Summary: AudiosTranscribe turns your audio recordings into AI-generated transcriptions and structured summaries. Audio is automatically deleted after processing. Transcriptions are kept for as long as your account is active. Without an ongoing subscription or contract, your personal transcriptions are automatically deleted after 12 months without any activity (24 months for a former customer or a member of a Team workspace), after a warning email. AI processing is performed by AssemblyAI (transcription and speaker identification, hosted in Ireland) and Google Cloud (summaries, storage and orchestration). Your data never leaves the European Union. Your recordings and your meeting minutes are not used to train artificial intelligence models, neither by AudiosTranscribe nor by its providers: the use of data for training is disabled at our transcription provider (AssemblyAI) and contractually excluded at Google Cloud (Vertex AI). Payments are handled by Stripe (no banking data is stored by us).
1. Data controller
The data controller is MTLABS, the sole proprietorship that publishes the AudiosTranscribe service.
- Trade name: MTLABS
- SIRET: 103 183 000 00019
- Activity: 62.01Z — Computer programming
- Registered office: 60 rue François Ier, 75008 Paris
GDPR contact: [email protected].
2. Data collected
2.1 Account data
- Email address (authentication via magic link).
- Internal user identifier.
- Compliance and proof data, where applicable (for example, the date and version of acceptance of the Terms of Use).
2.2 Content data
- Audio files provided by the user (uploaded via the website or recorded via the AudiosTranscribe desktop application).
- Text transcriptions generated from the audio.
⚠️ Caution: depending on the content you send, the audio and/or the transcription may contain personal data or even sensitive data. We recommend that you avoid sending information that you do not want to be processed by technical providers (see the "Subprocessors" section).
2.3 Payment data
Payments are handled by Stripe. We do not store any payment card data. We may retain technical information related to payment:
- Stripe customer ID (to link the subscription to your account).
- Subscription status (monthly/annual), dates, billing references.
2.4 Desktop application
The AudiosTranscribe desktop application records the audio of your meetings locally on your computer (AppData folder). The files are then sent to our servers only if the automatic upload option is enabled or if you click "Send". Optional metadata (meeting name, participants, type, notes) is transmitted with the file to improve the quality of the transcription.
The authentication token is stored in encrypted form via your operating system's secure storage system (Windows Credential Manager).
2.5 Technical data
- Error logs and technical events necessary for operation, security and abuse prevention.
- These logs may include, depending on the case, technical identifiers, timestamps, IP addresses and events related to authentication or security.
💡 Analytics: AudiosTranscribe does not use any advertising cookies, any third-party trackers in your browser, or any cross-site tracking. We only measure use of the service (key actions in the application) by means of technical events linked to your account identifier, for the purpose of improving the product. This measurement is carried out server-side, without any tracking cookie or advertising profiling. You can object to it (see "Your rights").
2.6 Website audience measurement, without cookies
To know how many people visit the audiostranscribe.com website and which pages interest them, we use anonymous audience measurement provided by PostHog, hosted in the European Union (EU Cloud, Frankfurt). It works without cookies and without a banner, within the framework of the recommendations of the CNIL (the French data protection authority) on audience measurement:
- No cookie is set and this tool stores nothing in your browser (no local storage, no session storage).
- Visits are counted using a fingerprint computed by PostHog with a key that changes every day: the same person is not recognised from one day to the next.
- Your IP address is anonymised: PostHog does not keep it.
- Measurements are sent to PostHog EU through our own domain (a relay hosted by Vercel, in Frankfurt). This relay only forwards the measurement itself, the browser type and the IP address needed for the daily fingerprint; it forwards no cookies and we do not record your IP address there.
- No cross-site tracking, no link to your AudiosTranscribe account, no profile, no session recording.
- Data measured: page views and page exits, the site you came from (domain name only), campaign parameters of our links, technical browser information (device type, browser, operating system, screen size, language, time zone), clicks on our main buttons (try the tool, create an account, see pricing, organisations offer) and downloads of the templates offered on the site (Word or PDF files: only the name of the downloaded template is recorded), without any content you type.
- Purpose: audience statistics only. Legal basis: legitimate interest. Retention: 1 year maximum (the event retention period of the PostHog plan we use).
If your browser sends a "Do Not Track" or "Global Privacy Control" signal, the measurement is not loaded. You can also refuse it here; this choice is remembered in your browser's local storage (key as_mesure_audience_refus), only if you click:
3. Purposes and legal bases
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Create and manage your account | Email, user ID | Performance of the contract |
| Transcribe audio and generate a summary | Audio, transcription | Performance of the contract |
| Manage billing and subscriptions | Stripe ID, subscription status | Performance of the contract + legal obligation |
| Ensure security and prevent abuse | Technical logs | Legitimate interest |
| User support | Email, content provided to support | Legitimate interest / performance of the contract |
| Measure and improve use of the service | Account identifier, usage events | Legitimate interest (right to object) |
| Measure the audience of the audiostranscribe.com website (visit statistics) | Page views, referring site, technical browser information, clicks on our main buttons, template downloads, without cookies or any lasting identifier (see 2.6) | Legitimate interest (right to object) |
| Send a meeting report by email to the recipients you enter, solely on your instruction | Recipients' email addresses (entered by you, used for sending, never reused for prospecting purposes) | Performance of the contract (at your request) |
| Attribute your sign-up to one of our own links or pages (referral invitation, shared meeting report, or a page presenting the service) | The source of the link or page you arrived through (referral, share, or one of our pages), recorded at sign-up. No tracker is stored in your browser: the information comes from the clicked link's address and is processed server-side. | Legitimate interest (right to object) |
| Protect the deliverability of our emails (suppression list) | Addresses that generated a permanent error or a complaint, kept so as never to solicit them again | Legitimate interest (security and quality of mailings) |
4. Subprocessors and transfers
We use technical providers (data processors within the meaning of the GDPR) to deliver the service:
- Google Cloud: temporary storage of audio files (Cloud Storage), processing orchestration (Cloud Run) and generation of summaries by artificial intelligence (Vertex AI Gemini). Main processing in the European Union (Paris region for audio, multi-region EU for summary inference).
- AssemblyAI: audio-to-text transcription and speaker identification (diarization). Processing in the European Union (Ireland). Audio files are automatically deleted from AssemblyAI servers at the end of processing.
- Supabase: database and authentication, hosted in the European Union (Sweden).
- Vercel: hosting of the web application, in the European Union (France).
- Stripe: payment and billing. No banking data is stored by us (PCI-DSS Level 1). Governed by the European Commission's SCCs.
- Resend: sending of transactional emails, in the European Union.
- Upstash: anti-abuse protection (rate limiting), in the European Union (Germany).
- Sentry: technical monitoring and error logging, in the European Union (Germany).
- Cloudflare: DNS and distribution of the desktop application. May process technical data (IP address) as part of network routing. Governed by the SCCs.
- PostHog: usage measurement and product improvement (usage statistics, feature testing). Data transmitted server-side, limited to an account identifier and usage events, without any transcription content or browser cookie. Hosting in the European Union (Cloud EU, Frankfurt). On the audiostranscribe.com website, PostHog also provides the anonymous, cookieless audience measurement described in 2.6. Company established in the United States, transfers governed by the standard contractual clauses (SCCs).
No AI model training: Your recordings and your meeting minutes are not used to train artificial intelligence models, neither by AudiosTranscribe nor by its providers: the use of data for training is disabled at our transcription provider (AssemblyAI) and contractually excluded at Google Cloud (Vertex AI).
Data location: all main processing (audio, transcriptions, user account) is hosted in the European Union. No audio or transcription data is transferred outside the European Union. Stripe and Cloudflare may process technical metadata (IP, payment data) on global infrastructures, governed by the standard contractual clauses (SCCs).
5. Retention periods
5.1 Audio
Audio files are stored temporarily on Google Cloud Storage in region europe-west9 (Paris, France) only for the duration of processing. As soon as the transcription is complete, the audio file is deleted. In addition, an automatic rule of our hosting provider deletes any audio file older than 7 days that has not been erased; this rule runs on a deferred basis.
The processing flow is as follows: your audio file is stored temporarily on Google Cloud Storage in France (europe-west9 Paris), processing is orchestrated by Google Cloud Run, also in France (europe-west9 Paris), the transcription is performed by AssemblyAI in the European Union (Ireland), then the meeting minutes are generated by Google Vertex AI in European Union regions. The text result (transcription and summary) is then saved in our database. No audio or transcription data is transferred outside the European Union.
5.2 Transcriptions and summaries
Transcriptions and AI summaries are retained so that you can consult them, organize them into projects and export them at any time. The retention periods are as follows:
- Active account: transcriptions kept for as long as your account is active and used to provide the service.
- Ongoing subscription or contract (including paused or awaiting payment recovery): no deletion for inactivity.
- Free account: personal transcriptions are automatically deleted after 12 months without any activity.
- Former subscriber, former contract or member of a Team workspace, with no ongoing subscription or contract: personal transcriptions are automatically deleted after 24 months without any activity.
- Deleted account: when your account is closed, your data is deleted from our production systems. Any technical backups held by our hosting providers are erased according to their own cycle.
Activity takes into account all your use of the service, not only logins: logins, actions in the application, creation or modification of a transcription, pairing of the desktop application, projects. Before any deletion, a warning email is sent to your account address, and deletion only takes place at least 7 days later; if you use the service again in the meantime, nothing is deleted. Documents in a Team workspace are not affected: they follow the workspace's retention rules. Automatic deletion concerns the text of the personal transcriptions stored in the database; your account itself is not deleted. The source audio files are deleted as soon as processing is complete (see section 5.1), regardless of account activity.
5.3 User account
Account data (email, identifier, subscription profile, acquisition source) is kept for as long as the account is active. In the event of voluntary deletion of the account, all data is deleted as soon as possible, with the exception of data strictly necessary to comply with legal and accounting obligations (e.g. invoices, in accordance with Article L. 123-22 of the French Commercial Code).
The following are also kept after account deletion: your email address, for 12 months at most, then only a cryptographic fingerprint (hash) of that address, to prevent abusive re-registrations; and the record of any termination or withdrawal requests you made, as contractual evidence, detached from your account.
5.4 Billing
The data necessary for billing (invoices) is retained in accordance with legal obligations (e.g. accounting).
⚠️ Important: deletion in our systems does not necessarily immediately erase the technical traces strictly necessary for security or compliance (e.g. limited technical logs, legal obligations).
6. Cookies
Audiostranscribe only uses cookies and trackers necessary for operation (session, security, preferences) or exempt from consent (referrals), detailed in the cookie policy. No advertising or marketing-tracking cookies are deployed. The marketing site only uses anonymous, cookieless audience measurement, described in 2.6.
Apart from the referral code described in the cookie policy, we do not use any attribution tracker in your browser. When you arrive through one of our own links or pages (a referral invitation, a shared meeting report, or a page presenting the service), the source is determined from the visited address and recorded server-side only if you create an account, to measure our acquisition channels. No information is stored on your device for this purpose, no cross-site tracking is performed, and this data is never shared with third parties. You can object to it (see "Your rights").
7. Your GDPR rights
You have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
To exercise your rights: [email protected]. We respond within a maximum of 30 days.
8. Security
We implement appropriate security measures, in particular:
- Encrypted communications (HTTPS)
- Restricted access to databases
- Protection of API keys and separation of environments
- Monitoring of errors and incidents
9. Minors
The service is not specifically intended for minors and no systematic age verification is in place. Legal guardians remain responsible for the use of the service by a minor.
10. Changes
We may update this policy to reflect changes in the service or the legal framework. In the event of a significant change, we will inform users by an appropriate means.
11. Contact and complaints
For any question: [email protected].
If you believe that your rights are not being respected, you may lodge a complaint with the CNIL (French data protection authority).