Privacy Policy

1. Who We Are

sbttlo ("we," "our," "us") is an online service that transcribes and translates audio to help language learners. Our website is sbttlo.com. For privacy questions, contact us at privacy@sbttlo.com.

2. What Data We Collect

Account data

• Email address (required to create an account)
• Display name (optional, you choose it)
• Hashed password (we never store your password in plain text)
• Account tier and subscription status

Uploaded content

• Audio files you upload or YouTube/URL links you submit
• Transcripts, translations, and vocabulary generated from your audio
• Optional edits you make to generated transcripts

Usage data

• Upload dates, file sizes, durations
• Number of transcripts created per billing period
• Server log data (IP address, browser, request timestamps) — retained for 30 days

3. How We Use Your Data

• To provide transcription and translation services
• To enforce per-tier usage quotas
• To send transactional emails (account verification, password reset, billing notices)
• To diagnose errors and improve the service
• To comply with legal obligations

We do not sell your data to third parties. We do not use your audio content to train AI models.

4. Data Retention

Free tier transcripts are retained for 24 hours after processing unless you delete them sooner. Pro/Ultra tier transcripts are retained for the lifetime of your active subscription plus a 14-day grace period after cancellation. Account data is retained until you delete your account.

When you delete your account (via My Account → Danger Zone), all transcripts and account data are permanently deleted within 24 hours.

5. Third-Party Services

We use the following sub-processors to deliver the service:

• Deepgram — audio transcription
• OpenAI — translation and vocabulary extraction
• Cloudflare R2 — file storage
• Stripe — payment processing (for paid plans)
• Resend — transactional email delivery

Each sub-processor has their own privacy policy and processes data only as necessary to provide the service.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (right to erasure)
• Export your data in a portable format
• Object to or restrict processing

To exercise any of these rights, email privacy@sbttlo.com or use the account deletion feature in your account settings.

7. Cookies

We use localStorage (not cookies) to store your authentication tokens locally on your device. We do not use advertising or tracking cookies. We may use first-party analytics in future.

8. Security

Passwords are hashed using bcrypt. Authentication uses short-lived JWT access tokens (1 hour) and 7-day refresh tokens. HTTPS is enforced in production. Audio files and transcripts are stored in access-controlled cloud storage.

9. Children

sbttlo is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. Contact us immediately if you believe a child has created an account.

10. Changes to This Policy

We will update this page when our practices change and update the "Last updated" date above. For material changes, we will notify you by email at least 14 days before they take effect.