Privacy Policy
Last Updated: 6 August 2026
WhisperTranscribe B.V. (“we,” “us,” or “our”) operates the WhisperTranscribe application (available for Windows and Mac) and the website whispertranscribe.com (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We are committed to protecting your privacy and complying with applicable data protection laws. Our company is registered in the Netherlands, and we serve users worldwide.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Account Information
• Email Address: Required for account creation and authentication
• User Role: Category selection during onboarding (e.g., podcaster, YouTuber, researcher, etc.)
• Authentication: We use email verification codes (OTP - one-time passwords) for secure access. No passwords are stored.
User Content & Communications
• Audio Files: Files you upload for transcription (see Transient Data section)
• Customer Support: Information provided when contacting support
• Feedback: Beta feature feedback, cancellation reasons, and other feedback you submit through the app
• Correspondence: Emails and communications sent to us
1.2 Transient Data
Some data temporarily exists on our servers during processing:
• Audio Files: Stored for 3-10 minutes during transcription processing, then automatically deleted
• Transcription Data: Temporarily held in server memory while being processed, never saved to disk
• File Metadata: Upload date and file size (retained for service operation)
1.3 Information Collected Automatically
In the desktop app
• Device Information: Windows or Mac, operating system version, processor architecture
• App Information: Application version and distribution channel (standard, Setapp, or on-premise)
• Usage Data: Credits used, feature interactions, screens viewed, file processing metadata
• Error Logs: Technical logs and crash reports linked to your account ID and user ID (transcript content is removed from logs)
• Approximate Location: Country-level location, worked out from your IP address at the moment an event reaches our analytics provider. The IP address itself is not stored.
We use PostHog, hosted in the European Union, for app analytics. In the app, PostHog stores an analytics profile in local application storage on your device. When you are signed in, that profile is linked to your user ID and account ID, together with your plan type and account role level, so that we can understand how features are used and diagnose errors.
Your name, your email address and your IP address are never stored by our analytics provider. The analytics hold only an account identifier. The record that connects that identifier to your email address is held separately, in our own database, which means the analytics data on its own cannot be linked back to you without it.
On the website
We use PostHog in cookieless mode on our website. It sets no cookies, stores nothing on your device, and does not assign you a persistent identifier.
• How visitors are counted: PostHog derives a temporary identifier on its own servers from your IP address, your browser’s user agent, and a secret value that rotates every day and is then deleted. Because that value changes daily, a returning visitor cannot be recognised from one day to the next.
• Your IP address is not kept. In cookieless mode it is used only to derive that daily identifier and is discarded immediately afterwards. It is not stored alongside the recorded website data.
• What is recorded: Pages viewed, clicks on links and buttons, the website that referred you, browser and operating system, screen and window size, browser language and time zone.
1.4 Advertising Measurement (Website)
We advertise on Google Ads and Microsoft Advertising. To find out which campaigns actually bring us customers, we measure them as follows:
• When you arrive from one of our ads and then click a download or purchase link, we store your campaign information in your browser’s local storage. This includes the click identifier assigned by Google or Microsoft, the campaign parameters contained in the link, the page you were on, and the time. We keep this for 90 days.
• When you then download the app, our servers send that click identifier to Google Ads and Microsoft Advertising, so that the download can be matched to the campaign it came from.
• If you go on to buy a subscription or a credit package, we send the click identifier again, this time together with an estimated customer value.
We place no advertising tags, pixels or scripts on this website. All of this is sent from our own servers after the fact. We do not send your name, your email address, or anything you have transcribed.
Whether we ask you first depends on where you are. If you are in the European Economic Area or the United Kingdom, we show a cookie banner and store nothing for this purpose until you accept it. In other countries we store it without asking, as local law permits, and the measurement described above still takes place. Wherever you are, you can remove this information at any time by clearing your browser’s site data for whispertranscribe.com.
1.5 Affiliate Tracking (Website)
If you reach our website through an affiliate or partner link, our affiliate platform Tolt stores a referral code in two cookies on your device for 30 days, so that the partner who referred you is credited if you buy something. Tolt receives the referral code, the address of the page you landed on, and the website that referred you.
As with advertising measurement, we ask for your permission first if you are in the European Economic Area or the United Kingdom. In other countries these cookies are set without a prompt, as local law permits.
1.6 Payment Information
• Payment Processing: Handled by Stripe. Subscriptions created before our migration to Stripe continue to be billed through LemonSqueezy.
• We never access or store credit card information.
• See Stripe’s Privacy Policy and LemonSqueezy’s Privacy Policy.
2. HOW WE USE YOUR INFORMATION
We use the collected information for the following purposes:
2.1 Service Provision (App Functionality)
• Process email verification codes for authentication
• Process your audio files for transcription
• Track and manage your usage credits
• Store transcriptions locally on your device only
• Provide customer support
2.2 Communication
• Send transactional emails (verification codes, service notifications)
• Send onboarding emails via MailerLite
• Send marketing communications (with your consent and easy opt-out options)
• Respond to your inquiries and feedback
2.3 Analytics and Improvement
• Analyze usage patterns and feature interactions
• Debug technical issues using error logs
• Improve service performance and features
• Process user feedback for product development
• Measure which advertising campaigns and affiliate partners bring us customers
2.4 Security and Legal
• Ensure service security and prevent fraud
• Comply with applicable laws and regulations
• Respond to valid legal requests.
3. DATA SHARING AND DISCLOSURE
We do not sell, trade, or rent your personal information.
3.1 Service Providers
We work with trusted third-party processors with whom we have DPAs:
• OVH Cloud (Frankfurt, Germany) - Server infrastructure
• OpenAI - Audio transcription (Enterprise agreement, no model training)
• AssemblyAI - Audio transcription (Enterprise agreement, no model training)
• Google Gemini - Audio transcription (Enterprise agreement, no model training)
• MailerLite - Email services and marketing
• Stripe - Payment processing
• LemonSqueezy - Payment processing for subscriptions created before our migration to Stripe
• PostHog - App and website analytics (hosted in the European Union)
• Framer - Website hosting
• Tolt - Affiliate referral tracking
• Senja - Testimonial display on our website
• Cookiebot (Usercentrics) - Cookie consent management
3.2 Advertising
We do not use advertising networks to track you. We place no advertising tags, tracking pixels, retargeting scripts or device fingerprinting on our website or in our app.
We do advertise on Google Ads and Microsoft Advertising. To measure whether that advertising works, we send those platforms a record of app downloads and purchases that began with a click on one of our ads. That record contains the click identifier the platform itself assigned to that click, the time of the download or purchase, and, for purchases, an estimated value. It does not contain your name, your email address, or any content you have processed with the Service. We send it wherever you are located.
We do not share data with data brokers, and we do not build advertising profiles about you.
3.3 Legal Requirements
We may disclose information only when required by law or to:
• Comply with legal obligations
• Protect rights, property, or safety
• Detect, prevent, or address fraud
• Respond to government requests
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before any such transfer.
4. DATA RETENTION
• Account Information: Retained while your account is active
• Transient Data:
• Audio files: Automatically deleted after 3-10 minutes
• Transcription processing: Held in memory only during processing
• Transcriptions: Stored only on your local device, never saved on our servers
• Usage Data & Metadata: Retained while account is active
• Analytics Data: Analytics events from the app and from the website are retained for 7 years. They never contain your name, your email address or your IP address. App analytics are linked to an account identifier; website analytics carry no identifier for you at all.
• Advertising Measurement: Campaign information in your browser’s local storage is kept for 90 days
• Affiliate Referral: Referral cookies expire after 30 days
• Cookie Consent Record: 12 months
• Error Logs: Retained for 7 years, alongside the analytics data they are recorded with
• Email Suppression List: Maintained indefinitely to honor unsubscribe preferences
• Feedback: Retained until account deletion
Account Deletion: All personal data is deleted within 24 hours of account deletion request, except email addresses on suppression lists.
5. TRACKING
We do not track you across other companies’ apps or websites, and we do not build advertising profiles about you.
Specifically:
• We do not use tracking pixels, advertising tags, retargeting scripts or device fingerprinting
• We do not share your data with advertising networks for the purpose of targeting you
• We do not sell your data or share it with data brokers
• Our website analytics store nothing on your device and cannot recognise you from one day to the next
Where we do use identifiers - an affiliate referral code, or an advertising click identifier used to measure our own campaigns - these are described in sections 1.4, 1.5 and 9. They are stored only with your consent, and you can withdraw that consent at any time.
6. DATA SECURITY
We implement industry-standard security measures:
• Email verification code authentication (no password storage)
• Encrypted data transmission (HTTPS/TLS)
• Secure European data centers (OVH Frankfurt)
• Regular security assessments
• Access controls on need-to-know basis
• Enterprise agreements with AI providers ensuring no model training
• Automatic deletion of transient data
However, no method of electronic transmission or storage is 100% secure.
7. YOUR RIGHTS AND CHOICES
7.1 Managing Your Information
To access, update, or delete your information, please contact us at support@whispertranscribe.com. We will respond to your request within a reasonable timeframe.
7.2 Email Communications
• Marketing Emails: Unsubscribe using the link at the bottom of any marketing email
• Transactional Emails: Required for service operation (verification codes, important notices)
• Suppression List: We maintain a list of unsubscribed emails to honor your preferences
7.3 Cookie and Storage Consent
If you are in the European Economic Area or the United Kingdom, you can change or withdraw your consent at any time using the privacy icon shown on our website. Withdrawing it removes the affiliate referral cookies and the advertising measurement data held in your browser, and stops any new ones being stored.
If you are elsewhere, we do not show a consent banner. You can remove the same information at any time by clearing your browser’s site data for whispertranscribe.com.
7.4 Regional Privacy Rights
European Union (GDPR) Rights
• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request limited processing
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Automated Decision-Making: We do not engage in automated decision-making
California (CCPA) Rights
• Know what personal information we collect and share
• Request deletion of personal information
• Opt-out of sale (we do not sell personal information)
• Non-discrimination for exercising privacy rights
To exercise these rights, email support@whispertranscribe.com.
8. CHILDREN'S PRIVACY
Our Service is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.
Parents or guardians who believe we have information about a child under 13 should contact us immediately.
9. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses a small number of cookies and browser storage entries.
Strictly necessary
• CookieConsent (Cookiebot) - Remembers the cookie choices you have made. Cookie, 12 months.
Marketing
• tolt_referral and tolt_data (Tolt) - An affiliate referral code, so that a partner who referred you is credited. Cookies, 30 days.
• wt_attr - Advertising campaign information, including the click identifier assigned by Google or Microsoft, used to measure our own campaigns. Browser local storage, 90 days.
Whether we ask you first depends on where you are
If you are in the European Economic Area or the United Kingdom, we show a cookie banner when you first arrive, and nothing in the marketing category is stored until you accept it. You can change or withdraw that choice at any time using the privacy icon on our website.
In other countries we do not show a banner, and these entries are stored without a prompt, as local law permits. You can remove them at any time by clearing your browser’s site data for whispertranscribe.com.
What we store regardless of your choice
Our website analytics run in cookieless mode. They set no cookies, store nothing on your device, and do not assign you a persistent identifier, so they run whether or not you accept anything.
Our testimonial widget is embedded from Senja inside a restricted frame that cannot store anything on your device. Senja’s servers receive your IP address in order to deliver that content, in the same way as any provider that hosts an image or a font.
In the desktop app
The app stores analytics data in its own local application storage on your device, linked to your account, as described in section 1.3.
10. INTERNATIONAL DATA TRANSFERS
• Server Location: Frankfurt, Germany (European Union)
• Analytics: Hosted in the European Union
• Global Service: We serve users worldwide
• Transfers into the EU: By using our Service from outside the EU, you consent to the transfer of your data to the EU
• Transfers outside the EEA: Some of our providers are established in, or process data in, the United States - including Stripe, Tolt, Google and Microsoft. Where personal data is transferred outside the European Economic Area, we rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on Standard Contractual Clauses.
• Safeguards: We ensure appropriate protections for all international transfers.
11. LEGAL BASIS FOR PROCESSING (EU USERS)
Under GDPR, we process your personal data based on:
• Contract Performance: To provide the Service you’ve requested
• Consent: For marketing communications, and for the cookies and browser storage described in section 9 that are not strictly necessary
• Legitimate Interests: For service improvement, security, and fraud prevention
• Legal Obligations: When required by law.
12. CONFORMITÉ À LA PROTECTION DES DONNÉES
Nous tenons des registres de nos activités de traitement comme exigé par l'Article 30 du RGPD. Bien que nous ne soyons pas obligés de nommer un Délégué à la Protection des Données en tant que petite entreprise, nous avons désigné des membres d'équipe chargés de la conformité en matière de confidentialité.
13. MODIFICATIONS DE CETTE POLITIQUE DE CONFIDENTIALITÉ
Nous pouvons mettre à jour cette Politique de Confidentialité de temps à autre. Nous vous informerons des modifications par :
Mise à jour de la date de "Dernière mise à jour"
Envoi de notifications par email pour les changements importants
Affichage d'avis au sein du Service lorsque cela est approprié
L'utilisation continue après les modifications constitue acceptation de la Politique de Confidentialité mise à jour.
14. INFORMATIONS DE CONTACT
Pour des questions, préoccupations ou demandes concernant cette Politique de Confidentialité :
Responsable du traitement des données :
WhisperTranscribe B.V.
Heiman Dullaertplein 38B
3024CC Rotterdam
Pays-Bas
Enregistrement commercial :
KvK (Chambre de Commerce) : 92149995
Numéro de TVA : NL865906075B01
Utilisateurs de l'UE : Vous avez le droit de déposer une plainte auprès de l'Autorité néerlandaise de protection des données (Autoriteit Persoonsgegevens) ou de votre autorité de contrôle locale.
Cette Politique de Confidentialité est en vigueur depuis le 11 juin 2025 et remplace toutes les versions précédentes.