. If you use the English site, the English text applies to you; the Chinese text applies to users of the Chinese site.

This Policy explains, in connection with the podcast editing service that Kexie (kexie.page) provides to you, what personal data we collect, why we collect it, the legal basis on which we process it, the service providers we share it with, how long we retain it, how it is deleted, and the rights you have. This Policy forms part of the Terms of Service.

1. The Operator and How to Contact Us

The Service is provided by Kexie (operated by an individual). For your account data, payment records and similar data, Kexie is the party that decides why and how that data is processed (the “controller” in legal terms); the voices of other people in your recordings are handled differently, see Section 10. Given our size, we are not required to appoint a data protection officer. For any question or request concerning personal data, please email hello@kexie.page.

2. What Data We Collect

We collect only the data necessary to provide the Service, all of which is either provided by you or generated automatically as you use the Service:

• Email address: used for sign-in and for service emails such as notifications that editing is complete, payment confirmations and retention-expiry reminders.
• Names: the name and show name you enter on your account page; the name provided by Apple or Google when you sign in with them (if any, used as the initial value of your name); and the speaker name you enter next to each recording at upload (“Who is this?”). Used to tell who is speaking in each recording and to get the host and show names right in the show notes.
• Recordings and materials: the raw recordings you upload (including intros, outros and music). Recordings contain participants’ voices and may constitute their personal data; you are responsible for ensuring that you have obtained their consent (see Section 5 of the Terms of Service and Section 10 of this Policy).
• Show information: your questionnaire answers and the episode title you enter at upload, the show RSS address you provide, and the show name, past episode titles and descriptions read from that RSS feed (used to write show notes that match the style of your show).
• Comments and feedback: the comments you write on the transcript, the star ratings and messages you leave, and any reasons you give us for not paying.
• Payment records: the payment amount and time and the payment provider’s transaction ID. Your card number and other payment information do not pass through Kexie; they are collected and processed directly by Stripe.
• Sign-in credentials: if you set a password, we store only the result of irreversible encryption (hashing), which cannot be restored to the original; if you use a passkey, we store only the public key; if you sign in with an Apple or Google account, we store the account ID, email address and name (if any) they provide.
• Playback records: we only record whether you have previewed an episode (whether playback exceeded 60 seconds), for statistics and to decide whether to send you a “How did it turn out?” email. We do not record playback progress or specific timestamps.
• Consent records: the time at which you checked the consent box when clicking “Start editing”, the version of the terms you agreed to, and your network address (IP) at that time, as evidence that you authorized us to process the recordings.
• Cookies and browser storage: used only for strictly necessary functions such as keeping you signed in, identifying upload drafts not yet linked to an account, and one-time checks during sign-in; names, purposes and lifetimes are listed in Section 9. We do not use advertising, analytics or tracking cookies.
• Bot verification: anonymous uploads and sign-in use Cloudflare Turnstile bot verification, which reads certain technical information from your browser to determine whether you are an automated program; this is processed by Cloudflare in accordance with its privacy policy.
• Approximate location: the country and province / state estimated from your network address by our service provider, used only to preselect your region's average hourly pay in the home page's "Do the math" calculator. We do not save this estimate.
• Technical logs: for security and troubleshooting, our servers keep short-term logs of the network addresses, times and contents of requests, which are also used to limit the upload frequency from the same network.

3. How We Use This Data

• Editing your show: transcribing recordings into text, editing, mixing, writing show notes, and generating preview and final files.
• Delivery and communication: sending service emails such as editing-complete notices, payment confirmations, expiry reminders and unpaid-episode follow-ups, and replying to your messages.
• Payments and reconciliation: processing payments, detecting duplicate or irregular payments and refunding them automatically, and keeping necessary accounting records.
• Security: preventing abuse, misappropriation of preview audio and attacks by automated programs.
• Improving the Service: compiling aggregate statistics on payment rates, satisfaction and common comments to improve editing quality. Your recordings and transcripts are not used for other customers in doing so.
• We do not use your recordings to train models, we do not sell your data to anyone, and we do not use it for advertising.

4. The Legal Bases for Processing Your Data

We have a specific reason for processing each kind of data (laws in the EU, the UK and elsewhere require us to state it):

• To perform our agreement with you (providing the service you asked for): your email address, names, sign-in credentials and sign-in cookies; recordings and materials, questionnaire answers, show information and your comments; service emails such as editing-complete notices, payment confirmations and expiry reminders; payments and refunds. Without this data we cannot edit or deliver your episode.
• To comply with legal obligations: keeping payment records as required for accounting and tax purposes (7 years).
• For our legitimate interests (a ground the law allows for processing without your consent, provided those interests are not overridden by your rights): consent records (to prove that you authorized us to process the recordings); whether you previewed an episode, asking why you did not pay, and aggregate satisfaction statistics (to understand what we did badly and improve the Service); technical logs, upload rate limits and bot verification (to keep the Service secure and prevent abuse). You may object to these at any time, for example by unsubscribing with one click from the follow-up email (see Section 8).
• We do not rely on your consent as the legal basis for any processing, so there is no consent to withdraw; if you do not want a particular kind of processing, you can object, request deletion or stop using the Service.
• The voices of other people (co-hosts, guests) in your recordings: you are responsible for obtaining their consent, and we process them on your instructions; see Section 10.

5. Service Providers That Process Your Data

Except for the following service providers that are necessary to provide the Service, we do not provide your recordings or data to any third party. These service providers may process your data only on our instructions and to the extent required to provide their services, and are bound by their service agreements and confidentiality obligations:

• Cloudflare: website hosting, file storage (recordings, edited audio, transcripts), service email delivery and bot verification. Cloudflare’s servers are located in many places around the world.
• Stripe: payments and refunds. Stripe collects your payment information directly; Kexie receives only the payment result and transaction ID. Stripe’s processing takes place mainly in the United States.
• Apple / Google: involved only if you choose to sign in with their accounts, in which case they provide us with your account ID, email address and name (if any); they process your sign-in activity in accordance with their own privacy policies.
• Text processing service providers: when making editing decisions and writing show notes, the transcript text recognized from the recordings is provided to contractually bound third-party text processing service providers. We use only providers that, under their service agreement or our account settings, commit not to use customer data to train models and not to sell it, and we require them to process it only on our instructions and delete it within a limited period. Only text is provided to them; not the recordings themselves, your email address or payment information. A list of the service providers currently in use is available on request by email.

Transcription, editing and rendering of the recordings themselves are performed on the operator’s own equipment, and the recordings are not provided to anyone other than the service providers listed above.

6. Where Data Is Stored (International Transfers)

• Your recordings, edited audio and account data are stored in Cloudflare’s storage services, whose servers are located in many places around the world; editing is processed on the operator’s own equipment; payments are processed by Stripe in the United States; and the servers of text processing service providers may be located in the United States or other regions.
• Accordingly, your data may be transferred to, stored and processed in places outside your country or region. Where data of users in the EU, the EEA or the UK is transferred outside those areas, we rely on legally recognized safeguards: our service providers’ certification under the EU–US Data Privacy Framework (including its UK extension), and/or the European Commission’s Standard Contractual Clauses (and their UK equivalent) included in our contracts with each provider. You can ask us by email for a description of the safeguards used for any provider.

7. How Long We Keep Data

• Upload drafts for which no email address has been provided: automatically deleted 24 hours after upload. Drafts for which an email address has been provided but editing has not been started within 30 days: automatically deleted when that period expires.
• Unpaid episodes: the recordings, edited audio and show notes are automatically deleted 72 hours after the first version is completed (episodes that have entered the payment process may be briefly extended, but no later than 96 hours). If you have previewed an episode but not paid 48 hours after the first version is completed, we may send you an email asking why (you can unsubscribe from such emails with one click).
• Paid episodes: the edited audio, show notes and original recordings are retained for 180 days from the date of payment or of the last revision, whichever is later; reminder emails are sent 30 days and 7 days before expiry; they are deleted automatically upon expiry. If a reminder before expiry could not be sent because of a fault, deletion may be postponed by up to 7 days.
• Payment records: retained as required for accounting and tax purposes (excluding card numbers), for 7 years after payment.
• The speaker names entered next to each recording are deleted together with that episode’s recordings. Consent records, comments and feedback, the titles of your episodes, and account data (including your name, show name and whether you have unsubscribed from follow-up emails): retained for as long as your account exists, and deleted together when you request deletion of your account, except where retention is required by law.
• Rate-limit records for sign-in, uploads and opening the payment page, and sign-in verification code records (stored only in hashed form): deleted automatically 30 days after their last use or expiry. Server technical logs: retained for a short period, generally no more than 30 days.

8. Your Rights

• Access: you may request a copy of the data we hold about you. Paid Deliverables can be downloaded from the page at any time during the retention period, and transcripts can be viewed on the page.
• Correction: account data can be changed on your account page; for other data, you may request correction by email.
• Deletion: unpaid episodes can be deleted directly on that episode’s page; for any episode or your entire account, you may request deletion by emailing hello@kexie.page, stating your account email address and the episode(s). We usually process and respond to requests within 7 business days, and in any case within one month. Payment records that we are required by law to retain are excepted.
• Export (data portability): you may ask us to send you your account data, questionnaire answers and comments in a common machine-readable format (JSON or CSV) so that you can take them elsewhere; recordings and paid Deliverables can be downloaded directly from the website.
• Restriction of processing: while the accuracy of your data is being checked, or while your objection is being considered, you may ask us to stop using the data concerned and only keep it.
• Objection: you may object at any time to the processing based on our legitimate interests described in Section 4; to stop receiving “How did it turn out?” follow-up emails, just click the unsubscribe link in the email. It takes effect immediately and does not require signing in.
• Automated decisions: editing is performed mainly with automated tools, but it is a service you requested; we do not make decisions about you that have legal or similarly significant effects solely by automated means.
• Complaints: if you believe we have handled your data improperly, you may complain to us, and you may also lodge a complaint with the personal data protection authority in your location; users in the EU, the EEA or the UK may complain to the data protection supervisory authority of the country where they live or work.
• Sign-in management: you can delete passkeys, change your password and sign out of all devices on your account page at any time.
• Exercising the above rights is free of charge. To verify your identity, we may ask you to send your request from your account email address or to complete an email verification. We usually process and respond to requests within 7 business days, and in any case within one month.

9. Cookies and Browser Storage

We use only cookies that are strictly necessary to provide the service you asked for, so we do not show a cookie banner. There are no advertising, analytics or tracking cookies, and we do not share cookies with other websites. These cookies can only be read by the Kexie website.

• When the operator views an episode: when the operator opens an episode’s preview page from the admin console, a read-only session cookie kx_h (4 hours) is set in the operator’s own browser, used only to view that episode; it is never set in your browser.
• Bot verification and network security: when a security check is needed, Cloudflare may set its own security cookies (such as __cf_bm and cf_clearance), used only to detect automated programs and prevent abuse, generally for no more than 30 minutes, and processed by Cloudflare in accordance with its privacy policy.
• Browser local storage: the episode page remembers which tips you have dismissed, so they are not shown again. The home page's "Do the math" calculator remembers only a region you select manually and uses it next time; automatically estimated locations are not saved. These preferences stay in your own browser, are not sent to us, and can be deleted by clearing this website's browser data.
• The payment page is provided by Stripe; cookies that Stripe uses on its own website for fraud prevention are processed in accordance with Stripe’s privacy policy.

10. Other People’s Voices in Recordings (Information for Guests)

• Your recordings may contain the voices of other people (co-hosts, guests) and what they say. For that data, the customer who uploads the recording is responsible for obtaining their consent in advance (see Section 5 of the Terms of Service) and decides how it is used; Kexie processes it only on the customer’s instructions to edit that episode, deletes it on the schedule in Section 7, and does not use it for any other purpose.
• If you appear in a recording but are not our customer and want your voice removed or have another request, you can contact the person who uploaded the recording, or email hello@kexie.page and we will help.

11. Security Measures

• The website uses encrypted connections throughout; passwords are stored only as irreversibly encrypted (hashed) values; sign-in state and one-time checks use signed cookies, and sensitive operations (changing your password, managing passkeys) require recent re-verification.
• Recordings and edited audio are stored in storage that requires authorization to access; preview audio before payment is played in encrypted segments, and the decryption keys are issued only to signed-in users with permission and expire within a short time.
• We automatically delete expired data according to the periods set out in this Policy, to minimize the amount of data we hold.
• In the event of a data breach that may affect your rights and interests, we will notify you by email as soon as possible after becoming aware of it; where required by law, we will report it to the competent supervisory authority within 72 hours (Article 33 of the EU General Data Protection Regulation), and for California residents we will comply with California Civil Code Section 1798.82.

12. Minors

The Service is intended only for users aged 18 or over. We do not knowingly collect personal data from anyone under 18, let alone from children under 13. If we discover any such data, we will delete it and close the account.

13. Notice for California Residents

• Effective date: this Policy is effective from 2026-11-01.
• Do Not Track signals: our site does not track you across other websites and uses no advertising or analytics cookies, so we do not change our practices in response to a browser’s “Do Not Track” signal; there is no tracking to turn off.
• Third-party tracking: no third party collects personally identifiable information about your online activities over time and across different websites through our site.
• No sale or sharing: we do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• California Consumer Privacy Act: we do not currently meet the thresholds that make a business subject to that Act; California residents may nonetheless exercise the access, correction and deletion rights described in Section 8, and we will not treat you differently for doing so.

14. Changes to This Policy

When this Policy is updated, we will publish the new version on this page and update the version number and effective date; for material changes concerning the scope of collection, purposes of use, service providers or retention periods, we will also notify existing account holders before they take effect, by email or by a notice shown after they sign in. If you do not accept the updated Policy, you may stop using the Service and request deletion of your data under Section 8.

15. Contact Us

For any question, request or complaint about this Policy or your personal data, please email hello@kexie.page.