Privacy policy

Data controller

The controller of your data is Juan Camilo Cruz Cespedes, who provides the service under the trade name DropToText, based in Bogotá, Colombia. For anything related to personal data, write to [email protected].

What data we process

• Account data: email address, preferred language and your notification and marketing settings.
• Files and transcripts: the recordings you upload and the text we generate. They may contain data about other people and, depending on what is said, sensitive data. We only process them to transcribe them.
• Purchase data: hours bought, amounts and dates. Your card details go directly to the payment processor; we neither see nor store them.
• Technical data: IP address, browser type and security logs, to protect the service and prevent abuse.

Why we use it and on what legal basis

• To provide the service: create your account, transcribe your files, keep your balance and send you service emails (sign-in, transcript ready, deletion notice and purchase confirmation). Basis: performance of the contract.
• To protect the service, for example by limiting sign-in attempts or blocking disposable emails. Basis: our legitimate interest in protecting the service and the people who use it.
• To meet legal, accounting and tax obligations. Basis: legal obligation.
• To send you news and offers, only if you allow it in Settings with a separate checkbox. Basis: your consent, which you can withdraw at any time.

In Colombia, we process your data with the authorization you give us when you create your account, for the purposes in this section.

How long we keep it

• Audio and video: deleted as soon as the transcript is done. If a file is never processed, it is deleted after 24 hours.
• Transcripts: 5 days after they are ready.
• Account data: while the account exists. We delete it when you delete the account.
• Balance records: kept without data that identifies you, to balance the accounts.
• Technical and security logs: up to 30 days.

Who we share data with

We use cloud infrastructure providers to store files, process transcripts and send email, and a payment processing provider. They are located in the United States. The infrastructure providers act as processors: they handle data only to provide their service to us, under contract. The payment provider acts as the reseller of the sale and handles your payment data under its own privacy policy.

We do not sell your data or use it for third-party advertising.

International transfers

Because those providers are in the United States, your data leaves your country. If you are in the European Economic Area, transfers rely on the standard contractual clauses approved by the European Commission, or on the EU-U.S. Data Privacy Framework where the provider is certified. If you are in Colombia, they are made to a country with an adequate level of protection according to the Superintendence of Industry and Commerce, or with the contractual safeguards the law requires.

Your rights

You can know, access, update, correct and delete your data, object to or restrict its processing, request its portability, ask for proof of the authorization you gave us and revoke it. In Settings you can change your preferences and delete your account; for anything else, write to [email protected].

• We answer inquiries within 10 business days and complaints within 15 business days. If we need more time, we will tell you before the deadline.
• If you are not satisfied with our answer, you can go to the Superintendence of Industry and Commerce in Colombia or to the data protection authority of your country in the European Union.

Security

We encrypt data in transit and at rest, limit access to the people who need it to run the service and delete files within the periods in this policy. If an incident affects your data, we will notify you as the law requires.

Minors

DropToText is not aimed at people under 18 and we do not knowingly create accounts for them.

Cookies

We only use necessary cookies: your session cookie and the one that remembers your language. We do not use analytics or advertising cookies.

Changes to this policy

If we change it in an important way, we will email you before the change takes effect.