Privacy Policy
Last updated: May 2026
The short version
Your audio is deleted immediately after transcription — we never store recordings
We store your email address and transcript history only
We never sell your data or use it for advertising
You can request deletion of your data at any time
We use trusted third-party AI services to process your audio
1. Introduction
DeBrief This ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our lecture transcription service at debriefthis.com.
By using DeBrief This, you consent to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Information You Provide
- Email address — provided when you submit a recording
- Audio recordings — submitted for transcription
- Usage preferences — stored locally in your browser
2.2 Information Generated by the Service
- Transcripts of your audio recordings
- Speaker identification labels
- Extracted key topics and action items
- Lecture summaries
2.3 Information Collected Automatically
- Usage data — which features you use and when
- Browser and device type — for compatibility purposes
- IP address — for security and fraud prevention
3. How We Use Your Information
We use the information we collect to:
- Provide the transcription service — processing your audio and delivering results
- Send you transcripts and verification emails
- Maintain your account and lecture history
- Improve the accuracy and quality of our service
- Prevent fraud and abuse
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use your data for advertising purposes.
4. Audio Data — Special Notice
Audio recordings are sensitive personal data. Here is exactly how we handle them:
- Audio is uploaded securely over encrypted HTTPS connections
- Audio files are sent to our AI processing partners for transcription only
- Audio files are permanently deleted from all servers immediately after transcription
- We do not listen to, review, or retain your audio recordings
- Transcripts are stored in our database associated with your email address
5. Third-Party Service Providers
We share data with the following trusted third-party providers to operate the service:
OpenAI — Audio transcription
Your audio is sent to OpenAI for transcription using their GPT-4o Mini model.
openai.com/privacy →
AssemblyAI — Speaker identification
Your audio is sent to AssemblyAI for speaker diarization (identifying who said what).
assemblyai.com/privacy →
Anthropic — Summarization
Your transcript text is sent to Anthropic's Claude for summarization and action item extraction.
anthropic.com/privacy →
Resend — Email delivery
Your email address is shared with Resend to deliver transcripts and verification emails.
resend.com/privacy →
Supabase — Data storage
Your email address, transcripts, and usage data are stored securely in Supabase.
supabase.com/privacy →
6. Data Retention
- Audio recordings: Deleted immediately after transcription (within minutes)
- Email address: Retained for as long as you have an account
- Transcripts and summaries: Retained until you request deletion
- Usage logs: Retained for up to 12 months for security purposes
7. Your Rights
Depending on your location, you may have the following rights:
- Right to access — request a copy of the data we hold about you
- Right to correction — request correction of inaccurate data
- Right to deletion — request deletion of all your data
- Right to portability — receive your data in a portable format
- Right to withdraw consent — stop using the service at any time
To exercise any of these rights, contact us at legal@debriefthis.com. We will respond within 30 days.
8. GDPR — European Users
If you are located in the European Economic Area (EEA), you have additional rights under GDPR:
- Our legal basis for processing your data is your explicit consent
- You have the right to lodge a complaint with your local data protection authority
- You may request that we restrict processing of your data
9. PIPEDA — Canadian Users
If you are located in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access your personal information and challenge its accuracy.
10. Data Security
We implement the following security measures:
- HTTPS encryption for all data in transit
- Encrypted database storage via Supabase
- API key authentication for all third-party service access
- Immediate deletion of audio files after processing
- Email verification to prevent unauthorised access
11. Cookies and Local Storage
DeBrief This uses browser local storage to remember your email address between sessions for your convenience. This data is stored only on your device and is not transmitted to our servers. We do not use tracking cookies or third-party analytics.
12. Children's Privacy
DeBrief This is not directed at children under 13. We do not knowingly collect personal information from children under 13. Contact us at legal@debriefthis.com if you believe a child has provided us with their data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Service.
14. Contact Us
For privacy questions, requests, or concerns:
Email: legal@debriefthis.com
Website: debriefthis.com
Response time: Within 30 days