Privacy Policy

1. Information we collect

• Account information: your email address. If you sign in with Google, Google shares your name, email address and Google account ID with us; we keep only the email address and account ID.
• Recordings: before anything is uploaded, your browser extracts the audio track and compresses it. Only the audio is uploaded; the picture of a video never leaves your device. Short audio files may be uploaded as they are.
• Transcripts and file details: the transcript text with timestamps, the file name, its duration, the detected language and the date.
• Payment information: payments are handled by Stripe. We receive a customer ID, what you bought and the status of your subscription. We never see your card details.
• Technical information: your IP address and browser details appear in our server logs. We also use a one-way hash of your IP address and email address to enforce the free plan's limits (see section 3).

2. How we use it

• To provide the service: signing you in, transcribing your files and keeping your transcripts available to you.
• To send sign-in emails. We don't send marketing emails.
• To process payments and manage your plan.
• To prevent abuse of the free plan, keep the service secure and fix problems.
• To understand how visitors find and use our public pages, such as the home, pricing and feature pages (see sections 4 and 5).
• To meet legal obligations.

We don't sell your personal information, we don't show ads, and we don't use your recordings or transcripts to train AI models.

3. How long we keep it

• Uploaded audio is deleted from our storage as soon as its transcription finishes. When only a free preview of a long file is transcribed, the rest of the audio is kept for up to 7 days so you can unlock it, and is then deleted.
• Transcripts are kept until you delete them or delete your account.
• Account information is kept until you delete your account.
• Sign-in links expire after 15 minutes. Sessions expire after 30 days.
• Free-plan usage records (hashes of your email and IP address) are kept for 2 days, including after you delete your account, so that deleting and recreating an account can't reset the free limits.
• Server logs are kept for a few days.
• Payment records are kept by Stripe as required by tax and accounting rules.

4. Service providers

We use these providers to run the service. Each receives only what it needs for its task:

• Cloudflare: hosting, database, temporary audio storage and server logs.
• Groq: speech recognition. It receives the audio to produce the transcript.
• Resend: sends sign-in emails. It receives your email address.
• Stripe: payments. Depending on where you live, Stripe may act as the reseller and merchant of record for your purchase.
• Google: Google Analytics measures visits to our public pages (pages viewed, how you arrived, approximate location and device type). It isn't used on sign-in pages, signed-in pages or these legal pages, and it never receives your recordings or transcripts. Google also signs you in if you choose to sign in with Google.
• jsDelivr: delivers the audio-processing component your browser downloads, and sees your IP address as any website would.

These providers may process data in the United States and other countries. Where the law requires it, transfers rely on appropriate safeguards such as the providers' standard contractual clauses.

5. Cookies and storage on your device

• A sign-in cookie (sid) keeps you signed in for up to 30 days. A short-lived cookie is set for 10 minutes during Google sign-in.
• Your browser's local storage remembers that you're signed in (your email and plan, so the menu appears immediately), your preferred transcript view and your playback speed.
• Your browser's database (IndexedDB) keeps a copy of your 5 most recent recordings so you can play them alongside the transcript. This copy stays on your device and is never uploaded. It is removed when you sign out, delete the transcript or choose “Remove audio from this device”.

On our public pages, Google Analytics sets cookies (such as _ga) to count visits, except for visitors in the European Economic Area, the United Kingdom and Switzerland: there it runs without cookies, sending only cookieless measurement. We don't use advertising cookies. You can also block analytics with your browser settings or Google's opt-out browser add-on.

6. Your choices and rights

• Download your transcripts at any time as TXT, SRT, VTT or JSON.
• Delete any transcript from its page.
• Delete your account from the Account page. This deletes your transcripts and any remaining audio, removes your customer record at Stripe and cancels any subscription.
• Sign out of all devices from the Account page.

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have the right to access, correct, delete or export your personal information, and to object to or restrict its processing. To make a request, email support@transcribenest.com. You may also complain to your local data protection authority.

7. Security

All traffic is encrypted with HTTPS. We don't use passwords: sign-in links and sessions are stored only as hashes. No method of transmission or storage is completely secure, but we work to protect your information.

8. Children

The service is not directed to children under 16, and we don't knowingly collect their personal information.

9. Changes to this policy

When we change this policy, we update the date at the top. If a change is significant, we'll let you know by email or with a notice on the site before it takes effect.

10. Contact

Questions or requests about privacy: support@transcribenest.com.