LecTranscribe
Effective: October 20, 2026
LecTranscribe (the "Service") follows the Korea Personal Information Protection Act (PIPA) and related laws. This policy explains on what basis we process personal data and how far. This revision does not retroactively widen the purposes or retention of data we already hold.
We list the data we process by its legal basis. Data needed to sign you up and provide the features is processed to perform our contract with you, not on consent; posting this policy or your continued use is never treated as consent.
(a) Performance of the contract (PIPA Art. 15(1)4)
| Area | Purpose | Items | Retention |
|---|---|---|---|
| Sign-up and sign-in | Identifying you, keeping you signed in, account management | Google sign-in: email, display name, profile image URL, account id Apple sign-in: email (Apple's private relay address if you choose it), name, account id We never collect passwords. | Until you close your account |
| Transcription | Transcribing uploads, lectures brought in by the extension, YouTube links and live recordings, and letting you replay them | Audio extracted from uploaded audio/video, live recording audio, transcripts, numbers telling speakers apart (Speaker 1, Speaker 2 …), titles, lecture addresses (YouTube URL, LMS lecture info), length and status | Transcripts: until you delete them or close your account Audio: 30 days (120 while subscribed), see section 6 Original uploads: deleted right after the audio is extracted |
| Notes and study tools | Summaries, handwritten notes, concepts, quizzes, exam sheets, tutor answers | Uploaded PDFs, slides, .goodnotes and .note (Notability) files and photos, past papers and answer photos, the questions, prompts and project instructions you type, and the AI results made from them | Until you delete them or close your account (see section 3) |
| Credits and payments | Granting and charging credits, managing subscriptions, payments and refunds | Credit balance and history, order and subscription ids, billing email, product, amount, payment and subscription status, next billing date, refund status We never receive card numbers (Polar handles them). | Until you close your account; transaction records 5 years per table (b) |
| Support | Answering questions, checking errors | Support conversations and attachments, email, account details needed to answer (plan, credit and payment status, recent transcription status) | Until you close your account; then 3 years as dispute records |
| Service emails | Notices you need: audio about to be deleted, payments and subscriptions, support replies | Email, the title of the transcript concerned | Until you close your account |
| Timetable and assignments from your school's LMS | Showing class times and assignment deadlines in your timetable, Today view and course pages, and timing deadline and study reminders | What the extension reads in your browser from the school LMS you are already signed in to: the LMS address, your courses' numbers and names, titles, due dates, kinds, LMS links and submitted yes/no of assignments, quizzes, discussions and events, and class days, times and rooms in course calendars. Grades, scores, points, assignment descriptions, submissions, other students' information and LMS passwords, cookies or tokens are never collected. | Assignments: deleted 30 days after the due date (undated items when not seen for 180 days) Class times: until you delete them or turn the feature off Deleted at once when you turn it off or delete your account |
Bringing in your timetable and assignments from your school's LMS is processing needed to provide the timetable and deadline features. It is on from the start for users of the extension on a supported school LMS, and you can turn it off at any time in the web timetable settings or from the notice shown on the web and in the app after the first import. Turning it off deletes what was brought in at once, and nothing more is brought in. The rest of the Service works as before and you can enter your timetable yourself. You can turn it back on in the same setting.
(b) Legal obligations (PIPA Art. 15(1)2)
| Law | Items | Retention |
|---|---|---|
| Korea E-Commerce Consumer Protection Act | Records of contracts and withdrawals, payments and supply (order and subscription ids, amounts, dates, refunds) | 5 years |
| Korea E-Commerce Consumer Protection Act | Records of consumer complaints and disputes (support conversations and attachments) | 3 years |
| Protection of Communications Secrets Act | Access records (date and time, IP address) | 3 months |
When you close your account these records are separated from it, kept on their own, and destroyed when the period ends.
(c) Legitimate interests (PIPA Art. 15(1)6) Only where our interest clearly outweighs your rights, for the purposes below. You can ask us to stop under section 7.
| Purpose | Items | Retention |
|---|---|---|
| Preventing abuse of free trials, promotions and referral credits | A random device id stored in your browser, a browser fingerprint and your IP address, each stored only as a one-way hash | 5 years, unlinked from any account after deletion |
| Rejoin limits and preventing duplicate bonuses | Pseudonymized hash of a deleted account's emails, linked Google/Apple accounts included (SHA-256 after normalizing case, +tags and Gmail dots) | 5 years from deletion |
| Improving the Service | The reason you pick when leaving and any text you write (optional); the text is never sent in our internal notifications | 5 years from deletion, with the email hash above |
| Suggesting a first feature, usage statistics | Answers to the questions asked after sign-up (intended use, situation, school name (optional), how you heard of us). No feature depends on them. | Until you close your account |
| Feature statistics and error analysis | In-app usage records (features used, transcription success or failure, processing time) | Until you close your account |
| Adding sites to the extension | If you press 'Please support this lecture' or 'Show us your timetable page' in the extension: the shape of the requests that tab loads for about a minute (hosts, paths, parameter names, file types and sizes) and the page address. Parameter values, cookies, sign-in data and lecture or timetable content are not collected. | 1 year from when the support work is finished |
(d) Consent (PIPA Art. 15(1)1) No personal data is currently processed on the basis of consent. If we start optional processing such as marketing email or ad measurement, we will tell you the purpose, items, retention and your right to refuse, and ask for separate consent.
The Service is for people 14 or older, and we do not knowingly collect data from children under 14. If we learn that a child under 14 has signed up, we delete the account and its data without delay. A legal guardian can ask for deletion at support@lectranscribe.com. If we ever offer the Service to children under 14, we will first put a guardian-consent process in place.
· AI results such as summaries, notes, concepts, quizzes, exam sheets and tutor answers are stored only in the account that made them. Opening the same material again shows the stored result instead of making it again, but stored results are never shown to other users or reused to make anyone else's results. · Stored results carry your account id, so they are not anonymous data; access is limited to you (database row-level security). · Deleting a transcript from the trash also deletes the summaries, concepts, quizzes and tutor conversations made from it. Notes and exam sheets combine several sources, so they stay as separate content you can delete on their own. Closing your account deletes all of it. · A deleted handwritten note disappears from view, but a record used to count free trials remains until you close your account. · Share links: if you create a share link for a transcript, anyone with the link can see its title, summary, transcript and lecture video address. Sharing starts only when you turn it on, and you can turn it off at any time. · Examples: every account includes the same example lecture and its results. They were made by us and contain no user data.
· Items: IP address, browser and OS type, access time, pages visited, values in cookies and browser storage · Purposes: keeping you signed in, remembering language and display settings, preventing abuse, usage statistics, error analysis · Essential cookies and storage: sign-in session, language, theme. The IndexedDB cache used to play your uploads on your device stays there until you clear it or your browser storage. · Fonts and libraries: pages load fonts and scripts from Google Fonts and jsDelivr, which receive your IP address when they do. · We use no advertising cookies or ad-measurement tools.
Google Analytics: the production website uses Google Analytics 4 for visit statistics. Google tells browsers apart with cookies and processes pages visited, time on page, referrer, device and browser type, and an approximate location derived from the IP address. We never send your name, email or other directly identifying data to Google Analytics. Retention follows the Google Analytics data-retention setting.
How to refuse: block or clear cookies in your browser settings (Chrome: Settings → Privacy and security → Third-party cookies; Safari: Settings → Privacy). To block only Google Analytics, use Google's opt-out add-on (tools.google.com/dlpage/gaoptout). Blocking essential cookies can stop sign-in from working.
We do not sell your data or provide it to other companies. To run the Service we entrust processing to the vendors below, whose servers are outside Korea, so your data is transferred abroad. Every transfer happens over encrypted connections (HTTPS/TLS) when you use the feature concerned.
| Vendor (country) | Purpose | Items transferred | Retention |
|---|---|---|---|
| Supabase Inc. (Tokyo region, Japan) | Database, sign-in, file storage | All account data and content in section 1 | Until you close your account or the contract ends (periods in sections 1 and 6) |
| Vercel Inc. (Tokyo region, Japan; global network) | Running the website and server functions | Data in requests, IP address, access records | While handling the request; access records per Vercel's policy |
| Railway Corp. (Singapore region) | Running the transcription and notes servers | Audio and files being processed, transcripts | While processing (storage is on Supabase) |
| Groq, Inc. (US) | Speech recognition | Lecture audio | Not retained by default; up to 30 days when investigating errors or abuse (Groq's policy) |
| Soniox, Inc. (US) | Speech recognition, live captions and speaker separation while recording | Lecture audio, live recording audio | Uploads: we request deletion right after processing and sweep leftovers every 30 minutes. Live recording: not stored by Soniox |
| OpenAI, L.L.C. (US) | Speech recognition when other vendors fail, reviewing study material | Lecture audio, parts of transcripts and study material | Speech recognition data not retained; other requests up to 30 days for abuse monitoring (OpenAI's policy) |
| Anthropic, PBC (US) | Summaries, notes, concepts, quizzes, exam grading, tutor answers | Transcripts, slides, PDFs and photos, your questions | Deleted within 30 days of receipt; exceptions such as policy-violation reviews per Anthropic's policy |
| Google LLC (US) | Gemini API: summaries and notes when other AI fails, titles, matching material, the support assistant Google sign-in, Google Analytics, checking YouTube videos, fallback email delivery | Transcripts, slides and PDFs, your questions and the account details needed to answer Sign-in data, section 4 statistics, YouTube video id, email address and content | Gemini API: logged for a limited period for abuse monitoring (Google's policy) Otherwise per Google's policy for each service |
| Dumpling Software UG (Germany, Supadata) | Fetching YouTube captions | YouTube video address | Results deleted after 1 hour (Supadata's policy) |
| Apple Inc. (US) | Sign in with Apple | Sign-in data | Per Apple's policy |
| Polar Software Inc. (US) | Merchant of record for credit packs and subscriptions; cards and wallets are processed by Polar's payment partners | Account id, email, order and subscription details | Per law and Polar's policy; on account deletion we ask Polar to delete the customer record |
| Plus Five Five, Inc. (US, Resend) | Service and support emails | Email, message content (transcript titles, support replies) | Per Resend's policy |
| Discord Inc. (US) | Internal alerts telling us about new support messages and feedback | Email, the start of a support message (up to 1,500 characters), feedback text, plan and payment status | Until we delete the alert |
· These vendors process data under their own privacy policies and their contracts with us; their contact details are in their privacy policies. · Under the API terms we use, the AI and speech vendors do not train AI models on content you provide. · If you do not want a transfer, you can avoid the feature concerned or close your account. These transfers are needed to provide the Service, so refusing them means you cannot use all or part of it.
(a) Closing your account: you can do it yourself in Settings → Delete account, or ask support if you cannot sign in. Your account, transcripts, stored audio, notes, study material, projects and remaining credits are deleted immediately and cannot be restored. Only the records in table 1(b) and the hashes in table 1(c) are kept, apart from the account, for the stated periods. A payment still processing or a refund in progress is handled under the Terms and the Refund Policy.
(b) Audio: a live recording stays only in your browser or the app until you finish it and is removed from the device once sent. Audio on our servers is deleted automatically 30 days after the transcript was created (120 days while you have a paid subscription), with an email 3 days before. When a subscription ends the 30-day rule applies again. Transcripts, summaries and notes stay after the audio is deleted.
(c) Trash: a deleted transcript goes to the trash and is permanently deleted 30 days later, or when you delete it from the trash.
(d) Backups: the database and storage may be backed up for disaster recovery under Supabase's backup policy, so deleted data can take some time to leave the backups. If we ever restore from a backup, we re-apply the deletion requests received before it.
(e) Inactive accounts: we do not currently clear out long-unused accounts. If we start, we will announce it in advance under section 10.
(f) How we destroy data: data whose period has ended or whose purpose is met is destroyed without delay. Electronic files are deleted irreversibly; paper is shredded or incinerated. Data kept by law is stored apart from other data and used for nothing else.
(g) Pseudonymized data: data such as the hashes in table 1(c), which cannot identify a person without additional information, is still treated as personal data under the same rules.
You may at any time ask us to: 1. Give you access to your data 2. Correct or delete inaccurate data 3. Stop processing 4. Withdraw consent (if any processing comes to rely on it) 5. Delete everything by closing your account (Settings → Delete account) Account deletion is available directly in Settings. For anything else, email support@lectranscribe.com; after verifying your identity we will reply with the result within 10 days. Data the law requires us to keep is kept for that period even if you ask for deletion. A legal guardian or someone you authorize may also make requests.
Automated decisions: we never suspend or terminate an account without a person reviewing it. Some limits apply automatically by set rules, such as hourly request limits, plan allowances, and checks on whether a device or email has already received a free benefit. To get an explanation of such a limit or object to it, email support@lectranscribe.com and we will review it ourselves.
· All traffic is encrypted with HTTPS (TLS). · Row-level security in the database lets each user see only their own data. · Admin functions and server-only keys are limited to the operator, with access kept to what is needed. · IP addresses and device signals are stored only as one-way hashes. · Dependencies are updated and reviewed regularly.
Our privacy officer oversees how personal data is handled and deals with questions, complaints and remedies. · Service: LecTranscribe · Privacy officer: Seongmin Lee (Representative) · Contact: support@lectranscribe.com (reply within 2–3 business days)
For advice or remedies about a privacy violation you can contact these Korean bodies: · Personal Information Dispute Mediation Committee: kopico.go.kr · 1833-6972 · Privacy Infringement Report Center (KISA): privacy.kisa.or.kr · 118 · Supreme Prosecutors' Office: spo.go.kr · 1301 · Korean National Police Agency: ecrm.police.go.kr · 182
We announce changes in the Service at least 7 days before they take effect, or 30 days before for changes that are adverse to you or significant, and also by email where needed. Changes that need consent will ask for it again. Earlier versions stay available on this page. · Announced: October 20, 2026 · Effective: October 20, 2026 · Previous version: effective October 16, 2026 · The revision announced on October 18, 2026 (to take effect on October 25) is folded into this one and takes effect on October 20. It differs from that revision in one point: bringing in your timetable and assignments from your school's LMS moved from consent (1(d)) to performance of the contract (1(a)), on from the start and off at any time. The items and retention are the same.