Privacy Policy

We collect only what we need to run Passband. We never sell your data. Your API keys are encrypted and never shared. You can delete your account and all associated data at any time.

Passband is operated by Noncelogic LLC. When we say “we,” “us,” or “our,” we mean Noncelogic LLC, doing business as Passband.

• Account information — your name, email address, and profile picture, provided through Clerk (our authentication provider).
• Content you create — content drafts, source feeds and RSS subscriptions, voice profile settings and calibration data, and pipeline configurations you set up inside Passband.
• Usage analytics — page views, feature usage, pipeline run counts, and performance metrics so we can improve the product. Collected via Vercel Analytics and Sentry.
• Payment information — billing details processed through Stripe. We do not store credit card numbers directly — Stripe handles all payment data.
• API keys (BYOK) — if you bring your own keys for third-party AI providers, those keys are stored encrypted at rest and are never shared with anyone.

• We never sell your personal data to third parties. Period.
• We never use your content or API keys to train AI models.
• We never share your API keys with anyone — not even our own team can see them in plaintext.

We use your data to:

• Provide and operate the Passband service.
• Authenticate you and secure your account.
• Process payments and manage your subscription.
• Send transactional emails (account verification, password resets, billing receipts).
• Improve the product based on aggregated, anonymized usage patterns.

We use the following third-party services to operate Passband. Each processes certain data on our behalf:

• Clerk — authentication and user management. Processes your email, name, and login credentials.
• Stripe — payment processing. Handles billing information, credit card data, and subscription management. We never store your card details directly.
• Sentry — error tracking and performance monitoring. Collects anonymized error reports and performance metrics.
• OpenAI / Anthropic — AI generation. When you run pipeline drafts, your content (source material and drafting context) is sent to these providers for processing. Drafts are generated and returned to Passband. We do not send your personal information or API keys to these providers when using Passband's included AI.
• Vercel — hosting and deployment. Serves the Passband application and handles edge routing.

Each of these providers has their own privacy policies. We encourage you to review them.

When you bring your own API keys (BYOK) for third-party AI providers:

• Encryption — your API keys are encrypted at rest using industry-standard encryption. They are decrypted only at the moment of use.
• Direct calls — when using BYOK, API calls are made directly to the provider on your behalf. Your content is sent to the provider you configured, subject to their privacy and data handling policies.
• No logging of keys — we do not log, export, or expose your API keys in any form. Our team cannot view them in plaintext.

Passband uses essential cookies only. These are limited to:

• Authentication session — a cookie to keep you signed in. Set by Clerk.

We do not use advertising cookies, tracking pixels, or third-party marketing cookies.

We retain your data according to the following policies:

• Active accounts — your content drafts, source feeds, voice profiles, pipeline configurations, and account settings are retained for as long as your account is active.
• Account deletion — when you delete your account, all personal data, content, drafts, and settings are permanently deleted within 30 days.
• Anonymized data — some aggregated, anonymized usage data (which cannot be linked back to you) may be retained for analytics purposes.

Regardless of where you are located, we provide the following data rights to all users:

• Right to access — you can view all data associated with your account in your settings. You may also request a full export of your data.
• Right to deletion — you can request full account and data deletion at any time. We will process deletion within 30 days.
• Right to export — you can export your content, drafts, and pipeline configurations in a machine-readable format.
• Right to opt out — you may opt out of analytics tracking at any time through your account settings.

To exercise any of these rights, email us at privacy@passband.ai. We will respond within 30 days.

Passband is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has created an account, please contact us and we will promptly delete it.

We may update this privacy policy from time to time. If we make material changes, we'll notify you via email or an in-app notice. The “last updated” date at the top of this page reflects the most recent revision.

Questions or concerns about your privacy? Reach out at privacy@passband.ai.