Privacy Notice

1. Who we are

This Privacy Notice explains how Radoslav Dodnikov ("we", "us", "our") processes personal data in connection with the speech-to-text service available at speechtotext.dev (the "Service"). We act as the data controller for personal data described below.

2. Personal data we collect

• Account data: name, email address, password hash, authentication identifiers.
• User content: audio/video files you upload and the resulting transcripts.
• Usage data: minutes transcribed, features used, log entries, error reports.
• Device & technical data: IP address, browser type, device identifiers, cookies.
• Support data: messages and attachments you send when contacting support.
• Billing metadata: subscription status, plan, invoice references. Card and payment details are collected and processed directly by our payment provider, Paddle, and are not stored by us.

3. Why we use your data and legal basis

• Provide the Service (account creation, transcription, storing transcripts) — performance of a contract.
• Billing & subscription management via Paddle — performance of a contract and legal obligation (tax, accounting).
• Security & fraud prevention — legitimate interests in protecting the Service and users.
• Product improvement & analytics — legitimate interests in improving the Service.
• Customer support — performance of a contract / legitimate interests.
• Marketing communications — only with your consent, which you can withdraw at any time.
• Compliance with legal obligations — where required by law.

4. Who we share data with

• Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, invoicing, and refunds.
• Hosting and infrastructure providers (e.g. Supabase/Lovable Cloud, Cloudflare) that store data and run the Service on our behalf as processors.
• Transcription model providers used to convert audio to text on our behalf.
• Analytics and error monitoring tools used to keep the Service reliable.
• Professional advisers (legal, accounting) where reasonably necessary.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Some of our processors are located outside your country, including outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep account data for as long as your account is active and for a reasonable period afterwards for legal, tax, and audit purposes. User content (audio, video, transcripts) is kept for as long as needed to provide the Service and is deleted on request or when your account is closed. Billing records are kept for the period required by applicable tax law (typically up to 10 years).

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. EEA/UK users also have the right to lodge a complaint with their supervisory authority. We aim to respond to requests within one month.

To exercise your rights, email support@speechtotext.dev.

8. Security

We implement appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data. No system is perfectly secure, but we work to minimise risk.

9. Cookies

We use a small number of essential cookies and similar technologies to keep you signed in and to keep the Service secure. We may also use limited analytics cookies to understand usage. You can control cookies through your browser settings.

10. Changes to this notice

We may update this Privacy Notice from time to time. The "Last updated" date above will reflect any changes; material changes will be communicated through the Service.

11. Contact

For privacy questions, contact Radoslav Dodnikov at support@speechtotext.dev.