When you use Vidcap, we collect: your email address and password (stored as a secure hash, never in plain text); your name, if you choose to provide it at signup (optional); an approximate country and city, automatically derived from your IP address at signup (not precise location, not collected from your device - just a standard, low-precision lookup based on your internet connection); the audio/video files you upload for transcription; the transcripts generated from them; and basic usage data such as job timestamps and file durations, used for billing your credit balance.
Uploaded files are sent to OpenAI's Whisper API for transcription. OpenAI processes this audio to generate text and, per their API terms, does not use API content to train their models. Your audio briefly passes through OpenAI's servers as part of generating your transcript; it is not shared with any other third party by us.
Uploaded files and generated transcripts are stored on our servers so you can re-download them from your account history. You can request deletion of your files, transcripts, and account at any time by emailing [SUPPORT EMAIL] - we will delete them within [X] days.
Payments are handled by our payment processor (Paddle), acting as merchant of record. We do not see or store your card details - only that a purchase was made and which credit pack it was for.
You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and associated data, by contacting [SUPPORT EMAIL].
Passwords are stored using salted one-way hashing. Access to uploaded files and transcripts is restricted to your own logged-in account.
Questions about this policy: [SUPPORT EMAIL]
This is a starting template, not legal advice - voice recordings can count as personal (and in some jurisdictions, biometric-adjacent) data, so have this reviewed by a lawyer before a real launch, especially if you expect customers outside Morocco (e.g. GDPR considerations for EU users).