Gera Services ("Gera", "we", "us", "our") operates the website at gera.services and provides AI-powered business services, including GeraCast — our automated podcast content repurposing service.
We are the data controller for the personal data described in this policy.
For data protection enquiries, to exercise your rights, or to submit a data subject access request, please contact us at: gera.services.uk@gmail.com
This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you use GeraCast, we collect and process the following data:
| Data | Source | Purpose |
|---|---|---|
| Full name | Account sign-up / onboarding | Identifying you, personalising communications |
| Email address | Account sign-up / onboarding | Account management, service delivery, billing |
| Business name and role | Onboarding | Understanding your requirements |
| Billing information | You, during onboarding | Issuing invoices and processing payments |
| Audio files / Episode Submissions | You submit via our intake form or URL | Core service — transcription and content generation |
| Transcripts (intermediate processing data) | Generated automatically from your audio | Required to generate Output; deleted within 30 days |
| Generated Output (show notes, social posts, etc.) | Generated by our AI pipeline | Delivered to you; retained for 90 days |
We do not collect sensitive personal data. Voice recordings are processed for transcription and content generation purposes only — not for biometric identification.
When you submit an Episode to GeraCast, the audio will typically contain the voices, words, and identifiable information of podcast guests. We process this data as a necessary incident of the contracted service. See Section 5 for details.
| Data | Source | Purpose |
|---|---|---|
| Full name | Contact form / direct communication | Responding to enquiries |
| Email address | Contact form / direct communication | Responding to enquiries, service communications |
| Business name and role | Contact form / direct communication | Understanding your requirements |
Contract performance (Article 6(1)(b) UK GDPR)
We process your account data, audio submissions, and related data to deliver GeraCast to you — transcribing your episodes, generating Output, and managing your subscription.
Legal obligation (Article 6(1)(c) UK GDPR)
We retain billing and financial records for the period required by HMRC (6 years).
Legitimate interests (Article 6(1)(f) UK GDPR)
We process personal data appearing in submitted audio on the basis of our legitimate interests in delivering the contracted service. Podcast guests record with the expectation that episodes will be commercially exploited by the host. Our processing is limited to generating show notes from that specific episode. Audio and transcripts are deleted within 30 days.
GeraCast involves automated processing of your personal data. Your audio is transcribed automatically using AI (OpenAI Whisper) and the transcript is processed by an AI language model (Anthropic Claude) to generate your Output. No human at Gera reads or reviews your episode content as part of the standard service pipeline.
GeraCast does not use your personal data for automated decision-making with legal or similarly significant effects. The automated processing produces editorial content only.
| Sub-processor | Role | Location |
|---|---|---|
| OpenAI (Whisper API) | Audio transcription | USA |
| Anthropic (Claude API) | Content generation (show notes, social posts, etc.) | USA |
| Google (Docs / Drive API) | Output delivery and formatting | USA (with EU/UK data centres) |
We operate under contractual terms with OpenAI and Anthropic that prohibit them from using your submitted audio or transcripts to train their AI models. Your data is used solely to generate your Output.
Your voice, words, name, and any personal information you disclosed during a recorded episode may be included in audio submitted to GeraCast. We process this data under legitimate interests (Article 6(1)(f) UK GDPR). We do not retain audio or transcripts beyond 30 days and do not use your data to train AI models.
To exercise your rights, contact gera.services.uk@gmail.com with your name, the podcast name, and the approximate episode date. We will respond within one month.
Our AI sub-processors (OpenAI, Anthropic, Google) are US-based. Data transfers to these providers are conducted under UK International Data Transfer Agreements (IDTAs) or equivalent mechanisms approved by the ICO.
| Data type | Retention period |
|---|---|
| Audio files (uploaded) | Deleted within 30 days of Episode Submission |
| Transcripts (intermediate) | Deleted within 30 days of Episode Submission |
| Generated Output | Retained for 90 days after delivery |
| Account and billing data | Duration of subscription + 6 years (HMRC) |
| Contact / enquiry data | 12 months (where no contract follows) |
Under UK GDPR, you have the right to: access your data, rectification, erasure, restriction of processing, data portability, and to object to processing. To exercise any of these rights, contact gera.services.uk@gmail.com. We will respond within one month.
If you believe we have handled your personal data in breach of your data protection rights, you have the right to submit a formal complaint to us. Please see our Data Protection Complaints Process for full details of how to submit a complaint, what to expect, and how we will handle it.
We will acknowledge your complaint within 30 days and aim to resolve it within 3 months.
If you are not satisfied with our response, you may escalate to the Information Commissioner's Office (ICO):
We take reasonable technical and organisational measures to protect your personal data, including: processing audio in isolated pipeline environments; limiting access to submitted audio and transcripts; transmitting data over encrypted connections (TLS); and deleting audio and transcripts within 30 days.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by updating the "last updated" date at the top of this page.
Contact: gera.services.uk@gmail.com · gera.services