Compliance & Data Protection

Key GDPR articles we implement

• Art. 5 — Principles — We follow data minimization, purpose limitation, and accuracy principles. We only collect what's necessary.
• Art. 6 — Lawful basis — We process data based on your consent and legitimate contract performance. You always know why we process your data.
• Art. 15–22 — Your rights — Access, rectification, erasure, portability, and objection — all available to you at any time through your account settings.
• Art. 25 — Privacy by design — Privacy is built into our architecture from the ground up, not added as an afterthought.
• Art. 32 — Security of processing — Encryption at rest and in transit, access controls, and regular security reviews protect your data.
• Art. 33/34 — Breach notification — In the unlikely event of a data breach, we will notify the relevant authorities within 72 hours and affected users without undue delay.

• Minimal risk classification — Our AI transcription is classified as minimal risk. It is optional, user-initiated, and does not involve profiling or automated decision-making.

• Full transparency — We clearly label AI-generated content. You always know when transcription was created by AI, and you can delete it at any time.

• Right to erasure — Delete your account and all associated data permanently. We process deletion requests immediately.
• Data portability — Export all your recordings and data at any time. Available as a ZIP download from your account settings.
• Right of access — Request a complete copy of all personal data we hold about you. We respond within 30 days.
• 360-day recovery window — Changed your mind after deleting? We keep your data recoverable for 360 days before permanent deletion. After that, it's gone for good.