Privacy Policy

What we collect and why

Our guiding principle is to collect only what we need. When you sign in, we receive your Google account identifier, email address, name, and optional avatar. We also store your chosen locale, timezone, and records of accepting legal documents. We do not store Google access or refresh tokens.

Job data can include a title, source type, platform, source URL or uploaded-file name and size, selected language, status, duration, timestamps, and a short history preview. Full transcript text is stored separately in private object storage.

For paid plans, the reseller processes payment and we receive payment-related identifiers and subscription status; we do not store card numbers. We also keep support correspondence and limited security and audit events.

We use essential cookies for sessions and store language and theme preferences on your device. We do not use these preferences for advertising.

When we access or disclose your information

To provide the Services you request, we use providers for sign-in, payment fulfilment, transcription processing, database hosting, private file storage, infrastructure, and support. They receive only the data needed for their role and process it under their own terms or our instructions.

No human looks at your content except for limited purposes with your express permission, for example if an error stops an automated process and needs manual intervention, or to respond to legal process.

To investigate, prevent, or take action regarding restricted uses, we may access an account as a measure of last resort, and we will take action as necessary, including notifying appropriate authorities where warranted.

We may aggregate and de-identify information and use it for any purpose, including analytics. We may preserve or share data if compelled by a legally binding order or proper request, or in limited circumstances in the event of an emergency request.

If BossyScript is acquired by or merges with another company, we will notify you before your personal information is transferred or becomes subject to a different privacy policy.

Your rights with respect to your information

We strive to apply the same data rights to all customers, regardless of location: the right to know what personal information is collected and used; the right of access; the right to correction; the right to erasure; the right to restrict processing; the right to object; the right to portability; the right not to be subject to automated decision-making; the right to complain to a supervisory authority; and the right to non-discrimination.

Many of these rights can be exercised by signing in and updating your account. In Settings, you can export your account data and delete your account. Depending on where you live, you may also have the right to appeal a decision that denies a request.

We may need to take reasonable steps to verify your identity before responding. Certain information may be exempt from requests under applicable law.

How we secure your data

All data is encrypted via TLS when transmitted between our servers and your browser, and we use access controls, private storage, and security logging to protect data at rest. No system can be guaranteed completely secure, so keep your account secure and do not send transcripts through support messages.

Data retention and deletion

We keep your information for the time necessary for the purposes for which it is processed. Completed transcripts are retained for 30 days by default and then deleted. You may delete a job earlier.

Account deletion removes remaining transcripts, revokes sessions, and anonymises the profile. Limited records may remain for legal, accounting, fraud-prevention, or dispute purposes.

Location of data and international transfers

Your data may be processed outside your country. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses.

Changes and questions

We may update this Policy to comply with relevant regulations and reflect new practices, and we will refresh the date at the top of this page when we make a significant change.

For privacy questions or requests, email script@bossy.pro.