Privacy Policy

1. Information We Collect

We collect the following information:

• Account information — email address and hashed password if you register with email, or your name and email address if you sign in with Google.
• Transcription data — the podcast episode URLs you submit and the resulting transcripts.
• Usage data — transcription history, credit usage, and account activity.
• Session data — an essential session cookie to keep you logged in (NextAuth).

2. How We Use Your Information

We use your information to:

• Provide and maintain the transcription Service
• Track usage limits and manage your account
• Improve transcription accuracy and performance
• Communicate with you about service updates or issues
• Prevent abuse and enforce our Terms of Service

Legal basis (GDPR): We process your data under the legal bases of contract necessity (to deliver the Service you requested) and legitimate interests (to maintain security and improve the Service). We do not rely on consent as a legal basis for processing.

3. Data Storage & Retention

Your data is stored securely using third-party infrastructure (Teable database). We retain:

• Account information — until you delete your account or request erasure
• Transcription history — until you delete your account or request erasure
• Usage logs — up to 12 months

You may request deletion of your data at any time by contacting us. Deletion requests are fulfilled within 30 days.

4. Data Sharing

We do not sell your personal information. We may share data with third-party service providers who help us operate the Service:

• Teable — database hosting for account and transcription data
• OpenRouter — AI processing for transcription generation
• Lemon Squeezy / Whop — payment processing (no credit card data is stored by us)

These providers are bound by data processing agreements and may not use your data for their own purposes.

5. Third-Party Authentication

If you choose to sign in with Google, Google shares your name and email address with us according to their own privacy policy. We do not receive or store your OAuth provider passwords.

6. International Data Transfers

We use service providers (Teable, OpenRouter) that may process data outside your country of residence. When transferring data from the European Economic Area (EEA) to countries not deemed adequate by the European Commission, we rely on Standard Contractual Clauses or equivalent safeguards to ensure your data receives equivalent protection.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data (subject to legal obligations)
• Data portability — request an export of your data in a machine-readable format (JSON)
• Withdraw consent — if processing is based on consent, you may withdraw it at any time
• Lodge a complaint — you may file a complaint with your local data protection authority (e.g., the ICO in the UK, CNIL in France, or your local equivalent)

CCPA (California residents): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. Tranzkript does not sell your personal information. You will not be discriminated against for exercising your CCPA rights.

To exercise any of these rights, contact us at support@tranzkript.com.

8. Cookies

We use only essential cookies required for authentication (NextAuth session cookies). No tracking cookies, analytics cookies, or third-party advertising cookies are used. Since we use only essential cookies, no cookie consent banner is required under GDPR.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

9. Contact

For privacy-related inquiries, contact us at support@tranzkript.com.