Privacy Policy

1. Information we handle

• Account information: your Google sign-in identity, email address, and profile information such as your name or avatar when supplied.
• Your content: uploaded audio or video, generated transcripts, edits, speaker labels, recording titles, folders, and sharing settings.
• Usage and service information: file sizes, durations, upload counts, job status, errors, and technical request information processed by us or our hosting providers, such as IP addresses, browser details, and request times.
• Billing information, when billing is available: Stripe customer and subscription identifiers, subscription status, and billing period dates. Stripe handles payment details; our application does not store your full card number.
• Messages you send us: information included in support or privacy requests.

2. Why we use information

We use this information to sign you in, provide your private workspace, store and transcribe recordings, enable edits and exports, carry out sharing instructions, enforce plan allowances, manage subscriptions, provide support, and maintain the security and reliability of the service. We also retain information where needed to meet legal obligations and resolve disputes.

3. Service providers

We use the following providers to deliver the service. Information is shared with them as needed for their role:

• Google and Supabase: Google sign-in and authentication sessions. We do not receive your Google password. The sign-in permissions requested by this app do not grant access to your Gmail messages or Google Drive files.
• Cloudflare: website hosting, account and recording metadata in D1, audio and transcript storage in R2, background jobs, security, and Whisper transcription processing.
• Microsoft Azure: processing of audio and transcription settings for recordings that use MAI-Transcribe-2.
• Stripe: checkout, payments, subscriptions, and the billing portal when paid billing is enabled.

Provider processing may take place in countries other than your own. Their privacy information is available from Google, Supabase, Cloudflare, Microsoft, and Stripe. We do not sell your recordings or transcripts to advertisers.

4. Private workspaces and share links

Your recordings and transcripts are private to your account by default. If you enable a share link, anyone holding that link can read the transcript and listen to the recording. Turn sharing off to revoke future access through the link. This does not remove copies that someone has already downloaded or retained.

We may also disclose information when necessary to comply with a valid legal obligation, protect the service and its users, or investigate abuse.

5. Cookies and sessions

We use necessary cookies to maintain sign-in sessions and complete authentication securely. Production session cookies are marked Secure and HttpOnly. Blocking or deleting them can sign you out or prevent sign-in from completing. Google, Stripe, and other provider websites may use their own cookies when you visit them.

6. Retention and deletion

We retain recordings and transcripts while you keep them in your workspace. You can delete recordings from the dashboard. Deleting a recording removes its workspace entry and associated stored recording data through the application's deletion process.

Some account, billing, security, or service records may be retained for operational or legal purposes. Provider logs, backups, and downloaded copies may remain subject to their own retention schedules. We do not promise immediate erasure from every provider system or backup.

To request account deletion or help accessing or correcting your information, contact vanthanh12195@gmail.com. We may need to verify your account ownership before acting.

7. Security

The application checks signed-in identity and recording ownership before allowing private access. Stored audio is served through authorized requests or expiring signed URLs. These measures reduce risk, but no online service can guarantee absolute security.

8. Your choices and rights

You can edit transcripts, export supported content, disable share links, and delete recordings in your workspace. Depending on your location, you may have additional rights to access, correct, delete, or restrict the use of personal information, or to contact a data protection authority. Send requests to the contact address above.

If you upload a recording containing someone else's information, you are responsible for having the necessary permission and providing any notices required for recording and transcription.

9. Changes and contact

We may update this policy as the service changes. The date above identifies the latest version. For privacy questions, contact vanthanh12195@gmail.com. Our Terms of Service also apply to use of JotSonic.