Privacy Policy

Speakist is a dictation product made by Brevoort Studio LLC (“we,” “us,” “our”). This policy explains what we collect, what we don't, and how we handle the information you share with us.

We take a conservative approach to privacy. We collect only what we need to run the service, never sell or rent your data, and don't use your content to train AI models.

If you've read enough, here's the short version:

• We don't store your audio or transcripts.
• We don't share your personal information with anyone except the infrastructure providers we need to operate.
• We don't sell, rent, or trade your data.
• We retain only the minimum metadata required for billing and operations.

Information we collect

Account information. When you create an account, we collect your email address. You can optionally provide a display name. We use a magic-link sign-in flow, so we don't store passwords.

Usage metadata. Each time you complete a transcription, we record:

• A unique transcription ID generated by your device
• Word count of the resulting transcript
• Audio duration in milliseconds
• The transcription model used (e.g., Whisper)
• Whether the polish step ran
• Cost in fractional cents
• Timestamp

We do not store the transcript text or audio.

Custom vocabulary. If you add custom terms to your personal vocabulary (e.g., proper nouns, technical jargon), we store those terms so they sync across your devices.

Billing information. We track your credit balance, top-up history, and Stripe customer ID. Stripe processes all payments — we never see your full card number or banking details.

Authentication tokens. When you sign in from a device, we store a SHA-256 hash of your refresh token. We never store the plaintext token.

Server logs. Our infrastructure logs standard request information (IP address, user agent, timestamp, response status) for a limited period for abuse prevention and debugging. These logs do not include the contents of your transcriptions.

What we don’t store

Audio. Your dictation audio is sent to our backend and forwarded to our transcription provider. The audio is held only for the duration of the request — typically under a second — and then discarded. It never persists in our database, logs, or any other storage system we control.

Transcript text. The transcribed and polished text returned to your device is not stored on our servers. It exists only in transit between you, our transcription provider, and your device. Your final text lives wherever you paste it — your email, your notes, your messages.

Card numbers. Payment data is handled entirely by Stripe under their PCI-compliant systems. We see only metadata Stripe shares (last four digits, customer ID, invoice information).

How we use the information

We use the information we collect to:

• Authenticate you and your devices
• Operate, maintain, and improve the service
• Calculate your usage and bill you accurately
• Send transactional emails (e.g., sign-in links, billing receipts)
• Detect abuse and protect the service
• Aggregate usage data to understand product performance (no individual identification)

What we don’t do

We do not:

• Sell, rent, or trade your personal information to anyone, ever
• Share your data with advertisers or marketing networks
• Use tracking pixels or third-party advertising cookies
• Use your audio or transcripts to train AI models
• Read your transcripts (we don't store them in the first place)

Third-party services

To operate Speakist we share limited data with the following providers, each of whom has their own privacy commitments:

• Cloudflare — hosting, edge compute, and database. Speakist data is stored on Cloudflare infrastructure. They process the data on our behalf as a sub-processor.
• Stripe — payments. Stripe receives your payment information directly when you make a purchase. We share only your email and metadata identifying which org is charged.
• Groq — transcription and polish. Groq receives your audio for transcription and the resulting text for the polish step. Per Groq's privacy policy, inputs are not retained after processing.
• Deepgram — alternate transcription provider, used only when a super admin routes an org to Deepgram via its allowed-models list. When used, audio is sent to Deepgram for transcription and not retained after processing.
• Resend — transactional email. We send sign-in links and billing notifications through Resend. They receive your email address and the message we send to you.

Each provider may store request metadata under their own retention policies. We pass through only what is required to provide the service.

Data retention

• Account information is retained while your account is active.
• Usage events are retained for billing reconciliation. We may purge or aggregate older records over time.
• Audio and transcripts are not retained — they exist only for the duration of each request.
• If you delete your account, we delete your account information, billing records, and vocabulary, except where retention is required by law (e.g., tax records).

Your rights

You can:

• Access your information at any time via your dashboard
• Update your account information from your settings
• Delete your account by contacting us at hello@brevoortstudio.com or via your settings
• Export your usage and vocabulary data on request
• Opt out of non-transactional emails

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and the CCPA respectively. To exercise those rights, email us.

Security

We use industry-standard practices to protect your information:

• TLS 1.2+ for all data in transit
• Encrypted-at-rest storage where supported by our providers
• Hashing of authentication tokens
• Limited access to systems by team members on a need-to-know basis

No system is perfectly secure. If we ever detect a breach affecting your data, we will notify you in line with applicable law.

Children

Speakist is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has signed up, please contact us and we will delete the account.

In jurisdictions where the digital consent age is higher (e.g., 16 in parts of the EU under GDPR), we apply that local age threshold.

International data transfers

Speakist is operated from the United States. By using the service, you consent to your information being processed in the United States, where data protection laws may differ from those of your country.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in the dashboard. Continued use of the service after the effective date constitutes acceptance.

Contact

Questions or requests? Email hello@brevoortstudio.com.

Brevoort Studio LLC
Colorado, USA