Privacy policy

What we store

• Account data: your email address and any display name you provide, held in our authentication provider.
• Your audio: the file you upload, in a private storage bucket. It is never publicly reachable; the app reads it through short-lived signed links scoped to your account.
• Your transcript: the generated text plus any edits you make, so you can reopen and export it.
• Usage records: how many seconds of audio each job covered, its outcome and timestamps — the information needed to operate a metered plan honestly.

What happens to your audio

To produce a transcript, your audio is sent over HTTPS to the configured speech-to-text provider (qwen/qwen3-asr-1.7b through the OpenRouter gateway). That provider processes the audio to return text and is subject to its own privacy terms. We do not use your recordings to train models, and we do not share them with anyone else.

Audio is retained for 7 days and then removed by a scheduled cleanup process, which clears the stored file while leaving your transcript intact. Transcript text is kept until you delete it.

[REVIEW] Confirm the retention window you intend to advertise, and confirm that the scheduled cleanup job is actually running in production — the setting and the job are documented in docs/DEPLOYMENT.md.

What we do not do

• We do not sell your data or your transcripts.
• We do not read your transcripts for advertising or profiling.
• We do not store audio in a publicly accessible bucket.
• We do not log transcript content: application logs record job identifiers, durations and error codes, not the words you transcribe.

Your controls

• Deleting a transcript removes its database records and its stored audio.
• You can export your transcript at any time as TXT, DOCX or PDF.
• [REVIEW] Describe how a user requests full account erasure and how quickly you action it. A service-role SQL function (purge_user_data) exists to perform the deletion.

Payments

Subscriptions are handled by Lemon Squeezy as merchant of record. Card details are entered on their hosted checkout and never reach our servers. We store only the subscription identifiers needed to know which plan your account holds.

Cookies

We set authentication cookies required to keep you signed in. [REVIEW] If you add analytics or marketing tags, list them here and provide a consent mechanism where required.

Contact

Questions about this policy can be sent through the contact page. [REVIEW] Add the legal entity, postal address and a monitored privacy contact address.