This Privacy Policy explains how TranscribeMaxx ("we", "our", or "us") collect, use, disclose, and safeguard your information when you use our API service. We are committed to protecting your privacy and complying with the applicable data protection laws.
2. Information We Collect
2.1 Personal Information
When you register for an account, we collect:
Email address
Name (optional)
Password (stored as a securely salted cryptographic hash)
Account preferences and settings
2.2 Usage Information
When you use our API, we automatically collect:
IP addresses
User agent information
API endpoint requests
Request parameters and query data
YouTube video IDs you request transcripts for
Response times and performance metrics
API key usage and credit consumption
Cache hit/miss information
Error logs and debugging information
2.3 Payment Information
We process payments through Stripe. We store your Stripe customer ID, subscription ID, invoice ID, and records of credit purchases and consumption. We do not store payment card details — all payment card information is handled directly by Stripe, which is PCI DSS compliant.
3. How We Use Your Information
We use your information for the following purposes:
Service Delivery: To provide, maintain, and improve our API service
Authentication: To verify your identity and manage your account
Billing: To process payments and manage subscriptions
Usage Monitoring: To track API usage, enforce rate limits, and manage credit consumption
Performance Optimization: To analyze and improve API performance and reliability
Security: To detect, prevent, and respond to fraud, abuse, and security incidents
Communication: To send service updates, billing notifications, and account alerts
Legal Compliance: To comply with legal obligations and enforce our terms
Analytics: To understand usage patterns and improve our service
We do not sell your personal information. We also do not share your personal information for cross-context behavioral advertising.
4. Legal Basis for Processing
We process your personal data based on:
Contract Performance: Processing necessary to provide the API service you've subscribed to
Legitimate Interests: Improving our service, preventing fraud, and ensuring security
Legal Obligation: Complying with accounting, tax, and other legal requirements
Consent: Marketing communications and optional features (where applicable)
5. Third-Party Services
We use the following third-party services that may process your data:
Stripe Purpose: Payment processing and subscription management Location: United States (with appropriate data protection safeguards, where applicable) Privacy Policy: https://stripe.com/privacy
Redis Purpose: Infrastructure software used by us for caching and performance optimization. Data: Temporary caching of API responses and session data. Redis does not independently receive or use your information.
6. Cookies and Tracking Technologies
We use cookies for:
Authentication: To keep you logged in and manage your session
Analytics: To understand how users interact with our service
Preferences: To remember your settings and preferences
You can control cookies through your browser settings, but disabling cookies may affect service functionality.
7. Your Rights
As a data subject, you have the following rights:
Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data
Right to Restriction: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for optional processing activities
Right to Lodge a Complaint: File a complaint with your local data protection authority
Residents of certain U.S. states may have additional privacy rights under applicable law.
To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR.
8. Data Retention
We retain your data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data depends on the type of data, how we use it, and in many cases your settings:
Information we retain until you delete it: Some of our Services allow you to delete Personal Data stored in your account.
Information we delete automatically: In some cases, Personal Data will be deleted automatically. For example, transcriptions may be automatically deleted within 30 days (unless we have to retain them for reasons as previously explained).
Information we retain for longer for legitimate security, safety, or legal reasons: In some cases, we need to retain Personal Data for longer even after you delete it, for example because we are legally required to, to address fraud and abuse, for security reasons, or for financial record-keeping purposes. For instance:
If specific Content, or your account, is banned because of violations of our usage policies, we may retain that data to protect our services from fraud, abuse, or other violations of our policies;
If we are legally required to retain your data then we may retain it for the duration of the relevant legal or regulatory obligation;
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
Encryption of data in transit (HTTPS/TLS)
Encrypted password storage using industry-standard hashing
Regular security updates and monitoring
Access controls and authentication
Regular backups with encryption
Security incident monitoring and response procedures
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Account Deletion
You may delete your account from your account settings or by contacting us.
11. Business Transfers
If we merge, are acquired, or sell assets, your information may be transferred as part of that transaction.
12. International Data Transfers
Our servers are located in the United States. We may share information with trusted service providers who help operate our Services, including payment processors, cloud hosting providers and infrastructure providers. If you access the Service from another country, your information may be transferred to and processed in the United States. Where required by applicable law, we rely on appropriate safeguards for international data transfers.
13. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at [email protected].
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at [email protected].