Privacy Policy
Last updated: February 8, 2026
Introduction
Voice to Text Online ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our speech-to-text and text-to-speech services.
By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our service.
Data We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (encrypted, we cannot read it)
- Account creation date
Audio Files (Speech-to-Text)
When you upload audio or video files for transcription, we collect and store:
- The audio/video file itself
- File name, size, and format
- The resulting transcript text
- Detected language and confidence scores
- Timestamps and word-level segments
Text Input (Text-to-Speech)
When you use our text-to-speech service, we may collect:
- The text you submit for conversion
- Language and voice settings selected
- Generation history (for registered users)
Note: Generated audio is not stored on our servers. It is created on-demand and delivered directly to your browser.
Payment Information
When you purchase a subscription or credits, we collect:
- Billing email address
- Transaction history and amounts
- Subscription status and plan type
We do not store your credit card details. All payment processing is handled securely by Stripe. See Stripe's privacy policy for details on how they handle your payment information.
Usage Data
We collect usage information to enforce rate limits and prevent abuse:
- Number of transcriptions per day/month
- Number of TTS generations per day
- Character counts for TTS usage
- Credit balance and transaction history
Data We Do NOT Collect
- Device identifiers or fingerprints
- Location data
- Advertising trackers or user profiling data
- Session recordings or heatmaps
- Cross-site tracking cookies
We use only cookieless, aggregate analytics (Vercel Analytics) for performance monitoring and understanding basic usage patterns. We do not use Google Analytics, Facebook Pixel, session recording tools, or any invasive tracking technologies. No analytics cookies are set.
How We Use Your Data
We use your data to:
- Provide transcription and text-to-speech services
- Store your transcripts so you can access them later
- Process payments and manage your subscription
- Enforce usage limits and prevent abuse
- Send important account notifications (password reset, billing issues)
- Respond to support requests
We do not sell your data. We do not use your audio or text content for advertising, marketing, or AI training purposes.
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contract performance: Processing your audio files and providing transcription and text-to-speech services, managing your account, and delivering purchased credits or subscriptions.
- Legitimate interest: Enforcing rate limits, preventing abuse, monitoring service performance, and maintaining security of our platform.
- Legal obligation: Retaining payment records for tax and accounting compliance.
- Consent: Where required, such as for optional communications. You may withdraw consent at any time.
Your Rights Under GDPR
If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data. You can delete your account and all associated data from your account settings.
- Right to data portability: Request your data in a machine-readable format. You can export transcripts in TXT, SRT, VTT, or JSON formats.
- Right to restrict processing: Request that we limit how we use your data.
- Right to object: Object to processing based on legitimate interest.
- Right to lodge a complaint: File a complaint with your local data protection authority if you believe your rights have been violated.
To exercise any of these rights, contact us at write@digiwares.xyz. We will respond within 30 days.
Third-Party Services
To provide our services, we share certain data with the following third-party providers:
Vercel Analytics
Cookieless Usage & Performance Analytics
Our only analytics provider. Monitors traffic, page views, and Core Web Vitals using aggregate, cookieless data. Does not collect personal information, does not track individual users, and does not set any cookies.
Vercel Analytics Privacy →Ahrefs Webmaster Tools
SEO Monitoring
Monitors search engine indexing, backlinks, and keyword rankings to help us improve SEO. Does not track individual user behavior or collect personal information.
Ahrefs Privacy Policy →
Supabase
Database, Authentication, File Storage
Stores your account information, audio files, and transcripts. Data is encrypted at rest and in transit. Servers located in the United States.
Supabase Privacy Policy →AssemblyAI
Speech-to-Text Transcription
Receives your full audio files for transcription processing. AssemblyAI processes audio on their servers and returns the transcript text. They do not use your audio to train their AI models.
AssemblyAI Privacy Policy →Google Cloud Text-to-Speech
Text-to-Speech Synthesis
Receives the full text you submit for audio generation. Google processes the text and returns synthesized audio. Google may log requests for abuse prevention.
Google Cloud Privacy Notice →Stripe
Payment Processing
Handles all payment processing. Receives your email and payment card details. We never see or store your full card number.
Stripe Privacy Policy →
Upstash Redis
Rate Limiting
Stores temporary usage counters (e.g., "user X made 5 requests today") to enforce rate limits. Does not store any content from your files or text.
Upstash Privacy Policy →Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Audio/video files | Automatically deleted after 30 days |
| Transcripts | Kept indefinitely (until you delete them) |
| TTS generation history | Kept indefinitely (until you delete them) |
| Payment records | Kept for legal/tax compliance (typically 7 years) |
| Rate limit counters | Automatically expire after 24 hours to 32 days |
Audio file deletion: To manage storage costs and protect your privacy, audio files are automatically deleted 30 days after upload. Your transcript text is preserved and remains accessible. If you need to re-transcribe a file, you will need to upload it again.
Your Rights & Controls
Delete Your Data
You can delete individual transcripts and TTS history from your dashboard at any time. Deleted items are permanently removed and cannot be recovered.
Delete Your Account
You can delete your entire account from the account settings page. This will permanently delete all your data including transcripts, files, and usage history. Active subscriptions will be cancelled.
Export Your Data
You can export individual transcripts in TXT, SRT, VTT, or JSON formats from the transcript viewer. For a complete data export, please contact us at write@digiwares.xyz.
Access Your Data
All your transcripts and history are accessible from your dashboard. If you need additional information about what data we hold, contact us.
Data Security
We implement appropriate security measures to protect your data:
- All data is encrypted in transit using HTTPS/TLS
- Data at rest is encrypted in our database and storage
- Passwords are hashed using industry-standard algorithms (bcrypt)
- Access to production systems is restricted and logged
- We use secure, reputable third-party providers
While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Cookies
We use only essential cookies:
- Essential cookies: Required for authentication and keeping you logged in.
We do not use analytics cookies, advertising cookies, or cross-site tracking cookies. Our analytics provider (Vercel Analytics) is fully cookieless.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.
International Users & Data Transfers
Our services are hosted in the United States. If you access our service from outside the United States, your data will be transferred to and processed in the United States, where data protection laws may differ from your country.
Our third-party processors (Supabase, Stripe, Vercel, AssemblyAI, Google Cloud) maintain Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure your data is protected during international transfers in compliance with GDPR requirements.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.
Continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- 📧 Email: write@digiwares.xyz
For data deletion requests or privacy concerns, we aim to respond within 7 business days.