Privacy Policy

§1. Data Controller

1. The Controller of your personal data is: KOMBA Maciej Włodarczak, Tax ID (NIP): PL777-288-21-91, having its registered office in: 62-080 Tarnowo Podgórne.
2. For matters related to data protection, you can contact us at: contact@srting.com.

§2. How and why do we process data?

We collect only the data necessary to provide the Service:

• Registration and login: Email address and password (encrypted). Legal basis: Contract performance (Art. 6(1)(b) GDPR).
• Billing: Transaction history, balance status, invoice data (if provided). Legal basis: Legal obligation (Art. 6(1)(c) GDPR).
• Communication: Email address for sending technical notifications and responding to reports. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Device Identifier (UUID): To prevent promotional abuse (creating multiple accounts), we process an irreversible cryptographic hash of the computer's hardware identifier. We do not store the original UUID – only its hash. The hash is retained for the duration of Account activity plus 12 months after deletion. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – protection against abuse.
• Payments (Paddle): Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Personal and financial data necessary for the transaction are transferred to Paddle.com Market Ltd. Paddle's privacy policy is available here: https://paddle.com/privacy. Legal basis: Contract performance (Art. 6(1)(b) GDPR).

§3. Audio and Local Processing (Local AI)

1. SRTing operates in a Local AI model. This means that the transcription process (speech-to-text) takes place entirely on your device.
2. We do not upload your audio files or generated subtitles to our servers.
3. Our servers receive only technical metadata necessary for billing the service (e.g., "user X processed 60 seconds of audio"), but have no access to the audio content.
4. This ensures that your projects, even those covered by strict confidentiality (NDA), are safe.

§4. Cookies

1. We use cookies to:
   • Maintain your login session (essential cookies),
   • Remember your preferences,
   • Collect anonymous traffic statistics (e.g., Google Analytics) – only with your consent.
2. Data Transfer Outside EU: If you consent to analytical cookies, data may be transferred to Google LLC (USA). The transfer is based on Standard Contractual Clauses (SCC) approved by the European Commission and additional technical safeguards implemented by Google. You can withdraw consent at any time using the cookie bar on the website.
3. You can manage cookie consents using the bar at the bottom of the page or your browser settings.

§5. Your Rights (GDPR)

As a User, you have the right to:

• Access data: You can request a copy of your data.
• Rectify data: If it is incorrect or outdated.
• Delete data ("Right to be forgotten"): You can request account and data deletion if there are no other grounds for processing (e.g., tax requirements).
• Restrict processing: In specific cases.
• Data portability: Receive your data in a structured format.

To exercise these rights, write to us at: contact@srting.com.

§6. Security

1. We use SSL/TLS encryption for all communication with our servers.
2. Passwords are stored in hashed form (we cannot view them).
3. We use proven cloud infrastructure compliant with security standards.
4. To ensure service security and stability, we use Google Firebase infrastructure. Data is stored on servers located within the European Union (region europe-west), ensuring GDPR compliance.

§7. Contact

If you have questions regarding privacy, we are at your disposal:

Email: contact@srting.com