1. Data controller
The controller of the personal data collected through transcriptfy.com is us. For any privacy-related matter you can contact us at privacy@transcriptfy.com.
2. Data we collect
We collect different categories of data depending on how you interact with the Service:
- Account data: name, email and encrypted password.
- Usage data: pages visited, actions performed, session duration and device type.
- Uploaded content: audio or video files you choose to transcribe and the generated results.
- Billing data: when you subscribe to a paid plan, data necessary to manage the subscription (through external providers).
We do not intentionally collect sensitive data. We ask that you do not upload files containing personal information of third parties without their consent.
3. Purpose of processing
We process your data for the following main purposes:
- To provide the transcription Service and its associated functionalities.
- To manage your account, authentication and billing.
- To improve the quality of the Service through aggregated usage analysis.
- To send communications related to the Service or relevant news, when you have given your consent.
4. Legal basis
The legal basis for processing your data is the performance of the contract between you and us (provision of the Service), compliance with legal obligations, the legitimate interest in improving the Service and, where applicable, your explicit consent.
5. Data retention
We keep your data for the time strictly necessary to provide the Service and to comply with our legal obligations. Original files uploaded for transcription are deleted after 24 hours. Generated transcriptions are kept until you decide to remove them from your account or until the account is cancelled.
6. Sharing with third parties
We do not sell your data. We may share it only with:
- Infrastructure providers (hosting, databases, payment gateway).
- Artificial intelligence providers supplying the transcription models, bound by confidentiality and data protection agreements.
- Competent authorities when we are legally required to do so.
All third parties we work with are subject to contractual agreements that guarantee protection of your data in accordance with the GDPR.
7. International transfers
Some of our providers may be located outside the European Economic Area. In such cases, we ensure the transfer is carried out with appropriate legal safeguards, such as standard contractual clauses approved by the European Commission.
8. Your rights
As the data subject, you have the right to:
- Access the personal data we process about you.
- Rectify inaccurate or incomplete data.
- Request deletion of your data.
- Object to or limit processing in specific circumstances.
- Request portability of your data in a structured format.
- Withdraw consent when it was the basis for processing.
To exercise any of these rights you can write to us at privacy@transcriptfy.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider your rights have been violated.
9. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration, loss or misuse. Traffic between your device and our servers is encrypted with TLS and sensitive data is stored encrypted at rest.
10. Changes to the Policy
We may update this Policy to reflect legal or operational changes. We will notify you of significant changes through the Service or by email before they take effect.