Privacy Policy

1. Information We Collect

To provide our podcast transcription services, we collect the following types of information:

• Account Data: Name, email address, and authentication identifiers when you sign up.
• Service Data: The Spotify or Apple Podcast URLs you submit for transcription.
• Generated Content: The text transcripts generated from the audio files you request.
• Payment Data: Payment processing is handled securely by Stripe; we do not store your credit card details on our servers.

2. Audio Processing & Transcription

We act as a processing bridge between podcast platforms and transcription engines:

• No Audio Storage: We do not store original audio files. Audio is fetched from the source URL, processed into text, and the temporary audio data is purged immediately after processing.
• Transcript Ownership: You retain the rights to the transcripts you generate, subject to the copyright of the original content creator.

3. Data Security

We use industry-standard encryption (AES-256) and secure socket layers (SSL/TLS) to protect your data during transmission. While no method of electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional security layers to safeguard your account.

4. Third-Party Services

We share data with third-party service providers only when necessary to provide the Service:

• LemonFox AI: To convert audio to text.
• Stripe: For secure billing and subscription management.
• Google Analytics: To understand how users interact with our platform.
• Cloudflare: For bot detection on our free preview and contact forms (see section 5).
• PostHog: Product analytics, which steps of the service are used and where people stop. Only when enabled; the same records are kept in our own database either way.

We also keep our own record of how the service is used: which steps you reached, whether a transcription was accepted or refused and why, and how long the episode was. To join those steps into one visit before you have an account, we set a first-party cookie (pt_aid) holding a random identifier and nothing else. It is not shared with advertisers, it does not contain your email address or the links you paste, and if you ask us to delete your account the identifier stops being connected to you.

5. Bot Protection (Cloudflare Turnstile)

To stop automated abuse of our free transcript preview and our contact form, we use Cloudflare Turnstile in its invisible mode. Turnstile runs silently in the background: there is no puzzle to solve and nothing appears on screen.

Turnstile processes a small set of client-side signals (your IP address, TLS fingerprint, User-Agent header, and the site key of the page you are on) solely to distinguish human visitors from bots. Cloudflare cannot directly identify individuals from these signals, and they are not used to profile, track, or target you. Cloudflare acts as our processor when securing this site, and as a controller when it uses the same signals to improve Turnstile’s bot detection, relying on its legitimate interests. The signals and any cookies Turnstile sets are strictly necessary for this security purpose.

For full details, see Cloudflare’s Turnstile Privacy Addendum and its Privacy Policy. Questions about Cloudflare’s own processing can be sent to its Data Protection Officer at dpo@cloudflare.com; questions about our use of it can be sent to us using the details below.

6. Your Data Rights (GDPR & CCPA)

Depending on your location, you have the right to:

• Request a copy of the data we hold about you.
• Request that we delete your entire account and all associated transcripts.
• Opt-out of marketing communications.