Security & Data Handling

What Paydirt stores

Paydirt stores account and app configuration, raw question-and-answer transcripts, optional external user IDs, form metadata, delivery status, and optional AI summaries. Raw answers remain the source of truth.

Audio handling

The iOS SDK records into a protected temporary file and limits recording to two minutes. The API receives audio in memory for transcription. The local file is deleted after transcription succeeds or fails, and Paydirt does not intentionally persist raw audio in its feedback database.

SDK and transport controls

• Traffic is sent over HTTPS in production.
• Pending iOS submissions are encrypted with a Keychain-backed key.
• Agent setup binds new public SDK keys to the discovered iOS bundle ID.
• API rate limits reduce automated abuse.
• SDK keys can be rotated from App Settings.
• The SDK includes its own Apple privacy manifest.

Retention and deletion

New apps retain feedback for 365 days by default. App owners can choose a shorter or longer period in Settings, delete all feedback immediately, delete individual responses through the API, or delete the app and its associated forms and feedback. Changing retention applies to newly received feedback. Messages already delivered to Slack are governed by the connected Slack workspace.

Service providers

• Supabase: authentication and database infrastructure
• OpenAI: voice transcription
• Anthropic: conversational follow-ups and optional summaries
• Slack: optional delivery configured by the app owner
• Google: dashboard authentication

Responsible disclosure and business requests

Report a security issue or request security documentation or a DPA at hello@paydirt.ai. Do not include live customer feedback or credentials in the initial report.