What we keep, what we delete.

Uploads go directly to a private Google Cloud Storage bucket in australia-southeast1. Files are never public and never listed — every status, download, cancel, and delete requires the same anonymous session (or account) that created the job.

Inputs are deleted as soon as processing succeeds. Results stop being downloadable about 90 minutes after completion, and storage lifecycle rules remove the bytes after that. Use “Delete now” any time to remove a job and its files immediately — that path runs straight away rather than waiting.

Being precise about timing: the 90-minute mark is when we stop serving a result, not a guaranteed deletion moment. A scheduled cleanup job that deletes on a fixed timer is not running yet, so an abandoned upload can sit in private storage until the storage lifecycle rule removes it. Treat the 90-minute window as “download it now”.

We log job metadata (tool, sizes, durations, errors) to measure cost per successful job — never file contents.

Your email address. To open a transcript you make from the link box, you give your email and we send a sign-in link and a code. We keep the address on your account, with when you first and last signed in and whether you asked for product news. We send emails about your account and your transcripts (sign-in links, results, receipts) because they are part of the service. We send product news and offers only if you tick that box or say yes when we ask; signing up alone never means yes. Every such email has a one-click unsubscribe link and our postal address, and you can ask us to delete the address at any time on the feedback page. We do not sell or share it. Transcripts made from links are public pages and do not show who asked for them.

Who asked for a public transcript. When you are signed in and make a transcript from a link, we record that your account asked for it. We never show this on the page. We use it only to reach you if the page has to come down, for example under our content policy or after a copyright claim.

Payments. If you buy Pro or credits, Stripe takes the payment. We never see or store your card number. We keep your Stripe customer id, your plan's state, and which credits each payment bought, so a refund can take them back. To allow one free trial per person, we keep the card's fingerprint (an id Stripe gives us, not the number) and, if you sign in with Google, your Google account id. Stripe keeps your billing details under its own privacy policy.

Anonymous session ids are abuse controls, not reliable personal identity. One job runs at a time per session; a per-day cap is planned but not enforced yet. Do not upload anything illegal or anything you do not have the right to process.