Privacy notice
Effective 18 October 2026. Operator/contact: Amir Gomaa, Egypt, mo.gomaa.formal@gmail.com.
What is processed
Uploaded audio/video, filenames, machine transcripts, selected review mode, AI-derived notes and your corrections are processed to deliver the requested service. An encrypted HttpOnly secure session cookie identifies the workspace for up to 30 days. Recovery keys are stored only as keyed hashes. Anyone holding a key can access the workspace: keep it private. We use keyed network-address hashes for throttling and aggregate operational counts. No advertising trackers or session replay are installed.
Providers
Cloudflare routes HTTPS requests between your browser and our hosting provider. Requests, network metadata and uploaded content pass through its infrastructure and may be processed outside your country. The gateway streams private responses with caching disabled; Cloudflare may retain network and security data under its own policies.
Modal hosts storage and compute outside your country where applicable; faster-whisper runs in that environment. Media is not sent to DeepSeek for speech recognition. If you explicitly select AI review, transcript text is sent to DeepSeek's API, subject to its data policies and processing locations. This is not a claim of zero provider retention. Paddle independently handles checkout/payment/billing/fraud data as merchant of record. Payment JavaScript loads only on a dedicated checkout page, not in the recording workspace. We do not store card details or train models on customer files.
If you explicitly request source lookup, the selected claim text is sent to Crossref for scholarly metadata search. Crossref logs requests under its own policies. Matching metadata is not a truth verdict; no entire recording or transcript is sent for that lookup.
Retention and rights
Source files, checkpoints, outputs and corrections expire after 48 hours through scheduled cleanup. Payment, credit-use and recovery records remain separately to honor unused balances, resolve disputes, prevent fraud and meet applicable accounting obligations. Encrypted financial snapshots retain seven daily versions and exclude recordings, transcript text and filenames. Contact us for access, correction or deletion requests; ownership must be verified before disclosure. Legally necessary financial records may need to remain after a deletion request. Do not send sensitive media or recovery keys by email. Avoid regulated/confidential use requiring safeguards we have not agreed to.