Privacy policy for international users
Status: draft. It has not been reviewed by a lawyer, and the places marked [ЗАПОЛНИТЬ: …] are still open. Read the general privacy policy for the version that covers everyone, and the terms of service for international users for the rules of using the service.
This policy describes what happens to your data when you use Transcrib Si from outside Russia. It covers the transcrib.si website, the web app, the REST API at api.transcrib.si and the MCP server. It is written for people, not lawyers. If anything here is unclear, write to support@transcrib.si and we will explain it in plain words.
1. Who is responsible for your data
Transcrib Si publishes and operates the service. Publisher of this site: Transcrib Si, [ЗАПОЛНИТЬ: юридическое лицо, зарегистрированное наименование, адрес регистрации].
For most of the data described here — your account, your plan, your invoices, our own operational records — we are the controller: we decide why the data is processed and how long it is kept. For the content you send us to be transcribed, we act on your instructions: in that relationship we are the processor, and a signed Data Processing Agreement sets the rules.
2. What we collect
Account data
- Your email address.
- A hash of your password. We never store the password itself.
- Your account identifier, your plan and the date the account was created.
Content data
- The audio and video files you upload, and the language and settings you chose for each file.
- The transcript we produce from them, with timestamps, speaker labels and any edits you make.
Usage data
- How many files you uploaded per day and how many minutes of audio were transcribed per month. We need this to apply the plan limits and to show you your own usage.
- For API keys: the name you gave the key, its prefix, when it was created, when it was last used, and whether it was revoked. The key itself is stored only as a hash, so we cannot show it to you again either.
Billing data
- Your Stripe customer identifier, your plan, the subscription status and the end of the current period.
- Invoices. Stripe handles card numbers and bank details; those never reach our servers.
Technical data
- IP address, user agent, request timestamps and error logs, kept for security and to diagnose faults.
- The session token that keeps you signed in, stored in your browser's local storage.
Communications
- Emails you send us, including support requests, security reports and legal requests.
What we do not collect
- Card numbers, CVVs or bank credentials.
- Advertising identifiers. We run no advertising and no cross-site tracking.
- The contents of the files that sit on your computer and never get uploaded.
- Anything from a third-party analytics script, because we do not run one.
We do not use your audio or your transcripts to train models for other customers, and we do not sell your data to anyone.
3. Why we use it
- Content data — to produce the transcript you asked for, to show it back to you, and to export it in the format you choose.
- Account data — to create and protect your account, and to send you service messages about billing or changes to the service.
- Usage data — to enforce the daily file limit and the monthly fair-use allowance, and to show you where you stand.
- Billing data — to take payment, issue invoices and handle refunds.
- Technical data — to keep the service running, to prevent abuse and fraud, and to investigate security incidents.
- Communications — to answer your questions and to keep a record of what we agreed.
Where the GDPR or the UK GDPR applies, we rely on the following bases: performance of our contract with you for the account, the content and the billing; our legitimate interests in operating and securing the service for the technical data; legal obligations for tax and billing records; and your consent where we ask for it. You can withdraw consent at any time, and we will stop the processing it covers. [ЗАПОЛНИТЬ: подтвердить юристом формулировку оснований обработки]
4. Where your data is processed
This is the part we do not hide, because the answer is not "everywhere in the EU".
- Our own transcription engine. Your file is processed on the infrastructure that runs our own engine, which we run ourselves. Those servers are located outside the United States —
[ЗАПОЛНИТЬ: страна и регион размещения]. Uploading a file therefore means transferring its content to that country. This is the normal path for every file, in every language. - Cloud fallback for clean English. When a file is entirely in English and the fallback is switched on, the audio is passed to a third-party cloud speech provider whose infrastructure is in the United States. This happens only in that case, only for the file you sent, and only when the provider is configured for the service. We tell you because it is the one case where your file leaves our own machines.
- Stripe — for payments, subscriptions and invoices.
- Our hosting and email providers — they run the servers and deliver messages to you, under written data-processing terms.
Nobody else receives your data. We do not sell it, we do not share it for advertising, and we do not hand it to data brokers.
International transfers. Some of the processing above happens outside the EEA, the UK and Switzerland. If you are in that region, write to legal@transcrib.si and we will tell you which transfer mechanism covers your region — [ЗАПОЛНИТЬ: название механизма, например стандартные договорные условия ЕС, и подписанный экземпляр]. We do not claim US data residency: the service is not hosted in the United States.
5. How long we keep it
- Audio files and transcripts — until you delete them in the app. On the Free plan, transcripts are kept for 7 days.
- Deleted files — removed from the live system immediately, and from backups within 30 days.
- Finished jobs in the queue — dropped within 7 days of processing.
- Technical logs — 30 days.
- Billing and tax records — for as long as the law requires us to keep them.
- Account data — until you close the account, then deleted within 30 days, except records we are legally required to keep.
[ЗАПОЛНИТЬ: владелец — подтвердить, что эти сроки выключены в коде (поисковый retention-job не найден), иначе смягчить формулировки]
6. Your choices and your rights
Depending on where you live, you may have the right to access your personal data, correct it, delete it, export it, object to certain processing, withdraw consent and complain to a regulator. We do not treat people differently for exercising these rights.
- Edit or delete a transcript — do it in the app. Deleting removes the file and the text from the live system straight away.
- Close your account — write to support@transcrib.si with the subject "Close account". We delete the account data within 30 days.
- Get a copy of your data — write to us and we will send it. We answer within 30 days.
- Object, restrict or complain — write to us first. If you are in the EEA or the UK, you can also complain to your local data protection authority; if you are in California, you can complain to the California Privacy Protection Agency.
Under the CCPA/CPRA and similar US state laws you also have the right to know what personal information we collect and how we use and disclose it, to correct it, to delete it, to limit the use of sensitive personal information, and to be free of discrimination for exercising any of these rights. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of and we do not offer an "opt out of sale or sharing" mechanism.
7. Cookies, local storage and analytics
We run no advertising and no analytics. There is no Google Analytics on this site, no advertising pixel, no heatmap tool, no chat widget and no third-party tracker of any kind. All assets — styles, scripts, fonts — are served from our own domain, so nothing about your visit is reported to anyone else.
The site keeps two things in your browser's local storage: the token that keeps you signed in, and your light or dark theme choice. Clearing your browser data removes both. Because there are no tracking cookies, there is nothing here that needs a consent banner — and if we ever add a cookie that is not strictly necessary, we will ask first and say what it does.
8. Security
Traffic is encrypted with TLS. Passwords and API keys are stored only as hashes. Uploaded files are kept on our own infrastructure, separate from any other service we run, and are reachable only from the transcription path. We do not write the content of your audio or your transcripts into logs. The details are on the security page.
9. Rights holders and copyright complaints
We do not publish your transcript. Your file and your text stay in your account and are visible to you and to us. We are therefore not a publisher of user content — but if you believe a transcript in our system infringes your copyright, we will still act on a proper request.
- Write to legal@transcrib.si with the subject "Rights holder request".
- Tell us who you are and that you hold the rights in the work, which recording or transcript you mean (the account, the file name and the date is enough), and what you want us to do.
- We will confirm the request, look at what we hold, and either delete the material or refuse with a reason. We will also tell the account that submitted it that a request was made, unless the law allows us not to.
Requests must come from the rights holder or from someone they authorise. A request that is incomplete or abusive gets no reply beyond an explanation. Postal notices about copyrighted material can be sent to [ЗАПОЛНИТЬ: почтовый адрес для официальных уведомлений — нужен для соблюдения требований 17 U.S.C. § 512(c)(3)].
10. Children
The service is not for children under 13, and not for anyone under the age of digital consent in their country. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy as the service changes. The effective date at the top always shows the current version. If a change materially affects how we use your data, we will tell you by email before it takes effect.
12. Contact
Support: support@transcrib.si
Privacy and legal questions, and rights requests: legal@transcrib.si
Security reports: security@transcrib.si
Publisher: Transcrib Si
Postal address: [ЗАПОЛНИТЬ: почтовый адрес]