Privacy Policy

Note: This is an English translation provided for convenience. The legally binding version of this Privacy Policy is the Slovak version; in case of any discrepancy, the Slovak wording prevails. 1. Basic provisions The controller of personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the "GDPR") is the supplier listed in the Contact section (the "Provider"). The Provider's contact details are listed in the Contact section. The Provider has not appointed a data protection officer. Personal data means any information about an identified or identifiable natural person under Article 4(1) GDPR. 2. Sources and categories of personal data processed The Provider processes personal data you have provided directly (e.g. during registration or ordering) or that it obtained in the course of fulfilling your order. This mainly includes: - registration data: e-mail address, password (stored in encrypted form), and possibly a name obtained when signing in with a Google account - billing data: name or company name, address, company ID / tax ID / VAT ID, order history when purchasing credit - uploaded files and their transcripts: the audio and video recordings you upload for transcription and the text produced from them - technical and operational data: IP address, cookies, date and time of sign-in, browser type - communications: the content of messages you send us, e.g. via the contact form or by e-mail 3. Legal basis and purpose of processing - providing the Service (transcribing recordings, generating outputs, account management) — performance of a contract under Article 6(1)(b) GDPR - processing payment and issuing invoices — performance of a contract and compliance with legal obligations (accounting) under Article 6(1)(b) and (c) GDPR - responding to your questions and customer support, protection against misuse of the Service — the Provider's legitimate interest under Article 6(1)(f) GDPR - traffic measurement and marketing (e.g. Google Analytics) — only on the basis of your consent under Article 6(1)(a) GDPR, details in the Cookies document 4. Data retention period - uploaded recordings are deleted automatically immediately after transcription is completed - the generated transcript text is kept while your account is active or until it is cancelled - billing and accounting documents are kept for the statutory period, generally 10 years - account data is kept until you cancel the account or request erasure - cookies according to their category, see the Cookies document After the retention period, the Provider deletes the personal data. 5. Recipients of personal data To provide the Service we use the following third parties, which process data on the Provider's behalf and only to the extent needed for the given function: a cloud partner providing computing power for AI speech recognition (processes uploaded files), a translation service provider (if you choose subtitle translation, the transcript text is sent for translation), a payment gateway (processes payment data when purchasing credit), a billing/accounting system (issuing and recording tax documents), and e-mail and authentication infrastructure, e.g. Google (delivering notifications, signing in with a Google account). Third parties may process your data only to the extent needed to provide the given function and may not use it for other purposes. The Provider does not intend to transfer personal data to a third country except in the cases described in point 6. 6. International data transfer Part of the processing, in particular the computationally intensive AI transcription and translation, may take place on servers outside the European Economic Area. In that case the Provider ensures an adequate level of protection through standard contractual clauses approved by the European Commission or another appropriate mechanism under the GDPR. 7. Your rights Under the conditions set out in the GDPR you have the right of access to your personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object to processing, and the right to lodge a complaint with the Slovak Office for Personal Data Protection if you believe your right to data protection has been infringed. You are not obliged to provide personal data — however, without registration and billing data we cannot provide you the Service. A detailed description of the individual rights and how to exercise them is given in the separate GDPR document. 8. Automated decision-making We do not use your data for automated decision-making or profiling with legal effects on you. 9. Data security measures The Provider declares that it has taken appropriate technical and organizational measures to secure personal data, in particular: data transfer is encrypted (HTTPS), passwords are stored in encrypted form, and access to personal data is limited to the Provider's authorized persons, who are bound by confidentiality. 10. Cookies We always use necessary cookies (sign-in, distinguishing the free allowance). We set analytics and marketing cookies only with your consent — details and the option to change your consent are given in the Cookies document. 11. Final provisions By creating an order or registering, you confirm that you are familiar with and fully accept these privacy terms. We may update these principles from time to time; the current version is always published on this page, and we will inform you of material changes by e-mail as well.