Privacy Policy

1. Who is responsible

Wascripts is operated by Nihad Aslanzade, Baku, Azerbaijan, who is the data controller for the information described here. Contact: contact@nihadaslanzade.com.

2. What we collect

• A device identifier. The app generates or reads an identifier for your device and sends it with each request. It is what your credit balance is attached to. We do not ask for your name, phone number or email in order to use the app.
• The audio you submit. Only while it is being transcribed. See retention below.
• The transcript produced from it. Held briefly so the app can collect the result. See retention below.
• Credit and usage records. How many credits you have and how many transcriptions have been run, attached to the device identifier.
• Usage events from the iOS app. Short records of what happened in the app: which onboarding screen was shown, whether a transcription started and finished and how long it took, which paywall was opened or closed, and whether a purchase completed. Each carries the app version, the app's language, your iOS version and the country of your App Store account, and is attached to the device identifier. They never contain recordings, transcripts, file names or anything you typed. You can switch them off in the app under Settings, Usage statistics; the app then deletes any it has not yet sent.
• Purchase records. Order reference, amount, currency, number of credits, status and timestamps. Card numbers and billing details never reach our servers; they are handled entirely by Paddle, or by Apple for purchases made in the iOS app.
• Business account details, if you open one. Email address and a cryptographic hash of your password. We cannot read your password.
• If you use the free transcription page on this website. The recording you upload or make there, handled like a recording sent from the app, and, to count the daily free limit, a one-way hash of your IP address combined with a random value that is replaced every day. Once that value is deleted the hash can no longer be linked back to an address. No device identifier or account is involved.
• Server logs. Standard technical logs including IP address and request times, used for security and debugging. For this website we also count page visits from the same logs: which page was opened, when, which site or search engine linked to it, and the browser type. The counts are totals; they contain no IP addresses.

3. How long we keep it

• Audio recordings: deleted immediately after processing. The file is removed from the server in the same operation that finishes the transcription. This happens whether the transcription succeeded or failed. Recordings are never archived, never backed up and never added to any dataset.
• Transcripts: up to one hour. The finished text sits in a temporary result store so your app, or the transcription page on this website, can fetch it, and is then automatically deleted. If you want to keep a transcript, copy it out.
• Credit balances and purchase records: kept while your account is active, and afterwards for as long as tax and accounting law requires records of a sale to be retained.
• Usage events: 180 days, after which they are deleted automatically.
• Free transcription page counters: two days, after which the counter and the value it was hashed with are deleted automatically.
• Server logs: the web server's logs, which hold IP addresses, are kept for no more than 15 days (the current day plus 14 daily archives). The application's own logs record technical events such as task identifiers, processing times and errors, never recordings or transcripts; they are limited in size, and the oldest entries are removed first.

4. Who else processes your data

We use four external providers, and only these four:

• Our speech recognition provider. Audio is sent to a cloud AI speech recognition service to produce the transcript. The provider processes it to return a result to us and is bound by its own terms for API customers.
• Paddle.com Market Ltd. The merchant of record for purchases made on this website and in the Android app. Paddle collects the payment and billing information needed to complete the sale and to meet its tax obligations. Paddle's own privacy policy governs that data.
• Apple. The seller for purchases made inside the iOS app. Apple collects the payment and billing information for those sales under its own privacy policy. What reaches us is a signed receipt naming the product bought and an identifier for the purchase, which we use to add the credits to your balance and to keep a subscription working across your devices. We never see your Apple Account, your name or your payment method.
• Cloudflare, Inc. The app's traffic to our server (api-wa.toppick.io) passes through Cloudflare's network, which also protects the server from attacks. Cloudflare therefore handles your IP address and the requests on their way to us, including uploaded recordings, only to deliver and protect that traffic and under its own privacy policy. This website (wascripts.duyanlabs.com) is not served through Cloudflare, but its free transcription page sends your recording to our server that way, and it uses Cloudflare Turnstile to check that you are a person. Turnstile processes signals such as your IP address and browser type only to detect and block automated abuse, under Cloudflare's Turnstile privacy addendum.

We do not sell personal data, we do not share it for advertising, and we use no third-party analytics or tracking tools.

5. Recordings of other people

Voice notes usually contain someone else's voice. Where the law treats that person's voice as their personal data, you are the one deciding to have it transcribed, and the responsibility for having a lawful basis to do so is yours. We act on your instruction and delete the recording immediately afterwards. This is set out in section 4 of the Terms and Conditions.

6. Why we are allowed to process it

• To perform our contract with you: transcribing what you submit, tracking credits, completing purchases.
• Legitimate interests: keeping the service secure and working, preventing abuse, and learning from usage events where the app is hard to use. You can object to the last at any time by switching usage statistics off in the app.
• Legal obligation: retaining records of sales for tax purposes.

7. Your rights

Depending on where you live, you may have the right to access the data we hold about you, to have it corrected or deleted, to object to processing, or to receive a copy in a portable format. Write to contact@nihadaslanzade.com and include your device identifier, shown in the app's settings, so we can find your records.

We will respond within 30 days. Note that we cannot recover deleted recordings or expired transcripts, because they no longer exist anywhere in our systems.

8. This website

This site sets no cookies of its own and uses no third-party analytics; visits are counted from our own server logs, as described in section 2. The free transcription page also loads Cloudflare Turnstile, described in section 4. English, Azerbaijani and Turkish use separate page URLs, and no language preference is stored in your browser. Fonts are served from this site, not from a third party. The payment page loads Paddle's checkout script, which is what displays the payment form.

9. Security

Traffic is encrypted in transit with TLS. Passwords for business accounts are stored only as hashes. API keys are stored hashed and shown once at creation. Access to the production environment is restricted to the operator.

10. Children

Wascripts is not intended for use by anyone under 18, and we do not knowingly collect data from children.

11. Changes

If this policy changes, the date at the top will change with it. Material changes affecting how your data is used will be notified by email or in the app before taking effect.

12. Contact

Nihad Aslanzade, Baku, Azerbaijan
contact@nihadaslanzade.com