Privacy Policy

1. Scope and who we are

This Privacy Policy explains how MP3 to Transcript ("MP3 to Transcript," "we," "us," or "our") handles information when you visit the website, create an account, purchase a subscription or credit pack, or submit an MP3 for transcription.

This policy applies to the MP3 to Transcript website and service. It does not replace the privacy policies of third-party services that process information on their own terms.

2. Information we handle

Depending on how you use the service, we may handle the following categories of information:

1. Account information — Name, email address, profile image, verification status, authentication method, locale, and account creation or update timestamps.
2. Authentication and session information — Session identifiers, login timestamps, IP address, user agent, password hashes, and, if you choose social sign-in, identifiers or tokens provided by the authentication provider.
3. Audio and transcription content — The MP3 audio you submit, its file name, file size, duration, detected language, and the transcript, timestamps, or subtitle output produced for your request.
4. Usage and credit information — The selected transcription mode, billable duration, credits granted or consumed, remaining balance, credit expiration, transaction history, and related request metadata.
5. Order and subscription information — Product, plan, amount, currency, payment status, billing interval, provider, order and subscription identifiers, invoice details, billing email, discounts, renewal dates, and cancellation status. We do not receive or store your complete payment-card number.
6. Technical and security information — Request time, IP-derived security signals, browser and device information, error records, rate-limit events, and information needed to prevent fraud or abuse.
7. Communications — Information you include when requesting support, reporting a problem, or otherwise contacting us.
8. Analytics information — If analytics is enabled, information such as visited pages, referring page, approximate location, device type, and interaction events may be processed by the configured analytics provider.

Please do not upload audio containing information you are not authorized to process or disclose.

3. How MP3 transcription is processed

When you submit an MP3, the service validates the file and determines its duration in memory. The audio is then sent to the transcription provider associated with the mode you selected:

• Standard mode uses Cloudflare Workers AI.
• Premium mode, when available, uses Deepgram.

Our application does not write the uploaded MP3 or the returned transcript to its database, object storage, or local file storage. The audio and transcript are handled for the active request and the result is returned to your browser. Signed-in usage records may still include the file name, duration, selected mode, and credits consumed, but not the audio file or transcript text.

The transcription providers process the submitted audio to return the requested result. Their infrastructure, contractual retention settings, security practices, and legal obligations apply to that processing. Cloudflare states that Workers AI customer content is not used to train or improve AI models or services without explicit consent; see Cloudflare Workers AI data usage. Deepgram describes its processing of customer data in its Privacy Policy.

4. Why we use information

We use information to:

• Provide accounts, authentication, transcription, downloads, subscriptions, and credit balances.
• Validate files, calculate billable audio duration, reserve or restore credits, and return transcription results.
• Process purchases, renewals, cancellations, invoices, refunds where applicable, and payment disputes.
• Maintain security, enforce rate limits, prevent duplicate guest trials, and detect fraud, abuse, or unauthorized access.
• Diagnose errors, maintain service reliability, and improve usability and performance.
• Respond to support requests and send essential account, billing, security, or legal notices.
• Comply with tax, accounting, legal, and regulatory obligations and enforce our Terms of Service.

Where data-protection law requires a legal basis, we generally rely on performance of a contract, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required for optional analytics or communications.

5. Cookies and similar technologies

We use essential cookies and local browser technologies to operate the service. These may include:

• Authentication cookies that keep you signed in and protect account sessions.
• Guest-trial cookie that records whether the browser has used the one-time guest transcription. This cookie may remain for up to one year.
• Security and preference storage used for fraud prevention, routing, or interface settings.
• Optional analytics cookies or scripts if an analytics service is enabled.

You can block or delete cookies through your browser. Blocking essential cookies may prevent sign-in, guest-trial enforcement, checkout, or other service functions from working correctly.

6. When information is shared

We do not sell or rent personal information. We may disclose information only as needed to operate the service or meet legal obligations, including to:

• Hosting and infrastructure providers, including Cloudflare, which hosts the Worker, database infrastructure, security services, and Standard transcription processing.
• Transcription providers, including Deepgram for Premium transcription when enabled.
• Payment processors shown during checkout, which process payment credentials and transactions under their own privacy terms.
• Authentication providers, such as Google or GitHub, if you choose a social sign-in method that is enabled.
• Email, analytics, and support providers if those optional services are configured.
• Professional advisers, auditors, insurers, regulators, courts, or public authorities where reasonably necessary or legally required.
• A successor in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

Service providers are permitted to process information only for the services they provide to us and subject to their applicable agreements and legal obligations.

7. Retention

We retain information only for as long as reasonably necessary for the purposes described above:

• Uploaded MP3 audio and transcript output are not persisted by our application after the active request.
• Account and session records are retained while your account is active and for a reasonable period afterward for security, dispute, or recovery purposes.
• Usage, credit, order, subscription, invoice, and payment records may be retained as needed to provide balances, resolve disputes, prevent fraud, and meet accounting, tax, or legal requirements.
• Guest-trial cookies may remain for up to one year unless you delete them sooner.
• Operational logs are retained according to security, troubleshooting, and infrastructure needs.

Third-party providers may apply their own retention schedules. Deleting your account does not necessarily require us or a payment provider to erase records that must be kept for legal, tax, fraud-prevention, or dispute-resolution purposes.

8. International processing

Our infrastructure and service providers may process information in countries other than your own, including the United States. Where required, we use contractual or other lawful transfer mechanisms and rely on the safeguards offered by our service providers. Data-protection laws in those locations may differ from the laws where you live.

9. Security

We use reasonable technical and organizational safeguards designed to protect information, including encrypted transport, access controls, secret management, authentication protections, and limited application storage of audio content. No online service can guarantee absolute security, and you remain responsible for protecting your account credentials and the device you use to access the service.

10. Your choices and privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a data-protection authority.

You may update certain account information through the service. To exercise another privacy right, contact us using the method available on the website and provide enough information for us to verify and respond to the request. We may limit or deny a request where permitted by law, including where information must be retained for security, contractual, tax, or legal reasons.

You may opt out of non-essential communications using the unsubscribe method provided in the message. Essential service, billing, security, and legal notices cannot be opted out of while the relevant account or transaction remains active.

11. Children

The service is not directed to children under 18 or the minimum age required to consent to online services in their location. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided information improperly, please contact us.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to the service, providers, or legal requirements. We will update the date shown on this page and, where appropriate, provide additional notice of material changes.

13. Contact

For privacy questions or requests, use the contact or support method made available through the website or your account. Please do not send sensitive audio or authentication credentials in a support message unless we specifically request a secure submission method.