Privacy Policy — SpokenPrint

1. Data We Collect

Account information: name, email address, profile image, authentication identifiers, and your private workspace.
Project content: source audio, video, transcripts, supporting documents, generated manuscripts, exports, and edit history.
Rights and publication records: rights attestations, consent records, source metadata, export disclosures, and rights envelope records.
Payment and account records: checkout status, invoices, refunds, Hugo Credits activity, and the minimum payment metadata needed to reconcile your account.
Messages and requests: contact form submissions, refund requests, support emails, and related troubleshooting details.
YouTube data, if you connect YouTube: channel and video metadata, ownership verification results, and caption files when you choose to use them.
Identity verification data, if needed for speaker or rights attestation: verification status and related metadata from Stripe Identity.
Technical data: API logs, job events, device/browser information, IP address, cookies necessary for authentication, and security/audit logs.

2. How We Use It

To create, analyze, edit, and export the manuscript or related product you requested.
To verify rights, speaker authorization, payment status, and account access.
To operate the service, troubleshoot jobs, prevent abuse, detect fraud, and keep records required for legal, accounting, and rights purposes.
To communicate with you about your account, projects, purchases, refunds, security, and policy updates.
To improve reliability and product quality through diagnostics and aggregate metrics.

We do not train AI models on your content. We do not use your source content, transcripts, manuscripts, identity documents, or supporting materials to train SpokenPrint models, and we do not permit our AI or transcription service providers to use project content for model training when processing it for us.

3. Service Providers and Third-Party Services

Yes, we use service providers to run SpokenPrint. They process data only as needed to provide their services to us, and their own terms and privacy practices also apply where you interact with them directly.

Clerk for account authentication and session management.
Stripe and Stripe Identity for payments, refunds, tax/payment records, and optional identity verification.
Anthropic and Google for AI-assisted analysis, generation, and editorial help.
Deepgram or local transcription infrastructure for audio transcription, depending on the active transcription configuration.
Cloudflare and S3-compatible storage/hosting providers for site delivery, source storage, exports, logs, and backups.
Resend for transactional email and contact-form delivery.
Google/YouTube APIs if you choose to connect a YouTube account or use YouTube captions.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

4. Retention and Deletion

We keep project data for as long as needed to provide the service, preserve your finished work, maintain rights records, comply with law, and resolve security, billing, or rights disputes.

Raw source audio/video and transcript assets: scheduled for purge after 24 months of project inactivity unless a longer period is needed for legal, security, billing, or rights reasons. You may request earlier deletion.
Manuscripts, exports, and accepted edits: retained until you delete the project or request deletion, subject to legal and rights-record exceptions.
Rights envelope and attestation records: retained long-term, generally at least 7 years, because they document authorization, AI disclosure, and publication history.
Account data: retained while your account is active and for a reasonable period afterward where needed for legal, security, billing, or rights purposes.
Identity verification: SpokenPrint stores verification status and related metadata; Stripe Identity handles raw identity documents under its own retention practices.
Payment records: retained by Stripe and by us as needed for accounting, tax, fraud-prevention, and refund records.

5. Your Rights

You may request access, correction, export, or deletion of your personal data by emailing privacy@spokenprint.com. We respond as required by applicable law, including GDPR and CCPA/CPRA rights where they apply. Some records may be retained where deletion would conflict with legal, accounting, security, fraud-prevention, or rights-documentation obligations.

6. Security

We use administrative, technical, and access controls designed to protect project data, including TLS in transit, encryption for sensitive credentials and OAuth tokens, scoped account access, audit logs, and workspace isolation. No online service can guarantee perfect security, and you should keep your account credentials private.

7. Cookies

We use cookies and similar technologies necessary for authentication, session security, and core site operation. We do not use third-party advertising cookies.

8. Children

SpokenPrint is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

9. Contact

Privacy questions or requests: privacy@spokenprint.com.