Privacy Policy

This Privacy Policy explains what information TransTTS ("we", "us") collects when you record, transcribe, translate, and generate speech with our platform, how we use it, and the choices you have. We collect only what the service needs to work.

1. Information We Collect

• Account details: your email address, and — if you enable phone verification — your phone number. Both are used to create your account and verify it.
• Verification data: one-time passcodes (OTPs) sent to your email or phone, and password-reset tokens. These are short-lived and used only to confirm it's you.
• Profile information: optional fields you choose to add, such as name, job title, organization, bio, and default language or voice.
• Audio and text content: audio you record or upload, transcripts, translations, and text you submit for speech generation.
• Your API keys: if you add a custom Whisper/OpenAI API key in Settings, it is stored to run transcriptions on your behalf.
• Usage and technical data: job history, and basic request metadata (such as IP address) used for rate limiting and abuse prevention.

2. How We Use Your Information

• To provide the core features: recording, transcription (via the Whisper API), translation, and text-to-speech.
• To authenticate you, verify your email or phone, and let you reset your password.
• To save your job history and profile so you can return to your work.
• To protect the service — enforcing upload limits, validating input, and rate-limiting abusive traffic.
• To respond to messages you send us through the contact form.

We do not sell your personal information, and we do not use your audio or transcripts to train models.

3. Data Storage & Security

We take security seriously. Passwords are hashed, sessions are protected against CSRF, and cost-bearing and account endpoints are rate-limited. Uploads are size-limited and validated before processing. Where you use your own API key, transcription requests are sent to that provider under your key. You can review and edit your profile at any time, and export or delete your data through your account.

4. Third-Party Services

To deliver certain features, we send the minimum necessary data to trusted providers:

• Speech & language APIs (e.g. OpenAI / Groq Whisper) process audio for transcription and text for translation and speech generation.
• Email providers (SMTP or Resend) deliver verification codes, password-reset links, and contact replies.
• SMS gateways (e.g. your own gateway or Twilio) deliver phone verification codes, if you use phone verification.

These providers process data only to perform their service and under their own terms.

5. Cookies & Local Storage

We use a session cookie to keep you signed in, and browser local/session storage to remember preferences such as your theme and default settings. We do not use third-party advertising trackers.

6. Your Rights

• Access and update your profile information at any time.
• Export your data or delete your account and associated content.
• Choose not to add a phone number or a custom API key — both are optional.

7. Data Retention

We keep your account and content while your account is active. Verification codes and reset tokens expire quickly (typically within minutes to an hour). When you delete your account, we remove your associated data, except where we must retain limited records for legal or security reasons.

8. Contact Us

For any privacy question or request, reach us at privacy@transtts.ai or through our contact page.