Privacy Policy

Last updated: August 13, 2026

1. What We Collect

When you use Recastr we collect:

  • Account data — your email address and name via Google OAuth
  • Usage data — minutes of voiceover generated, plan type
  • Uploaded files — audio/video files you submit for transcription or voiceover. These are processed transiently and deleted immediately after the response is returned. We do not store them.
  • Analytics — aggregate cookieless web and product measurement via PostHog, including explicit page navigation, approved workflow events, and session replay with all input values and on-screen text masked
  • Payment data — handled entirely by Stripe. We never see or store your card details.

2. How We Use Your Data

We use your data to provide and improve the service, track usage against your quota, process payments, and communicate with you about your account. We do not sell your data to third parties or use it for advertising.

3. Third-Party Services

We share data with the following sub-processors as required to deliver the service:

  • Supabase — authentication and database (privacy policy)
  • OpenAI — audio transcription and text-to-speech processing (privacy policy)
  • xAI — transient speech-to-text and text-to-speech processing via xAI's API, governed by its enterprise terms of service (see also xAI's general privacy policy)
  • Stripe — payment processing (privacy policy)
  • PostHog — our processor for aggregate cookieless web and product measurement. PostHog may process analytics data internationally as described in its privacy policy.
  • Digital Ocean — cloud infrastructure hosting (privacy policy)

4. Data Retention

Audio and video files are deleted immediately after processing — we never write them to long-term storage. Account data (email, usage) is retained until you delete your account. Analytics data is retained for up to 12 months.

5. Cookies

We use PostHog for aggregate cookieless measurement. We do not create a persistent PostHog browser identifier or identify your authenticated Supabase account to PostHog. We do not intentionally send uploaded content, filenames, email addresses, Google identifiers, tokens, or raw errors to PostHog. PostHog also records session replays of your interface interactions to help us diagnose bugs and improve usability; all input field values and on-screen text are masked before capture, so replays never contain transcript text, subtitle text, filenames, or account identifiers. Supabase sets a session cookie strictly necessary for authentication.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing [email protected]. Account deletion removes your usage record and unlinks your authentication. We will respond within 30 days. If you are in the EU/UK, you have additional rights under GDPR including the right to data portability and to lodge a complaint with your supervisory authority. To object to optional aggregate analytics, email us at [email protected].

7. Children

Recastr is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by email or by posting a notice on the site.

9. Contact

Privacy questions? Email [email protected].