Privacy Policy

Introduction

At WhisperAI, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice transcription service.

Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

• Name and email address
• Account credentials
• Profile information
• Payment information (processed securely through third-party providers)

Audio Data

When you use our transcription service, we process your audio recordings to generate transcriptions. Uploaded or recorded audio is stored as needed to provide playback, downloads, retries, editing, and deletion controls. Developer API uploads are handled in the separate API service; public audio_url jobs are fetched or proxied as needed for transcription.

Usage Information

We automatically collect certain information about your use of our service, including:

• Device information and browser type
• Usage patterns and preferences
• Log data and analytics

How We Use Your Information

We use your information to:

• Provide and improve our transcription services
• Process your audio recordings and generate transcriptions
• Manage your account and subscriptions
• Communicate with you about our services
• Ensure security and prevent fraud
• Comply with legal obligations

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure data centers and access controls
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis

Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations. You can delete your recordings and account data at any time through your account settings.

WhisperAI does not currently offer a self-service setting to keep a transcript while opting out of source-audio storage for uploaded files. You can delete individual recordings, delete API transcripts through the API, use a public URL instead of POST /v1/upload when appropriate, or delete your account.

Third-Party Services

Our service uses speech-to-text and AI providers for transcription processing and related audio intelligence features. Audio data sent to these processors is handled under their applicable data processing terms. We do not share your personal information with third parties except as necessary to provide our services or as required by law.

Your Data Protection Rights (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have comprehensive rights regarding your personal data:

• Right of Access

  View all personal data we have about you and understand how it's processed

• Right to Rectification

  Correct any inaccurate or incomplete personal data

• Right to Data Portability

  Export your data in machine-readable formats (JSON, CSV)

• Right to Erasure

  Delete your account and all associated personal data

• Right to Object

  Object to certain types of data processing

• Right to Information

  Understand how your data is processed and stored

Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights regarding personal information we collect about you:

• Right to know. Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collection, and the categories of third parties with whom we share it.
• Right to delete. Request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to correct. Request that we correct inaccurate personal information we maintain about you.
• Right to opt out of the sale or sharing of personal information. WhisperAI does not sell your personal information for money. However, when you grant marketing-cookie consent, the resulting Google Analytics, Google Ads, and OpenAI Ads identifiers may constitute "sharing" of personal information for cross-context behavioral advertising under the CCPA/CPRA. You can opt out at any time, free of charge, on our Your Privacy Choicespage, by enabling Global Privacy Control in your browser, or by selecting "Reject all" / "Manage preferences" in our cookie banner.
• Right to limit use of sensitive personal information. Request that we limit our use and disclosure of any sensitive personal information to what is necessary to provide the service.
• Right to non-discrimination. We will not deny service, charge a different price, or provide a different level of quality because you exercised any of these rights.

To exercise any of these rights, email support@whisperai.comwith the subject line "California Privacy Request." We may need to verify your identity before responding. Authorized agents may submit requests on your behalf with written permission.

International Data Transfers

WhisperAI is operated from the United States, and our third-party processors are also primarily based in the United States. When personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to the United States or another country that has not received an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) to protect your information.

How We Process Your Data

We process your personal data based on specific legal grounds and for clearly defined purposes. Here's detailed information about our data processing activities:

Sub-Processors

The list below is the canonical, machine-readable list of WhisperAI sub-processors, rendered directly from our shared source of truth. The same list is reflected on our Cookie Policy. Material additions are notified at least 30 days before they take effect.

Brazil (LGPD) and Quebec (Law 25)

If you are located in Brazil, the LGPD grants you rights equivalent to those above (access, rectification, deletion, portability, opposition). If you are located in Quebec, Law 25 grants you the rights of access, rectification, withdrawal of consent, de-indexation, and to be informed of automated processing decisions. Contact support@whisperai.com to exercise any of these rights.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

International Users

If you are using our service from outside the United States, please note that your information may be transferred to, stored, and processed in the United States where our servers are located. See the "International Data Transfers" section above for the safeguards we apply.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or want to exercise your data rights, please contact us at:

Email: support@whisperai.com