Privacy and your recordings
Effective October 15, 2026. This policy describes the hosted transcription service.
Information we handle
We process account details such as your email and display name, authentication records, uploaded media, transcripts, speaker labels, edits, and task configuration. We also keep task identifiers, balance transactions, payment references, and limited service logs needed for support, security, and billing. Payment card details are handled by the payment provider rather than stored by this application.
Why your file leaves the browser
Your recording is uploaded to private object storage and sent to the external inference provider used for the task. This is hosted processing, not local browser inference. The provider and available runtime information are disclosed with processing details. Do not upload material that requires a data residency guarantee the service has not explicitly agreed to.
Service providers
Cloudflare supplies hosting and object storage; Stripe handles payments; account data is kept in a managed database; Replicate runs the external GPU transcription pipeline. Google can authenticate your account when you choose Google login. Each provider also has its own applicable privacy terms. The processing region is not selected by the user; the service does not offer a guaranteed processing country. We do not sell uploaded recordings or transcripts.
Retention
Unsubmitted uploads are scheduled for removal after 24 hours. Input media and temporary processing files are scheduled for cleanup after a task ends, with a target of 24 hours. Playback media, transcripts, and exports remain available for 7 days for trial tasks and 30 days for tasks on an account that has purchased minutes. The task’s displayed expiry determines when you should download your result. Editing does not extend that expiry.
Deletion and access
Private tasks require account authorization. Media links are temporary and should still be treated as sensitive while valid. Deleting a task stops new access authorizations and schedules content cleanup. A link already issued may remain usable until it expires; provider copies and backups may take additional time to clear. Deletion is not a claim of instantaneous removal from every system.
Account and financial records
You may request account deletion through account settings or support. Content cleanup follows the same process as task deletion. Minimal transaction, fraud prevention, and legally required financial records may be retained separately and are not erased merely because an account or transcript is deleted.
Your choices and contact
Upload only material you have permission to process, including appropriate consent for recorded people. Download results before expiry and remove recordings you no longer want stored. For access, correction, deletion, or privacy questions, email support@whisperx.app from the account email. Never send your password or payment card number.
Read the upstream WhisperX project · Contact support