This page summarizes our privacy policy. The policy is the authoritative text. If you need an exact statement for an application, quote the policy and write to us.

Who processes your audio

  • ElevenLabs, Inc. (USA) converts recordings and dictation into text. Audio is sent there only to be transcribed.
  • Google Gemini is used for the AI features in My notes: Ask AI and Ask your notes (they send the text of a note and its transcripts), and picking a note's icon (from its title and beginning).
  • Hosting and recording storage run on Cloudflare (USA), and the database on PlanetScale (servers in Frankfurt, EU).
  • The privacy policy says the providers process data on our behalf, under data processing agreements, and that transfers outside the EU/EEA rely on the European Commission's standard contractual clauses or other safeguards.

What is kept, and for how long

  • Homepage uploads: we do not store the recording. The transcript appears in your browser tab only (for free use). Pro accounts save homepage transcripts to My notes.
  • My notes: recordings and transcripts are kept until you delete them.
  • Trash: a deleted note stays in the trash for 30 days, then it is purged with its recordings and images.
  • Account data: kept while the account exists and for 12 months after it is closed. Invoices and payment data are kept as long as accounting and tax rules require.
  • Access logs: at most 90 days.
  • Ask AI chats are kept with the note until you delete them.

Whatever the providers keep on their side is governed by their own terms and our agreements with them. We cannot promise more than the privacy policy says, so please do not describe your files as "deleted immediately" in an application.

Deleting your data

Delete a note yourself in My notes (then empty the trash if you do not want to wait 30 days). To delete your whole account and its data, or to use any GDPR right, write to info@supertranscription.com. We reply within 30 days at the latest.

The AI switch

In Settings, the Transcription and AI setting controls whether anything is sent to ElevenLabs and Google Gemini. Switch it off and nothing more is sent to those providers; you can still write notes. The web asks again before the first recording or AI question if the switch was ever turned off.

Who runs it, and which law applies

The operator and data controller is Miha Mlakar, Kamnik, Slovenia (European Union), a personal project. The GDPR applies, and the supervisory authority is the Information Commissioner of the Republic of Slovenia. Contact: info@supertranscription.com.

What is not offered

  • No on-premise or self-hosted version.
  • No certifications (no SOC 2, no HIPAA, no ISO claims, and we do not call the service "GDPR-certified").
  • No claim of end-to-end encryption. Data is encrypted in transit (HTTPS/TLS).
  • No data processing agreement template for customers. If you need one, ask by email before you rely on it.
  • No promise of EU-only processing: some providers are in the USA.

If your rules forbid sending participants' audio to a third-party AI service, this tool is not the right choice for that project.

Sample consent paragraph

This is a sample to adapt, not legal advice. Check it against your institution's rules.

"With your permission, the audio recording of this interview will be sent to an online speech-to-text service (Supertranscription, operated from Slovenia, which uses ElevenLabs in the USA to transcribe audio) to produce a written transcript. [If used: The transcript text may also be processed by Google Gemini if the researcher uses an AI assistant on it.] The researcher will remove your name and identifying details from the transcript before analysis. Recordings and transcripts will be stored in [location] until [date] and then deleted. You may withdraw at any time before [date] by contacting [name, email], and your data will be deleted."

Checklist for an ethics board

  1. Name the service and its operator (Miha Mlakar, Slovenia, EU) and link the privacy policy.
  2. List the processors: ElevenLabs for transcription, Google Gemini only if you use AI features.
  3. State where data is processed: the USA for some providers, with standard contractual clauses for transfers from the EU/EEA.
  4. Say what is stored and for how long: nothing for homepage uploads; My notes until you delete, plus 30 days in the trash.
  5. Explain how you will anonymize the transcript, and who has access to your account.
  6. Explain how participants can withdraw and how you will delete their data.
  7. Say whether you will switch off Transcription and AI after transcribing.
  8. Keep the original recording and transcript in your institution's approved storage if your rules require it, and delete the copy here.
  9. Confirm your consent form mentions third-party processing.

More on interviews: interview transcription and how to transcribe an interview.