Who we are
Scott Banks, a sole trader trading as AudioTale, is the data controller for the account, billing and service information described in this notice. AudioTale uses specialist providers as processors to host the service, send login emails, take payments and process recordings.
Contact the controller at hello@audiotale.app.
Information we use
Account and access
Your email address, hashed login codes, secure session identifiers, credit balance and account activity.
Audio and results
Recordings you submit, file details, optional context, transcripts, notes and summaries created from them.
Payment records
The credit pack, amount, purchase status and Stripe checkout reference. AudioTale does not receive your full card number.
Technical and support data
Security and request information needed to prevent misuse, diagnose faults and respond when you ask for help.
Why we use it, and our lawful bases
| Purpose | UK GDPR lawful basis |
|---|---|
| Create your account, manage credit, process recordings and deliver the service you requested | Performance of a contract |
| Secure the service, prevent fraud, resolve faults and provide support | Legitimate interests in running a safe, reliable service |
| Keep records required for tax, accounting or law | Legal obligation |
| Use optional cookies or send marketing, if either is added | Consent, which you can withdraw |
Recordings can contain sensitive or special category information. Only upload material you are entitled to use and where you have a valid lawful basis. Where special category data is involved, you must also identify an appropriate UK GDPR Article 9 condition.
International transfers
Some providers may process information outside the UK. Before public launch, the operator must complete its processor contracts and transfer assessment, and confirm an appropriate safeguard for each transfer. Safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses.
How long we keep information
- AudioTale does not keep a separate archive of your recording or finished transcript after the result is returned to you.
- OpenAI's standard API abuse-monitoring logs may retain submitted content for up to 30 days, unless a different approved data-control arrangement applies.
- One-time login codes expire after 10 minutes. Expired codes and sessions are removed during routine account activity.
- Account details and unused credit are kept while the account or credit remains active.
- Purchase and transaction records are kept only as long as necessary for accounting, tax, disputes and other legal obligations.
When information is no longer required, it is deleted or anonymised. Backup copies may remain for a limited period before being overwritten.
Your data protection rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to how it is used. You can withdraw consent at any time without affecting processing that was lawful beforehand.
Your right to object: where we rely on legitimate interests, you can object based on your circumstances. You can always object to direct marketing.
AudioTale does not use personal information to make solely automated decisions that have legal or similarly significant effects. Transcription is automated, but it does not make that kind of decision about you.
Security
AudioTale uses encrypted connections, one-time email login codes, secure HTTP-only session cookies, signed credit records and restricted service access. No online system is completely risk-free, so users should avoid uploading material that is not needed for the requested transcription.
Contact, requests and complaints
Email hello@audiotale.app to exercise your rights or raise a privacy concern. Identity checks may be needed before information is disclosed.
You also have the right to complain to the Information Commissioner's Office. We would appreciate the chance to resolve the issue first.
Provider information
Read the providers' own information at Cloudflare, OpenAI and Stripe.