Privacy Policy

1. Introduction

WhisperAPI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our transcription service.

2. Information We Collect

2.1 Information You Provide

• Account information (email address, password)
• Audio and video files you upload for transcription (automatically deleted after 24 hours)
• Payment information (processed by our secure payment providers)
• Communication preferences

2.2 Automatically Collected Information

• Usage data and analytics
• Device and browser information
• IP address and location data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Process your payments
• Send service updates and notifications
• Analyze and optimize our service performance
• Comply with legal obligations

4. Data Security

We implement comprehensive security measures to protect your data throughout its lifecycle:

4.1 Encryption Protection

• Encryption at Rest: All uploaded videos and audio files are automatically encrypted using AES-256 encryption with GCM (Galois/Counter Mode) when stored in our Cloudflare R2 storage infrastructure. Encryption keys are securely managed by Cloudflare's enterprise key management systems.
• Encryption in Transit: All data transfers between your device and our servers are protected using Transport Layer Security (TLS/SSL) encryption, the same standard used by banks and financial institutions.

4.2 Additional Security Measures

• Regular security assessments and vulnerability testing
• Multi-factor authentication and access controls
• Secure data storage practices with enterprise-grade infrastructure
• Automatic file deletion after 24 hours to minimize data exposure
• SOC 2 compliant cloud infrastructure providers

4.3 Data Processing Security

Your media files are processed in secure, isolated environments with no persistent storage on processing servers. All temporary files created during transcription are automatically purged upon completion.

5. Data Retention

We automatically delete all uploaded audio and video files after 24 hours to protect your privacy. The resulting transcription text is retained in your account until you choose to delete it. Account information and usage data are retained for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your account data at any time.

Our data retention policies are designed to:

• Protect your privacy by minimizing data retention
• Ensure secure handling of sensitive media files
• Maintain access to your transcription history
• Comply with legal and regulatory requirements

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to data processing
• Export your data

7. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]