Privacy & Cookies Policy
Version 1.2 · October 2026
What we collect, where it lives, and what you can do with your data. Drafted to align with the GDPR, the Israeli Protection of Privacy Law 5741-1981, and the Protection of Privacy (Information Security) Regulations 5777-2017.
Legal contact: echolearnmail@gmail.com
Privacy & Cookies Policy
What we collect, where it lives, and what you can do with your data. Drafted to align with the GDPR, the Israeli Protection of Privacy Law 5741-1981, and the Protection of Privacy (Information Security) Regulations 5777-2017.
What happens to a recording
When you record or upload in the live tools, the audio is sent to EchoLearn's server, forwarded to the speech-to-text provider, and discarded as soon as the response is returned. It is never written to disk, to object storage, or to the database. There is no copy for us to delete later and no feature — for you, for support, or for the operator — that can retrieve a past recording. The trade-off is the honest part: to be transcribed at all, the audio must leave our server and reach the provider named below, which applies its own retention terms. A paid lecture-summary order works differently: it is processed asynchronously, so the uploaded file, its transcript and the generated PDF are kept in private, order-bound storage that only you (signed in) can read — this is what lets you re-download the result. You can ask us to delete an order and all of its files at any time (see Your rights).
What we collect
(a) User input: audio / video uploaded to the live tools — processed at request time and deleted immediately afterwards. (b) UI preferences: language, theme — stored in browser localStorage only, never leaves the device. (c) Account data: if you sign in — your email address, plan and monthly usage counters, stored in our database so the Service can sign you in and enforce plan quotas. (d) Basic operational telemetry: anonymous API request logs for operations and security (IP, user agent, request size, HTTP codes). No personal identifiers.
Third parties
Audio is forwarded to Groq and OpenAI Whisper for speech-to-text transcription, and to Anthropic Claude for translation. All three providers state that API user data is not used for training their models (see the Groq, OpenAI and Anthropic privacy policies). For advertising, the Service uses only Google Ads, to measure whether our own ads lead to sign-ups (see Cookies). Data is not shared with other advertisers, other ad networks, or data brokers.
Cookies
The Service uses essential cookies to run the site: your interface language, your sign-in session, and security (CSRF protection). If you tap "Got it" on the cookie notice, we also allow Google Ads measurement cookies, so we can see whether our own ads lead to sign-ups. Personalised ads stay off. If you tap "Decline", or until you choose, no advertising or analytics cookies are set; Google Ads still receives a basic visit signal without cookies. Your choice is saved in your browser. To change it, clear this site's cookies and site data in your browser settings, and the notice will appear again.
Your rights
You are entitled, at any time, to: (1) access the personal data processed about you; (2) request deletion ("right to be forgotten"); (3) receive your data in a portable format (data portability); (4) object to processing; (5) lodge a complaint with the Israeli Privacy Protection Authority at the Ministry of Justice, or with a GDPR supervisory authority in the EU. Contact: echolearnmail@gmail.com, response within 30 days.
Data retention
Audio and outputs from the live tools are deleted immediately upon completion of processing. Paid lecture-summary orders — the uploaded file, transcript and PDF — are retained in private, order-bound storage until you ask us to delete them. Operational logs are retained for up to 90 days and then automatically deleted. UI preferences are retained in the browser until the user clears them (cookies / localStorage).