Privacy Policy

Last updated: May 2026

Who runs Transcribe?

Transcribe (transcribe.spotpris.today) is run by Edwin, an individual based in Sweden. It is a personal project, not affiliated with any company or organisation. Under GDPR, the data controller is therefore an individual based in the EU. Contact happens via the on-site contact form — for privacy reasons, I do not publish my personal email address here.

What data is collected?

When you create an account, the following may be collected: email address, hashed password (if you use password login) or OAuth identifier (Google), and optionally a name. When you record or upload audio, the audio file itself is processed (see "Audio handling" below), and the resulting transcript is stored against your account so you can access it from your history and notebooks. For paid hour-pack purchases, Stripe handles card details — I only see a payment reference, never card numbers. For all visitors, the following is also logged: IP address (anonymised after 30 days), browser type, and pages visited.

Audio handling

When you record or upload audio, it is sent to a third-party speech-to-text provider (currently OpenAI) for transcription. The audio is transmitted over TLS and is processed only to produce the transcript. The provider does not retain the audio for training under their API terms. After transcription, the audio file is stored on my infrastructure only as long as needed to deliver the transcript back to you and is then removed; the resulting transcript is kept in your account until you delete it. You can delete any individual transcription or your entire account at any time from the app.

Cookies

Strictly necessary cookies are used for login sessions and language preferences — without them, the site does not work. No advertising cookies are set. There are no third-party trackers used on the site.

Third-party services

To deliver the service, the following external providers are used:

  • · OpenAI — speech-to-text and translation processing (USA, transferred under SCC). Audio is not retained for model training under the API terms.
  • · Stripe — handles payments for hour packs (Ireland/USA, transferred under SCC).
  • · MongoDB Atlas — database hosting in the EU (Frankfurt region).
  • · Railway — application hosting (USA, transferred under SCC).
  • · Email provider — used only for transactional email (account verification, contact-form replies).

Your rights (GDPR)

As a visitor in the EU/EEA, you have the right to request access to, correction of, or deletion of your personal data. You also have the right to object to processing, the right to data portability, and the right not to be subject to automated decision-making. To exercise these rights, use the contact form on the site — I respond within 30 days as required by GDPR. You may also lodge a complaint with the Swedish Data Protection Authority (IMY).

How long is data kept?

Account data and transcripts are stored as long as your account is active. When you delete your account, all personal data and transcripts are removed within 30 days (except billing records that must be kept for 7 years under Swedish accounting law). Audio uploads are removed shortly after transcription. Anonymised access logs are kept for up to 30 days.

Data transfers outside the EU

Some providers (OpenAI, Stripe, Railway) may process data outside the EU. For these transfers, the EU Standard Contractual Clauses (SCC) are applied as the legal basis.

Children under 16

Transcribe is not directed at children under 16. I do not knowingly collect personal data from minors. If you discover that an account was created by a minor, please get in touch and I will remove it.

Changes to this policy

For significant changes, this page and the date above are updated. If a change materially affects you (e.g. a new third-party service), logged-in users will be notified by email. It is your responsibility to review the policy on visit.

Privacy questions?

Use the contact form with subject "General Inquiry" or mention GDPR in your message. I respond personally. To the contact form →