Privacy Policy
1. Introduction
Transcriptica Inc. ("Transcriptica", "we", "us", "our") operates transcriptica.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered transcription and content transformation platform. We are headquartered in Ontario, Canada.
2. Information We Collect
Account Information
- Email address, name (provided during registration)
- Authentication data (managed by Supabase Auth)
- Payment information (processed by Stripe — we never store card numbers)
Content Data
- Video/audio URLs you submit for transcription
- Uploaded audio and video files
- Transcripts generated from your content
- AI-generated outputs (summaries, blog posts, social content, etc.)
- Chat interactions with AI about your transcripts
Usage Data
- Pages visited, features used, session duration
- Browser type, device type, operating system
- IP address, approximate location (city-level)
- Referring URL
Cookies and Tracking
See Section 8 (Cookies) and our Cookie Policy.
3. How We Use Your Information
- Provide, operate, and maintain our services
- Process transactions and send related information
- Generate transcripts and AI-powered content outputs from your submissions
- Improve, personalize, and expand our services
- Understand and analyze usage patterns
- Communicate with you (service updates, support, marketing with consent)
- Detect and prevent fraud or abuse
4. Third-Party Service Providers
We share data with the following providers solely to operate our service:
| Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase (AWS us-east-1) | Authentication, database | Account data, transcripts, AI outputs | supabase.com/privacy |
| AssemblyAI | Audio/video transcription | Uploaded audio files | assemblyai.com/privacy |
| Anthropic (Claude) | AI content generation | Transcript text (for generating outputs) | anthropic.com/privacy |
| Stripe | Payment processing | Email, payment info | stripe.com/privacy |
| Cloudflare R2 | Audio file storage | Uploaded audio files | cloudflare.com/privacypolicy |
| Vercel | Website hosting | IP address, usage data | vercel.com/legal/privacy-policy |
| Railway | Transcription microservice | Video URLs | railway.app/legal/privacy |
| Google Analytics | Usage analytics | Anonymized usage data, IP | policies.google.com/privacy |
| Microsoft Clarity | Session recordings, heatmaps | Anonymized interaction data | privacy.microsoft.com |
| PostHog | Product analytics | Usage events, anonymized data | posthog.com/privacy |
| Sentry | Error monitoring | Error logs, browser info | sentry.io/privacy |
| Tawk.to | Live chat support | Chat messages, email if provided | tawk.to/privacy-policy |
5. Data Retention
- Free tier: Audio files are automatically deleted after 7 days. Transcripts and AI outputs are retained until you delete them or your account.
- Pro/Power tier: Audio files are stored permanently. Transcripts and AI outputs retained until deletion.
- YouTube caption-based transcripts: No audio is stored.
- Account deletion: All data is permanently deleted within 30 days of request.
- We may retain anonymized, aggregated data for analytics.
6. Data Storage and International Transfers
- Primary data storage: Supabase (AWS us-east-1, United States)
- Audio storage: Cloudflare R2 (global edge network)
- Your data may be processed in the United States and other countries where our service providers operate.
- For EU users: We rely on Standard Contractual Clauses and adequacy decisions for international transfers. Canada has partial adequacy status from the European Commission for PIPEDA-covered transfers.
7. Your Privacy Rights
For all users
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Withdraw consent for marketing communications
- Request a copy of your data in a portable format
Additional rights for EU/EEA residents (GDPR)
- Right to restrict processing
- Right to object to processing
- Right to data portability
- Right to lodge a complaint with your local supervisory authority
Additional rights for California residents (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination
To exercise any of these rights, contact us at support@transcriptica.com. We will respond within 30 days.
9. Security
We implement appropriate technical and organizational measures including: encryption in transit (TLS/HTTPS), encrypted database connections, secure authentication via Supabase, rate limiting, Content Security Policy headers, and regular security audits. No method of transmission or storage is 100% secure — we cannot guarantee absolute security.
10. Children's Privacy
Our service is not intended for anyone under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last Updated" date at the top indicates the most recent revision.
12. Contact Us
For PIPEDA-related inquiries, you may also contact the Office of the Privacy Commissioner of Canada.
For GDPR-related complaints, you may contact your local EU Data Protection Authority.