Privacy notice

1. Who is responsible

The controller is Joshua Brenzinger, Straße 1, XXXXX Ort, Germany. Email: team@transcribefa.st. The service is offered as transcribefa.st.

No data-protection officer is appointed. Article 37 GDPR does not require one for this service. Privacy requests go to the email address above.

2. What this service does

You pay once, then upload an audio or video file from your device. We transcribe it with speaker labels and email you a link. You can download text, JSON, SRT, and VTT. There is no account. We do not offer a separate AI-analysis product.

3. Data, purposes, and legal bases

You must provide an email address, payment, and the file if you want the service. We do not make a decision about you that produces legal effects under Article 22 GDPR. Transcription is the service you asked for, not an assessment of you.

4. Other people’s voices, and sensitive data

A recording often contains personal data of people other than you. You may upload it only if you have a legal basis to do so, such as their consent or a research exception that applies to you. You remain responsible for that decision.

Do not upload special-category data under Article 9 GDPR — including health, religion, or sex life — unless you already have a lawful condition under that article. The optional “medical” or “finance” transcription hint only steers the speech model. It does not make this a medical or financial service, and it is not a reason for us to collect that kind of data.

5. Who receives data

We use these processors under Article 28 GDPR. We do not sell personal data.

• Cloudflare, Inc. hosts the website, stores the file and the transcript (R2), stores job records (D1), queues the job, runs speech recognition with the Deepgram Nova-3 model on Workers AI, and sends the transactional email that the transcript is ready or that it failed. Requests are sent with a model-improvement opt-out. We do not use your files to train our own models.
• Stripe Payments Europe, Ltd. and its card-processing affiliates take the payment. We receive the result, your email address, and the amount. We do not receive your full card number. When checkout opens, your browser loads Stripe.js from Stripe. Card entry has to run in their script, so we do not host a copy of it.

Pages, styles, and images are served from this site. Type is set with fonts already on your device. No font file is loaded from another provider.

We also disclose data if a statute, a court, or a competent authority requires it (Art. 6(1)(c) GDPR).

6. Transfers outside the EU

Cloudflare and Stripe are established in, or operate services from, the United States and may process data outside the European Economic Area. Where they are certified under the EU-US Data Privacy Framework, that certification is the transfer tool. Otherwise the transfer rests on Standard Contractual Clauses under Article 46 GDPR, plus the supplementary measures in those providers’ data-processing terms. You can ask us for a copy of the relevant safeguards.

7. How long we keep data

• A finished transcript can be downloaded for 30 days after the job finishes. The status page and the email both show the closing date. After that date the download stops, even if the files are still in storage for a short time.
• A cleanup runs every Monday at 03:00 UTC. It deletes the audio and the transcript once those 30 days have passed. It also deletes failed or unfinished uploads that are older than 30 days.
• You can delete a file sooner with the form below. The email must match the address used at checkout.
• A paid checkout that never becomes an upload expires from the short-term payment table after 24 hours.
• During checkout on this page, the selected file is kept in the browser’s memory until payment completes and the upload to our storage finishes. Closing the tab before upload finishes may require selecting the file again on the success page.
• Invoices and payment records are kept for the German tax retention period: 8 years for accounting vouchers and up to 10 years for books and annual accounts (§ 147 of the Fiscal Code).
• The deletion log (file id, the checkout email used to confirm the request, and the time of the request) is kept for up to 3 years so we can show that the request was handled.

8. Storage on your device

We do not set tracking or advertising cookies, and the site does not store a display preference. Checkout is embedded on this page. The selected file stays in the browser’s memory until you pay, then is uploaded with a secure one-time link. After payment, this browser stores a download cookie so the status link can open the transcript. That storage is strictly necessary for the service you requested (§ 25(2) TDDDG) and does not need consent. Clearing site data removes the download cookie; open the status link again to restore it.

9. Your rights

You can ask us to:

• access your data (Art. 15) and receive a copy;
• correct it (Art. 16);
• delete it (Art. 17);
• restrict processing (Art. 18);
• receive data you provided in a portable format (Art. 20);
• object to processing based on legitimate interests (Art. 21).

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before the withdrawal. You also have the right to lodge a complaint with a supervisory authority (Art. 77). For a private controller established in Germany, that is the data-protection authority of the federal state of the establishment. The list is published by the Federal Commissioner for Data Protection.

Email team@transcribefa.st for any of these requests. If you have the file id from your status link, you can delete the file and transcript yourself. Use the email address from checkout: