Privacy Policy

This policy explains what Piepo processes when you sign in, transcribe speech, and save transcripts.

Piepo's server does not intentionally retain the audio or transcript content sent for transcription. Transcripts and imported audio are saved in your browser only when you enable the corresponding local option.

Who operates Piepo

Piepo is the service responsible for the processing described here. Privacy and data requests can be sent to support@deepimpact.tech.

Data we process

Google sign-in: When you sign in, Google gives Piepo your Google account identifier, verified email address, and display name. Piepo stores only the account identifier. Your email and name are shown to you in the browser for the current session and are not kept on Piepo's server. So the team can find your account if you contact support, the server keeps a keyed one-way code derived from your email address; the address cannot be read back from it. Piepo never receives your Google password.
Account and usage: Your Piepo account ID, available allowance, account status, request identifiers, transcription mode, reserved and processed duration, estimated provider cost, provider session identifier, and timestamps.
Audio: Microphone audio, audio you choose to share from a browser tab, window or your screen, or a file you select is sent through Piepo's backend to the speech-processing provider so the requested transcription can be produced. If you separately opt in to local audio saving, the original imported file is also stored in this browser's IndexedDB. Recordings longer than 10 minutes additionally keep a temporary prepared copy in this browser so an interrupted job can resume; see Retention.
Transcript content: The result, including speaker turns and their timing, is returned to your browser. If you enable local transcript saving, it remains in this browser's storage until you delete it or clear site data. Local editing, speaker renaming, search, and TXT, SRT, DOCX, or PDF export run in the browser and do not send the saved transcript back to Piepo.
Recognition terms: Named lists of people, organizations, courses, and specialist terms are stored in this browser. When you select a list for transcription, its terms are sent through Piepo's backend to Deepgram as recognition hints together with that transcription request. Piepo does not store these term lists in its server database.
Feedback: If you send feedback from the account page, Piepo stores the message, its type (problem, idea or other), the app version and the time, linked to your account ID. Piepo does not store your email address, so include contact details in the message if you would like a reply. Do not include private transcript content unless it is needed to explain a problem.
Share links: If you create a share link for a saved transcript, the transcript is encrypted in your browser before it is sent. Piepo's server stores only that ciphertext and the expiry you chose; it never receives the transcript text or the decryption key, which stays in the link itself. Anyone who has the link can decrypt and read the transcript until it expires or you revoke it.
Security data: Short-lived login challenges, hashed session tokens on the server, and temporary rate-limit counters derived from request information such as IP address. The counters store a one-way code rather than the address, expire within minutes, and IP addresses are not written to Piepo's logs.

How audio and transcripts are handled

Imported media is decoded in your browser and the prepared audio is uploaded to Piepo. Live audio from the microphone, or from a tab, window or screen you choose to share through your browser, is streamed while transcription is active. Only the shared audio is used; the shared picture is discarded in your browser and never sent. Piepo's backend forwards audio to Deepgram and returns the result without intentionally writing audio or transcript content to the Piepo database.

Piepo sends file and live audio to Deepgram's EU-hosted regional endpoint (api.eu.deepgram.com), which Deepgram documents as processing within EU-based AWS regions. Piepo has also enabled Deepgram's Model Improvement Program opt-out (mip_opt_out), so audio submitted for transcription is not used by Deepgram to improve its models. This describes Piepo's current technical configuration; it is not a certified claim of GDPR compliance or of guaranteed exclusive EU data residency. See Deepgram's privacy information for its own processing and retention terms.

Why we use this data

To create and secure your account and provide transcription you request.
To apply your allowance, prevent duplicate charges, and keep the service budget accurate.
To prevent abuse, diagnose failures, and protect the service.
To comply with legal obligations and respond to valid requests.
Only if you allow it, to measure how Piepo's pages are used so the product can be improved (see Analytics).

Depending on the situation, processing is necessary to provide the service you request, based on your consent for microphone access or analytics, required by law, or based on Piepo's legitimate interests in security, reliability, and fraud prevention.

Analytics (only with your consent)

Piepo asks once whether it may use Google Analytics. If you choose "Allow analytics", Piepo loads Google Analytics 4 to count visits and see which pages are used. If you decline or make no choice, Google Analytics is not loaded and no analytics cookies are set.

What is measured: the page viewed (its address without anything after ? or #), page title, the page you came from, time of the visit, approximate location derived from your IP address (such as country or city), device, browser and screen information, and interactions such as scrolling and clicks on links to other sites. Google Analytics sets cookies (_ga and _ga_<ID>) that hold a random identifier so repeat visits from the same browser can be recognised; they expire after up to 2 years.
Never included: audio, transcripts, term lists, share links or their keys, your email address, or your Piepo account ID. Analytics never runs on the share-link viewer or the data-move page.
Settings: Google signals and ad personalisation are turned off. Google states that Google Analytics 4 does not log or store IP addresses. Event-level analytics data is kept for 2 months.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework. See Google's privacy policy.
Legal basis and withdrawal: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can change your choice at any time with "Analytics settings" at the bottom of this page or on the account page; declining after allowing removes the analytics cookies and stops analytics from then on.

Services involved

Google Identity Services verifies Google sign-in.
Deepgram processes audio to produce transcripts.
Google Analytics measures page use, only if you allow it.
Hetzner Online GmbH hosts and delivers the web application at piepo.deepimpact.tech, on a server in the EU.
Netlify still delivers the previous address, piepo.netlify.app, while users move their data to the new address.
Cloud infrastructure providers run the Piepo API and database.

Storage and retention

The browser session token, and the email and name shown on the account page, are kept in this browser's local storage so you stay signed in, and are removed when you sign out or delete the account.
Server session tokens expire after 30 days and are stored only as hashes.
Account records remain until the account is deleted. Details of individual transcriptions are kept for about six months; after that they are combined into anonymous monthly totals of sessions, processed seconds and estimated cost.
After account deletion, Piepo retains only anonymous monthly totals for sessions, processed seconds, and estimated provider cost so its financial controls remain correct.
To support recovering a transcript after a dropped connection during retry, Piepo's server keeps an encrypted copy of the result for up to 7 days, then deletes it. The decryption key is held only in your browser, so Piepo's server cannot read this copy.
Locally saved transcripts remain on the device until you remove them through Piepo or clear the site's browser storage.
Local audio saving is off by default. Opted-in imported audio remains in IndexedDB until you remove the audio, delete its transcript, clear all local history, delete the account from that browser, or clear site data.
For recordings longer than 10 minutes, Piepo keeps a temporary copy of the prepared audio and any finished sections in this browser's IndexedDB so an interrupted job can resume without selecting the file again. This happens whether or not local audio saving is on and never leaves your device. It is deleted when the job finishes or you discard it; until then it remains until you clear site data.
Feedback messages are deleted 90 days after they are marked resolved, and all of them are deleted when you delete your Piepo account.
The service database is backed up every night on the same server and each backup is kept for 7 days, so data you delete can remain in a backup for up to 7 days before it expires.
Share links are kept until the expiry you chose (1, 7, or 30 days), until you revoke them, or until you delete the transcript from the browser that created them, whichever comes first, and are all deleted when you delete your Piepo account. If a link cannot be revoked at that moment (for example while you are signed out or offline), Piepo retries the next time you are signed in.
If you download a backup file from the account page, it is saved only where your browser puts downloads. It contains your transcripts in readable form, so keep it private; Piepo never receives it. If Piepo moves to a new web address, the "Move my data" button copies this browser's data directly from the old address to the new one inside your browser; nothing passes through Piepo's server.
Interface settings (the interface language, the live audio source, and whether speaker labels are shown) are kept in this browser's local storage until you change them or clear site data.
Your analytics choice (allowed or declined, and when) is kept in this browser's local storage so the question is not asked again, until you change it or clear site data.
Recognition-term lists remain in local browser storage until you delete a list, delete the Piepo account from that browser, or clear site data.
Files you export are downloaded to the location chosen by your browser and remain there until you delete them.

Your choices and rights

You can turn off local transcript or audio saving, remove a local audio file while keeping its transcript, delete individual or all local transcripts and attached audio, sign out, and delete your Piepo account. Depending on applicable law, you may also request access, correction, restriction, portability, objection, or deletion, and may complain to your data-protection authority.

Use the account and data deletion page for self-service deletion, or contact support if a pending transcription prevents immediate deletion.

Children

Piepo is not intended for children under 16. Do not use the service to process another person's private audio without a lawful basis and any consent required where you live.

Changes

Material changes will be reflected by a new effective date on this page. Continued use after a change is subject to the updated policy.