Privacy Policy

Effective Date: April 1, 2026  |  Last Updated: April 1, 2026

1. Introduction

AudioText ("we", "us", "our") provides an AI-powered audio and video transcription service (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service.

By using AudioText, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

3.1 Account Information

• Email address — used for authentication, communication, and account recovery
• Display name — shown in the application interface
• Authentication provider identifiers — when using Microsoft, Google, or Apple sign-in

3.2 Audio & Video Files

• Files you upload for transcription (MP3, WAV, M4A, FLAC, OGG, MP4, WEBM, MOV, ZIP)
• Transcripts and metadata generated from your files (speaker labels, timestamps, language)

3.3 Payment Data

• Subscription plan selection, billing cycle, and payment history
• Payment card details are collected and processed exclusively by Stripe — we never see or store your full card number

3.4 Usage & Analytics Data

• Feature usage patterns (e.g., which export formats you use)
• Transcription job metadata (duration, language, model used)
• Error logs and performance metrics

3.5 Technical Data

• IP address, browser type, operating system
• Access timestamps and referral URLs

4. Purpose of Processing

Purpose	Data Used
Service delivery — transcribing your audio/video files	Audio files, account info
Authentication and account management	Email, name, provider IDs
Billing and subscription management	Payment data (via Stripe)
Quality improvement and feature development	Usage analytics, error logs
Security and abuse prevention	IP address, access logs
Customer support	Account info, transcription metadata

5. Legal Basis for Processing

• Contract performance — processing your audio files and managing your account is necessary to deliver the Service you subscribed to
• Consent — for optional analytics and usage data collection; you may withdraw consent at any time via the consent banner
• Legitimate interest — for security monitoring, fraud prevention, and service reliability
• Legal obligation — for billing records and regulatory compliance

6. Data Retention

Audio files and transcripts are retained based on your subscription tier:

Plan	Retention Period
Starter (Free)	7 days after transcription
Pro	30 days after transcription
Enterprise	90 days after transcription

Account information is retained for the duration of your account. After account deletion, we may retain anonymized analytics data and billing records as required by law (typically up to 7 years for tax purposes).

7. Sub-processors

We use the following third-party services to operate AudioText:

Sub-processor	Purpose	Data Shared
Microsoft Azure	Cloud compute, blob storage, Azure AI Speech (diarization, language detection)	Audio files, transcripts, account data
OpenAI	Whisper transcription, GPT-based post-processing	Audio files, transcript text
Stripe	Payment processing, subscription management	Email, payment details

Each sub-processor is contractually bound to process data only as instructed and to maintain appropriate security measures.

8. Your Rights

You have the following rights regarding your personal data:

• Right of access — request a copy of all your data via GET /api/profile/export or from your account settings
• Right to erasure — delete your account and all associated data via DELETE /api/profile or from your account settings
• Right to data portability — export your transcripts in standard formats (JSON, TXT, SRT, DOCX, CSV)
• Right to object — opt out of analytics processing via the consent banner or by contacting us
• Right to rectification — update your profile information at any time in your account settings
• Right to restriction — request that we limit processing of your data while a complaint is being resolved

To exercise any of these rights, contact us at francisco.teixeira@outlook.com. We will respond within 30 days.

9. International Data Transfers

Your data is processed in the Azure region you select (or the default region configured for your account). If data is transferred outside the European Economic Area (EEA), we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Sub-processor certifications and data protection agreements

Enterprise customers may configure specific Azure regions for data residency compliance.

10. Cookies & Local Storage

AudioText does not use tracking cookies. We use browser localStorage for:

• Authentication tokens (JWT) — required for the service to function
• User preferences — theme selection, language settings, consent choices
• Session state — current workspace configuration

No data is shared with third-party advertising or tracking networks. If you accept analytics via the consent banner, we collect anonymized usage statistics to improve the Service.

11. Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in transit — all data is transmitted over TLS 1.2+
• Encryption at rest — audio files and transcripts are encrypted in Azure Blob Storage using AES-256
• User isolation — each user's data is logically separated; you can only access your own files and transcripts
• Authentication — JWT-based authentication with secure token handling
• Access controls — role-based access control for internal systems
• Infrastructure — hosted on Microsoft Azure with SOC 2, ISO 27001, and GDPR certifications

12. Children's Privacy

AudioText is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email for significant changes
• Display a notice in the application

Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.