Privacy notice on the processing of personal data
Data controller
The data controller for your account and usage data is Mert S. Kaplan ( ). For the personal data in the speech you transcribe, you are the data controller (Terms of use and licence agreement, sections 3 and 4).
Data processed on the server
Identity and contact: name, e-mail address. Account: an irreversible hash of the password, plan, interface preferences, the version and date of your acceptance of the agreement. Usage: total transcription time. Device: for a free account’s sign-up and sign-in, a random cookie set in the browser, a random id in the browser’s storage and a hash of the browser fingerprint (ThumbmarkJS, computed on your device). Used only for the free plan’s "one account per device" rule and deleted 30 days after last use; not kept for paid plans. The IP address is not used for this rule. Content: the transcripts’ titles, languages, source links, text and earlier versions. Security: the session cookie; the IP address and browser details in the session record. Cloud transcription keys: the API keys you enter, encrypted, and for each key the number of requests and the seconds of audio sent in the last 24 hours (not the audio itself). Contact form: the name, e-mail address, subject and message you write in the website's contact form are only e-mailed to the operator and never stored on the server; to prevent abuse your IP address is counted in memory only, for an hour.
Data that stays on your device
Audio, microphone recordings, speakers’ voice prints, the speech recognition models and the transcripts’ local copies stay in your browser and are never sent to the server (with a team transcriber, audio and voice prints go to that device only; see "Transfers" below). If you choose cloud transcription, the audio goes from your browser straight to the provider you chose (Groq, OpenAI or another address you entered) with your API key; it does not pass through or stay on the LiveType server.
Purposes and legal bases
The data is processed to open your account and provide the service (KVKK art. 5/2-c, entering into and performing the contract), to apply the free time, retention and "one free account per device" limits (art. 5/2-c; for the device data art. 5/2-f, the legitimate interest in preventing abuse), to keep the service secure and prevent abuse (art. 5/2-f, legitimate interest) and to meet legal obligations (art. 5/2-ç).
Transfers
Page traffic passes through Cloudflare, which provides the encrypted connection (abroad). E-mail is sent through the provider the operator chose. Speech recognition models and some program files load into your browser directly from Hugging Face and jsDelivr, and for YouTube transcripts the player loads from YouTube; these services see your IP address. When you pick a teammate's transcriber device, the audio and that transcript's speaker voice prints go straight (peer to peer) to that device to be transcribed; they do not pass through the server. The voice prints, and for microphone transcriptions the audio, are kept on that device too. For the two devices to find each other, Cloudflare's and Google's STUN servers see their IP addresses, not the audio. The profile picture in the top bar loads from Gravatar: Gravatar sees a hash (SHA-256) of your e-mail address and your IP address, not the address itself. Transfers abroad follow KVKK article 9. When you choose cloud transcription, you transfer the audio to the provider you chose and whose key you or your team leader entered (usually abroad); that provider’s terms apply to it.
Retention
Account data is kept, out of reach, also after the account is deleted (so the free time cannot be used again with the same address), transcripts for your plan’s retention period (Free 15 days, Individual 60 days, Business · 5 people without limit, Business · 20 people without limit) or until you delete them, transcript versions for 7 days, session records until the session ends.
Your rights
Under KVKK article 11 you may learn whether your data is processed, ask for information, ask for it to be corrected or deleted, object, and claim compensation for damage. Send your requests to . You can also delete your account yourself on the Account page.