Política de Privacidade
Última atualização: March 20, 2026
STT.ai ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using STT.ai, you agree to the practices described in this policy.
1. Informação que coletamos
Informações sobre a conta
When you create an account, we collect your email address and, optionally, your name. If you sign in through a third-party provider (e.g., Google), we receive basic profile information from that provider.
Informações sobre o pagamento
When you purchase credits or subscriptions, payment is processed by our third-party payment providers (Stripe, Square). We do not store your full credit card number. We retain transaction records (amount, date, and payment method type) for accounting purposes.
Ficheiros de áudio
When you upload audio for transcription, your files are sent to our GPU server for processing and deleted immediately after transcription is complete. We do not permanently store your audio files. Audio is transmitted over HTTPS (TLS 1.3) and processed in memory.
When you provide a URL for transcription (e.g., a YouTube or podcast link), the audio may be temporarily downloaded to disk on our server using yt-dlp before processing. These temporary files are deleted immediately after transcription is complete. The URL you provide is not stored after processing.
Transcrições
Generated transcripts are stored in your account so you can access them later. If you enable client-side encryption, the transcript is encrypted in your browser before being saved to our servers — we cannot read the stored version. Note: during processing, the server handles the transcript in plaintext before returning it to your browser for encryption. You may delete your transcripts at any time.
Dados de Uso
We collect basic usage information such as pages visited, features used, transcription requests made, timestamps, browser type, and IP address. This helps us improve the Service and diagnose issues.
2. Cifração Zero-Conhecimento
STT.ai offers an optional client-side encryption mode for stored transcripts. When enabled, your transcript is encrypted in your browser using AES-256-GCM with a key derived from your password before being saved to our servers. We never have access to your encryption keys, and cannot read or recover encrypted transcripts. Note: audio must be sent unencrypted to our GPU for transcription — the encryption protects the stored transcript, not the processing step. For more details, visit our Security page.
3. Como usamos sua informação
We use collected information to:
- Provide, maintain, and improve the Service.
- Process transactions and manage your account.
- Send transactional emails (receipts, account notifications, security alerts).
- Monitor for abuse and enforce our Termos de serviço.
- Analyze aggregate usage trends to improve performance and features.
4. Cookies e análises
Essential Cookies
We use essential cookies that are necessary for the Service to function. These include:
- Session cookies: to keep you logged in and maintain your session.
- CSRF tokens: to protect against cross-site request forgery attacks.
- Language preference: to remember your selected language.
These cookies are strictly necessary and cannot be disabled without breaking the Service.
Analytics Cookies
We use Clicky for website analytics to understand how visitors interact with STT.ai. Clicky may set cookies to track page views and sessions. You can opt out of analytics tracking through your browser settings or by visiting our 14. Gerenciar sua privacidade page.
Advertising Cookies
We do not use advertising cookies or trackers. We never have and we never will.
You can disable non-essential cookies (analytics) through your browser settings or our Privacy Settings page. Essential cookies cannot be disabled as they are required for the Service to function.
5. Compartilhamento de dados
We do not sell your personal data. We never have and we never will.
We share information only in the following limited circumstances:
- Payment processors: Stripe and Square process your payments. They operate under their own privacy policies.
- Legal requirements: We may disclose information if required by law, subpoena, or court order.
- Safety: We may share information if necessary to protect the rights, property, or safety of STT.ai, our users, or the public.
6. Contribuições do Laboratório de Voz
STT.ai offers an optional Voice Lab program where you can contribute audio samples to help improve open-source speech recognition models. Participation is entirely voluntary and opt-in. Contributed audio is licensed under CC-BY-SA and may be included in publicly available datasets used to train open-source models. You can withdraw from the Voice Lab at any time through your account settings. Contributions made prior to withdrawal that have already been incorporated into released datasets may not be removable.
7. Tratamento de dados da API
If you use the STT.ai API, the same privacy protections apply. Audio submitted via the API is processed and deleted immediately. API request metadata (timestamps, endpoints, response codes) is logged for rate limiting and debugging purposes and is retained for up to 90 days.
8. Retenção e supressão de dados
We retain different types of data for different periods:
- Audio files: Deleted immediately after transcription is complete. This includes both uploaded files and files temporarily downloaded from URLs.
- Transcripts: Stored until you delete them or until your account is deleted.
- Account data: Retained while your account is active. After account deletion, personal information is removed within 30 days, except where retention is required by law.
- Usage and analytics data: Anonymized after 90 days.
- Payment records: Retained as required by applicable tax and financial regulations.
You may delete your account at any time through your account settings or by emailing hello@stt.ai. When you delete your account, we remove your personal information and transcripts within 30 days, except where retention is required by law.
9. Seus Direitos Sob RGPD
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request that we correct inaccurate or incomplete data.
- Right to erasure: You may request that we delete your personal data.
- Right to data portability: You may request a machine-readable copy of your data.
- Right to restrict processing: You may request that we limit how we use your data.
- Right to object: You may object to our processing of your personal data.
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.
Our legal bases for processing personal data under the GDPR include: performance of a contract (providing the Service), legitimate interest (improving the Service and preventing abuse), consent (analytics and marketing), and legal obligation (financial record-keeping).
To exercise any of these rights, please contact us at hello@stt.ai. We will respond within 30 days.
10. Seus Direitos Sob CCPA
Se você é residente na Califórnia, a Lei de Privacidade do Consumidor da Califórnia (CCPA) concede os seguintes direitos:
- Direito a saber: Você pode solicitar a divulgação das categorias e peças específicas de informações pessoais que coletamos sobre você.
- Direito a excluir: Você pode solicitar a supressão das suas informações pessoais.
- Direito de excluir a venda: Nós não vendemos suas informações pessoais. Não há nada para optar.
- Direito à não discriminação: Nós não vamos discriminar contra você por exercer seus direitos de CCPA.
Para enviar um pedido CCPA, e-mail hello@stt.ai.
11. Privacidade das Crianças
Our servers are located in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. Audio files may be processed on our US-based GPU servers. By using the Service, you consent to the transfer of your data to the United States.
Para os usuários do EEE e do Reino Unido, contamos com cláusulas contratuais padrão e outros mecanismos de transferência lícitos para garantir que seus dados sejam protegidos de acordo com os requisitos do GDPR.
12. Segurança
A STT.ai não é destinada para crianças menores de 13 anos. Não coletamos de forma consciente informações pessoais de crianças menores de 13 anos. Se descobrirmos que uma criança menor de 13 anos criou uma conta, vamos imediatamente apagar a conta e os dados associados. Se você acreditar que uma criança menor de 13 anos está usando o Serviço, por favor entre em contato conosco no hello@stt.ai.
13. Alterações a esta política
Você pode exportar todas as suas transcrições a qualquer momento usando o recurso de exportação na sua conta. Os transcritos podem ser exportados em vários formatos, incluindo TXT, SRT, VTT, DOCX, JSON e PDF. Se você precisar de uma cópia completa de todos os dados pessoais que temos sobre você, entre em contato conosco em hello@stt.ai e vamos providencia-lo dentro de 30 dias.
14. Gerenciar sua privacidade
Implementamos medidas técnicas e organizacionais para proteger seus dados, incluindo criptografia em trânsito (TLS), criptografia em repouso e criptografia opcional do lado do cliente. Para detalhes completos sobre nossas práticas de segurança, consulte o nosso Security página.
15. Contacto
Podemos atualizar esta Política de Privacidade de vez em quando. Quando fizermos alterações materiais, atualizaremos a data "Último atualizado" no topo desta página e notificar os usuários por e-mail ou um aviso in-app. Seu uso continuado do Serviço após as alterações serem postadas constitui aceitação da política atualizada.
16. Gerenciar sua privacidade
Você pode gerenciar suas preferências de privacidade, incluindo opt-out analytics e exportação de dados, na Configurações de Privacidade página.
17. Contacto e Proteção de Dados
Se tiver alguma dúvida sobre esta Política de Privacidade, nossas práticas de dados ou desejar exercer seus direitos de proteção de dados, entre em contato com o nosso Agente de Proteção de Dados em:
STT.ai
Agente de Protecção de Dados
E-mail: privacy@stt.ai
Inquéritos gerais: hello@stt.ai
Web: https://stt.ai