Scope and controller
Wraxle LLC controls the personal information used to operate TranscriptLayer. Stripe or Link separately controls information it collects as merchant of record. Their privacy terms apply to their processing.
Information we handle
- Account identity, email address, sign-in, session, and security information.
- API-key names, scopes, timestamps, and one-way verifiers. We do not retain retrievable API-key secrets.
- Plan, purchase, credit, refund, payment-status, and dispute records.
- Requested source URLs or IDs, source platform, track choices, transcripts, batches, usage entries, and webhook records.
- Support messages and the information you choose to include in them.
- Network, browser, device, security, bot-protection, and operational event information received by us or our providers.
Where information comes from
We receive information from you, your use of the API and dashboard, source platforms when fulfilling your request, identity and payment providers, security and monitoring providers, and systems that help us prevent abuse and operate the service.
How we use information
We use information to provide and secure TranscriptLayer, authenticate users, fulfill source requests, account for credits, process payments, prevent fraud and abuse, provide support, monitor reliability, enforce our policies, and meet legal obligations. Where a law requires a legal basis, we rely on contract, legitimate interests in operating and protecting the service, consent where requested, and legal obligations.
Providers and disclosures
We disclose only the information needed to operate the service to Cloudflare for hosting and security, WorkOS for identity, Stripe and Link for billing, Better Stack for operational monitoring, our proxy provider for controlled source requests, and the selected source platform when fulfilling a request. YouTube is the first supported source. We may also disclose information when required by law or needed to protect rights, safety, and service integrity.
Read the provider policies for Cloudflare,WorkOS, Stripe, and Better Stack for their own processing terms.
Payments
Stripe Managed Payments, through Sold through Link, LLC, acts as merchant of record for beta purchases. Stripe and Link collect and use transaction, subscription, payment-method, tax, fraud, refund, and dispute information under their own terms. We receive customer-safe billing status and identifiers needed to grant credits, show purchase history, handle product support, and reconcile the account.
Sale, sharing, and advertising
We do not sell personal information, share it for cross-context behavioral advertising, or use advertising trackers. TranscriptLayer uses essential authentication, payment, security, bot-protection, and operational monitoring technology.
Retention and access
| Information | Normal period or rule |
|---|---|
| Caption-content access | 24 hours after the selected track completes. A source restriction may end access sooner. |
| Operation metadata, webhooks, delivery history, account-linked analytics, and closed-account resource links | 30 days. |
| Customer-visible usage | 12 months. |
| Security audit events | 90 days. |
| Identity-free service aggregates | 400 days. |
| Stripe Customer record | Reviewed for deletion four years after its last transaction, unless an earlier verified privacy request applies or an open legal, payment, dispute, fraud, or tax need requires retention. |
A 30-day metadata period does not extend caption access. Shared public-source artifacts may remain cached after an account closes because they are not owned by one customer, subject to source access checks and required removal. Billing, tax, dispute, fraud, and legal records remain only for their applicable purpose and period.
We close an account after 12 months of qualifying inactivity, with warnings 30 days and 7 days before closure. Closure revokes sessions, API keys, and webhooks. A privacy request may begin closure sooner.
Your privacy rights
Every user may ask to access, correct, delete, or receive a copy of their account information. Where required, you may also object, restrict processing, appeal a decision, or exercise rights without discrimination. We verify requests before acting. We will explain what we deleted and what we must retain for disputes, fraud prevention, tax, legal obligations, or claims.
Because we do not sell personal information or use it for cross-context behavioral advertising, there is no sale or advertising opt-out needed for TranscriptLayer. Contact us if you believe this statement does not match your experience.
International processing
Information may be processed in the United States and wherever our providers operate. Cloudflare's Western North America placement is a preference, not a promise of US-only storage. We use required transfer safeguards where applicable and do not promise a country-specific data location.
Security
We use administrative, technical, and organizational safeguards intended to protect account and service information. No internet service can guarantee complete security. Report a suspected issue through thesupport route and do not include secrets in the message.
Children
Accounts are limited to adults aged 18 or older. We do not knowingly collect children's account information.
Changes to this policy
We will update the date on this page and give reasonable notice of a material change where required.
Contact and requests
Wraxle LLC3525 Del Mar Heights Rd, Unit 818
San Diego, CA 92130, USA
[email protected]