Privacy Policy
Last updated: 18 November 2025
Who We Are
TranscriptDrop is an AI transcription service that prioritizes your privacy. Our service is operated by 11data GmbH from the European Union and designed with privacy-by-design principles.
Data Controller: 11data GmbH, Adrian-Stoop-Straße 38, 83707 Bad Wiessee, Germany
Managing Director: Jonathan Staude
Contact: privacy@transcriptdrop.com or info@11data.de
Company Registration: HRB 257330, District Court Munich
What Data We Collect
1. Files You Upload
- Audio and video files you submit for transcription
- File metadata (name, size, duration)
- Retention: Files are stored only during transcription processing and automatically removed within 60 minutes after your transcript is delivered.
2. Account Information (Optional)
- Email address (if you sign in for higher usage limits)
- Authentication tokens (stored securely by Supabase)
- Legal basis: Legitimate interest (service provision) and consent
3. Usage Data
- Transcription duration and file sizes
- Job status (completed, failed, cancelled)
- Anonymous session IDs (for anonymous users)
- Purpose: Quota management and service improvement
- Retention: Usage records are kept for billing and quota purposes, retained for current month + 12 months for accounting
4. Cookies and Local Storage
- Authentication cookies: Supabase auth tokens (essential for logged-in users)
- Session ID: Local storage for anonymous quota tracking
- User preferences: Theme, dismissed hints (stored locally only)
How We Use Your Data
- Transcription: Your audio/video files are processed by AssemblyAI's managed transcription API.
- Email delivery: Transcript links are sent via Resend (EU region)
- Summarization (optional): Transcripts may be processed by our self-hosted Ollama instance for AI summaries
- Quota enforcement: Usage tracking prevents abuse
- Error monitoring: Sentry is used for error tracking (anonymized)
Data Sharing
We do not sell your data. We use these third-party services:
- Supabase (EU): Database and authentication
- AssemblyAI (US): Speech-to-text processing
- Resend (EU): Email delivery
- Sentry (EU/US): Error tracking (anonymized)
- Stripe (EU): Payment processing (when paid plans launch)
AI Processing: AssemblyAI handles transcription. Optional summaries run on our self-hosted Ollama instance. Files are sent only to these processors and are removed from storage within 60 minutes.
Your Rights (GDPR)
As an EU-based service, you have the following rights:
1. Right to Access
Request a copy of all data we hold about you. Email privacy@transcriptdrop.com with your account email.
2. Right to Deletion
Delete your account and all associated data at any time:
- Sign in and go to Account Settings → Delete Account
- Or email privacy@transcriptdrop.com
Note: Files and transcripts are already auto-deleted within 60 minutes. Account deletion removes your email and usage history.
3. Right to Rectification
Correct inaccurate data by updating your account settings or contacting us.
4. Right to Data Portability
Export your usage history and transcripts in machine-readable formats (JSON, CSV).
5. Right to Object
Object to processing based on legitimate interests. Contact us to discuss.
6. Right to Withdraw Consent
Delete your account or stop using the service at any time.
Data Security
- All connections use TLS encryption (HTTPS)
- Database access is protected by Row Level Security (RLS)
- Files are stored in encrypted cloud storage (Supabase Storage)
- Authentication uses secure magic links (no password storage)
- Service runs entirely in EU data centers
Data Retention
| Data Type | Retention Period |
|---|---|
| Uploaded files | 60 minutes (then deleted) |
| Transcripts | 60 minutes (then deleted) |
| Email address | Until account deletion |
| Usage tracking | Current month + 12 months |
| Error logs | 30 days (Sentry) |
Children's Privacy
TranscriptDrop is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us immediately.
Changes to This Policy
We may update this policy from time to time. We'll notify users via email if significant changes are made. Continued use after changes constitutes acceptance.
Contact Us
For privacy questions or to exercise your rights:
- Email: privacy@transcriptdrop.com or info@11data.de
- Data Protection Officer: Jonathan Staude, 11data GmbH
- Address: Adrian-Stoop-Straße 38, 83707 Bad Wiessee, Germany
- Phone: +49 160 97 57 14 84
Supervisory Authority
If you're not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection authority.
This privacy policy is compliant with GDPR (EU Regulation 2016/679) and applicable EU privacy laws.