Privacy Policy

1. Who we are

JustTranscribe (“JustTranscribe”, “we”, “us”, or “our”) operates the website and application at justtranscribe.ai (the “Service”), an AI-powered tool that transcribes and analyzes audio and video content.

For the purposes of Colombia’s Law 1581 of 2012 and Decree 1074 of 2015, the data controller (“Responsable del Tratamiento”) is:

• Controller: JustTranscribe, legally represented by Unai Goikoetxea
• Location: San Sebastián, Basque Country, Spain
• Contact email: bramontiventures@gmail.com

This Policy explains what personal data we process, why, on what legal basis, with whom we share it, and the rights you have. By using the Service you acknowledge this Policy.

2. Scope and international users

The Service is operated from San Sebastián (Basque Country, Spain) and is available to users worldwide. We process personal data under Colombian data-protection law (Law 1581 of 2012). Where you are located in a jurisdiction with additional rights — such as the EU/UK (GDPR) or California (CCPA/CPRA) — we honor the applicable rights described in Section 9 to the extent they apply to you. If you are in the European Economic Area, our lawful bases are consent, performance of a contract, and our legitimate interests in operating and securing the Service.

3. Data we process

3.1 Data you provide

• Account data: your name and email address, and, if you sign in with Google, the basic profile information Google shares (name, email, profile identifier).
• Content you submit: video/audio URLs you paste, and audio or video files you upload (including WhatsApp voice notes and similar). These files and the resulting transcripts, translations, and analyses are stored so you can access them in your library.
• Communications: messages you send us for support.

3.2 Data collected automatically

• Usage and device data: pages viewed, actions taken (e.g. an analysis started, an export clicked), browser type, and approximate location derived from your IP address (country/region level) via our analytics provider. We do not store your full IP address for analytics profiling; it is used to derive coarse geolocation and for security.
• Security data: information needed to prevent abuse, including signals from our anti-bot provider and rate-limiting records.

3.3 Data we do NOT intentionally collect

We do not require payment card data (the Service is a free beta; see Section 8 for the future paid plan). Please do not upload content containing sensitive personal data (“datos sensibles” under Article 5 of Law 1581) unless strictly necessary, as you are responsible for having the right to process it.

4. Why we process your data (purposes)

• To provide the Service: fetch or receive your media, transcribe it, translate it, run AI analysis, and store the results in your account.
• To operate free-tier quotas, prevent abuse, and enforce our spending and security controls.
• To understand product usage and improve the Service (analytics).
• To communicate with you about your account and support requests.
• To comply with legal obligations.

5. Legal basis (Law 1581/2012)

Under Colombian law we process personal data with your prior, express, and informed authorization, which you provide by creating an account and accepting this Policy, and, where applicable, on the basis of our legitimate operation of the Service and legal duties. You may withdraw your authorization at any time (Section 9), subject to legal or contractual retention.

6. Service providers and international transfers (sub-processors)

We rely on trusted third parties to run the Service. They process data on our behalf under their own security and privacy terms, and some are located outside Spain, which involves international transfers of data. By using the Service you authorize these transfers for the purposes described above. Our current key sub-processors are:

• OpenAI — speech-to-text transcription of your media.
• Anthropic (Claude) — AI analysis and translation of transcripts.
• Deepgram — speaker detection (who spoke when), only when you turn on Speakers for a transcript; it receives that recording's audio.
• Apify and LamaTok — fetching public videos from social platforms when a direct download is not possible; they receive the public video link, never your uploaded files.
• Amazon Web Services — cloud infrastructure hosting the application, database, and your stored media.
• Cloudflare — bot protection (Turnstile) and network security.
• PostHog — product analytics, including IP-based approximate geolocation (configured without cross-site cookies).
• Google — authentication (“Sign in with Google”) when you choose it, and Google Ads for advertising and conversion measurement (see Section 12 for the cookies this uses and where).
• Dodo Payments — payment processing, only if and when paid plans launch (see Section 8).

7. How long we keep data

We keep your account data and content for as long as your account is active. When you delete your account (Section 9), we delete your personal data, transcripts, and uploaded media from our active systems, and unlink stored media, except where we must retain limited records to comply with legal obligations or resolve disputes. Backups and third-party logs may persist for a limited period before rotation.

8. Payments (future)

The Service is currently a free beta and we do not collect payment information. If we introduce paid plans, payments will be handled by a third-party processor acting as Merchant of Record (currently intended to be Dodo Payments). In that case the processor — not JustTranscribe — collects and processes your payment data under its own privacy policy, and we receive only limited confirmation and subscription-status information. This Policy will be updated before any charging begins.

9. Your rights

Under Law 1581/2012 (Articles 8 and 15) and, where applicable, other laws, you may:

• Know, update, and rectify your personal data.
• Request proof of the authorization you gave us.
• Be informed about the use we make of your data.
• File complaints with the Superintendencia de Industria y Comercio (SIC) for breaches.
• Revoke your authorization and/or request deletion when there is no legal or contractual duty to retain.
• Access your data free of charge.

You can edit your profile and permanently delete your account (which cascades to your transcripts and stored media) directly from your account settings. For any other request, contact bramontiventures@gmail.com. We respond within the terms set by Colombian law (consultations within 10 business days; claims within 15 business days, extendable as the law allows).

10. Security

We apply reasonable technical and organizational measures, including encrypted connections, server-side handling of credentials and API keys, access controls, anti-bot verification, rate limiting, and a spending kill-switch. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 18. We do not knowingly process personal data of minors. If you believe a minor has provided us data, contact us and we will delete it.

12. Cookies and analytics

We use strictly necessary technologies to keep you signed in and to secure the Service, and product analytics (PostHog), which is configured to be cookieless. Analytics derive approximate location from IP at the country/region level to understand where our users come from.

We also use Google Ads to measure the effectiveness of our advertising. Outside the European Economic Area, the United Kingdom, and Switzerland, Google Ads may set advertising and conversion-measurement cookies when you visit or sign up, so that a signup can be attributed to the ad you clicked. For visitors in the EEA, the UK, and Switzerland, these cookies are disabled by default (Google Consent Mode is set to denied) and only anonymous, cookieless measurement is used. You can control non-essential storage through your browser settings, and where you are in a jurisdiction with a right to opt out of the “sale” or “sharing” of personal information for cross-context advertising (such as California), you may exercise it by contacting bramontiventures@gmail.com.

13. Changes to this Policy

We may update this Policy as the Service evolves. We will post the new effective date at the top, and for material changes we will provide additional notice. Continued use after changes means you accept the updated Policy.

14. Contact

Data controller contact for privacy matters: bramontiventures@gmail.com. You may also contact the Superintendencia de Industria y Comercio (www.sic.gov.co) regarding the protection of your personal data.