Privacy Policy

1. Who is responsible

Wascripts is operated by Nihad Aslanzade, Baku, Azerbaijan, who is the data controller for the information described here. Contact: contact@nihadaslanzade.com.

2. What we collect

• A device identifier. The app generates or reads an identifier for your device and sends it with each request. It is what your credit balance is attached to. We do not ask for your name, phone number or email in order to use the app.
• The audio you submit. Only while it is being transcribed. See retention below.
• The transcript produced from it. Held briefly so the app can collect the result. See retention below.
• Credit and usage records. How many credits you have and how many transcriptions have been run, attached to the device identifier.
• Purchase records. Order reference, amount, currency, number of credits, status and timestamps. Card numbers and billing details never reach our servers; they are handled entirely by Paddle.
• Business account details, if you open one. Email address and a cryptographic hash of your password. We cannot read your password.
• Server logs. Standard technical logs including IP address and request times, used for security and debugging.

3. How long we keep it

• Audio recordings: deleted immediately after processing. The file is removed from the server in the same operation that finishes the transcription. This happens whether the transcription succeeded or failed. Recordings are never archived, never backed up and never added to any dataset.
• Transcripts: up to one hour. The finished text sits in a temporary result store so your app can fetch it, and is then automatically deleted. If you want to keep a transcript, copy it out of the app.
• Credit balances and purchase records: kept while your account is active, and afterwards for as long as tax and accounting law requires records of a sale to be retained.
• Server logs: kept for a short period for security and troubleshooting.

4. Who else processes your data

We use two external providers, and only these two:

• Google. Audio is sent to Google's Gemini models to produce the transcript. Google processes it to return a result to us and is bound by its own terms for API customers.
• Paddle.com Market Ltd. The merchant of record for all purchases. Paddle collects the payment and billing information needed to complete the sale and to meet its tax obligations. Paddle's own privacy policy governs that data.

We do not sell personal data, we do not share it for advertising, and we use no third-party analytics or tracking tools.

5. Recordings of other people

Voice notes usually contain someone else's voice. Where the law treats that person's voice as their personal data, you are the one deciding to have it transcribed, and the responsibility for having a lawful basis to do so is yours. We act on your instruction and delete the recording immediately afterwards. This is set out in section 4 of the Terms and Conditions.

6. Why we are allowed to process it

• To perform our contract with you: transcribing what you submit, tracking credits, completing purchases.
• Legitimate interests: keeping the service secure and working, preventing abuse.
• Legal obligation: retaining records of sales for tax purposes.

7. Your rights

Depending on where you live, you may have the right to access the data we hold about you, to have it corrected or deleted, to object to processing, or to receive a copy in a portable format. Write to contact@nihadaslanzade.com and include your device identifier, shown in the app's settings, so we can find your records.

We will respond within 30 days. Note that we cannot recover deleted recordings or expired transcripts, because they no longer exist anywhere in our systems.

8. This website

This site sets no cookies and runs no analytics. It stores one item in your browser's local storage, your choice of language, so the page opens in the same language next time. Fonts are loaded from Google Fonts. The payment page loads Paddle's checkout script, which is what displays the payment form.

9. Security

Traffic is encrypted in transit with TLS. Passwords for business accounts are stored only as hashes. API keys are stored hashed and shown once at creation. Access to the production environment is restricted to the operator.

10. Children

Wascripts is not intended for use by anyone under 18, and we do not knowingly collect data from children.

11. Changes

If this policy changes, the date at the top will change with it. Material changes affecting how your data is used will be notified by email or in the app before taking effect.

12. Contact

Nihad Aslanzade, Baku, Azerbaijan
contact@nihadaslanzade.com