Privacy Policy

1. Introduction

Transcript Guru ("we," "us," or "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Your data is never sold to third parties, never used for advertising, and never used to train AI models. We collect only what is necessary to provide the service.

2. Data Controller

Transcript Guru is the data controller for your personal data. You can reach us at [email protected].

3. Data We Collect

3.1 Account Data

When you create an account, we collect:

• Email address: used for authentication and service communications
• Password: hashed with a one-way algorithm, so we never store or see your plaintext password
• Account preferences: plan type, credit balance, and settings you configure

3.2 Usage Data

To provide and improve the service, we collect:

• Transcript history: video IDs you process, languages requested, and timestamps
• Credit transactions: a ledger of your credit usage to track your quota

3.3 Technical Data

For security and performance, we collect:

• IP address: used for security, fraud prevention, and rate limiting
• Browser and device info: used to ensure compatibility and identify sessions

3.4 Payment Data

Payment information (card number, billing address) is collected and processed exclusively by our payment processor. We only store a reference ID to link payments to your account. We never see or store your full card details.

3.5 Uploaded Content

When you use the service, we process the video URLs, titles, captions, transcript text, prompts and files needed for your requested features. AI transcription processes audio, including audio extracted from videos. Recordings, captions and prompts may contain personal information. We use this content to provide transcription, translation, summaries and other tools you choose.

3.6 Data We Do Not Collect

• We do not use tracking cookies or third-party analytics for advertising
• We do not collect biometric data
• We do not knowingly collect data from children under 16

3.7 Optional Extension Feedback

If you submit the extension uninstall survey, we receive your chosen reason, optional follow-up choice, written comment and any email address you provide for a reply. Your extension may include its version, browser language and type, approximate installation age, local transcript-load and AI-start counts, and a recent sign-in and plan snapshot. The survey does not automatically include video URLs or transcript contents.

The extension stores a random feedback-only link locally. We store a hash of that link to recognize an issued survey and prevent duplicate responses. It is separate from your login and does not establish that you removed the extension. If you explicitly choose to include your signed-in plan, we verify the current plan using your existing session. The feedback record stores that plan without your account identifier.

Feedback remains in our product analysis history so we can compare issues over time. You can request deletion by contacting us below. An optional email is used to follow up about your feedback and does not subscribe you to marketing. A temporary record in your browser tab keeps the feedback link and retry identifier available for up to 24 hours. When enabled, Cloudflare Turnstile processes browser and network information to help prevent automated submissions. See the Cloudflare privacy policy.

3.8 Extension Usage Measurement

Basic extension usage measurement is enabled by default where your browser's data permissions allow it. You can disable it at any time in the extension settings. Turning it off stops reporting and clears events waiting to be sent.

These measurements include a random installation identifier, coarse browser and version information, the extension release, display language, action and feature names, outcome categories and approximate timing. They help us understand which features work and where reliability needs improvement.

Usage measurements do not include video URLs, transcript text, filenames, searches, prompts, email addresses or account identifiers. We do not link these measurements to your account or use them to track paid conversion.

Raw usage events are retained for up to 30 days. Reports describe the installations that reported activity during the selected period, rather than all extension installations.

3.9 Extension Storage

The extension stores preferences, consent settings and a sign-in cache containing your email address, plan and credit balance in your browser. It also keeps bounded transcript caches and pending handoffs so requested features can continue across page changes. It uses secure authentication cookies and does not persist your password or bearer tokens in extension storage. Signing out clears the sign-in cache.

4. How We Use Your Data

We use your personal data for the following purposes:

• Provide the Service: process transcripts, translations, and AI features, and manage your account and credits
• Authentication and security: verify your identity, prevent fraud, and enforce rate limits
• Service communications: send verification emails, password resets, and billing notifications
• Payment processing: process subscriptions and credit purchases

We send occasional account tips and upgrade reminders based on your account activity, including unfinished checkouts. You can turn these off during signup, in Settings, or through the unsubscribe link in an email. We send product news and promotional campaigns only if you opt in separately. We do not sell or rent your personal data to third parties.

5. Third-Party Services

We work with trusted third-party services to operate Transcript Guru. These include services for:

• Payment processing: to securely handle payments
• Email delivery: to send account messages and the optional emails you receive (receives your email address and the message content)
• AI processing: text providers receive the transcript content and prompts needed for summaries, translations and other text features. Speech providers may receive audio for AI transcription. This content may contain personal information. When you send a transcript to your own external AI app, that provider receives the selected text and prompt under its own privacy terms.
• Cloud infrastructure: to host and store data securely

Each processor operates under appropriate data processing agreements. For transfers outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. Data Retention

• Account data: retained while your account is active, and deleted when you close your account
• Session data: sessions expire automatically, and revoked sessions are retained briefly for security audits
• Transcript history: retained while your account is active
• Payment records: retained as required by tax and financial regulations
• Deleted accounts: upon deletion, personal data is purged within 30 days

7. Your Rights

You have the following rights over your personal data:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data via your Settings page or by contacting us
• Erasure: delete your account from Settings, which removes your personal data
• Data portability: request your data in a machine-readable format
• Restriction: request that we limit processing of your data
• Objection: object to processing based on legitimate interest
• Withdraw consent: where processing is based on consent, you may withdraw at any time

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Security

We implement industry-standard security measures to protect your data, including encrypted storage, secure authentication, and strict access controls. All data is encrypted in transit using HTTPS. No system can be completely secure, so while we take extensive measures to safeguard your data, we cannot guarantee absolute security.

9. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use tracking cookies for advertising. For details, see our Cookie Policy.

10. Children

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email or through the Service. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related questions or requests, contact us at [email protected].

If you are in the EU/EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.