Privacy Policy for Speechly

Effective Date: 07 September 2025
Last Updated: 07 September 2025

1. Introduction

At Speechly ("we", "our", or "us"), your privacy is very important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Speechly is the data controller responsible for your personal data.

Contact details:

  • Email: paul@speechly.io

  • Website: https://speechly.io

For any questions regarding this Privacy Policy or your personal data, please contact us at the above email address.

3. What is Speechly?

Speechly is a macOS speech-to-text software that allows users to write emails, create content, and boost productivity through voice input. The software is currently available for download via our website: https://speechly.io

4. Personal Data We Collect

We collect and process the following categories of personal data:

  • Full name

  • Email address

  • IP address

  • General location data (derived from IP address)

  • Payment information (collected and processed exclusively by Stripe)

  • Usage data (how you interact with our software)

  • Technical data (device information, browser type, operating system)

Important: We do not record, store, or transmit the content of your voice input or dictated text. Your speech data is processed locally on your device.

5. How We Collect Your Data

We collect your personal data through the following methods:

  • When you download and install the Speechly application

  • During onboarding and account creation

  • When you sign up for our newsletter

  • When you make a purchase via Stripe

  • Through cookies and analytics tools on our website

  • Through your use of the Speechly software

All payment data is collected and processed directly by Stripe, our payment processor. We do not store credit card information on our servers.

6. Why We Process Your Data (Purposes)

We collect and process your personal data for the following purposes:

  • Service delivery: To provide access to and functionality of the Speechly software

  • User authentication: To verify your identity and manage your account

  • Service improvement: To analyze usage patterns and improve user experience

  • Communication: To send product updates, newsletters, and important notices (with your consent)

  • Payment processing: To process transactions securely via Stripe

  • Customer support: To respond to your inquiries and provide assistance

  • Legal compliance: To comply with applicable laws and regulations

  • Security: To protect against fraud, unauthorized access, and other security risks

7. Legal Basis for Processing (Under GDPR)

Under Article 6 of the GDPR, we rely on the following legal bases for processing your personal data:

Purpose Legal Basis Providing the Speechly service Contract – Processing is necessary to perform our contract with you Newsletter and marketing Consent – You have explicitly opted in Payment processing Contract – Necessary to process your purchase Service improvement and analytics Legitimate interests – Improving our services and user experience Cookie usage (non-essential) Consent – Given through cookie banner Security and fraud prevention Legitimate interests – Protecting our users and platform Legal obligations Legal obligation – Compliance with applicable laws

You have the right to withdraw your consent at any time where we rely on consent as the legal basis.

8. Cookies and Tracking Technologies

8.1 What Cookies We Use

We use cookies and similar tracking technologies for the following purposes:

  • Essential cookies: Required for the website to function properly (authentication, security)

  • Analytics cookies: To understand how visitors use our website (e.g., Google Analytics)

  • Performance cookies: To improve website speed and performance

8.2 Cookie Management

You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of our website.

For more information, please refer to our Cookie Policy available at: https://speechly.io/cookies

8.3 Analytics

We use analytics tools to understand user behavior and improve our services. These tools may collect:

  • Pages visited

  • Time spent on site

  • Click patterns

  • Device and browser information

You can opt out of analytics tracking at any time through your browser settings or by contacting us.

9. Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

We only share your data with the following trusted third-party service providers:

9.1 Stripe (Payment Processor)

  • Purpose: To process payments securely

  • Data shared: Name, email, payment information

  • Location: Stripe may process data in the US under Standard Contractual Clauses (SCCs)

  • Privacy Policy: https://stripe.com/privacy

  • GDPR Compliance: Stripe is fully GDPR-compliant

9.2 Other Service Providers

We may use additional service providers for:

  • Hosting and infrastructure

  • Email delivery

  • Analytics

All service providers are carefully selected and contractually bound to protect your data in accordance with GDPR standards.

10. International Data Transfers

10.1 Data Storage

Your personal data is primarily stored and processed within the European Economic Area (EEA).

10.2 Transfers Outside the EEA

Some of our service providers (such as Stripe) may transfer your data outside the EEA. When this occurs, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission

  • Adequacy decisions by the European Commission

  • Other legally compliant transfer mechanisms

You have the right to request information about these safeguards by contacting us at paul@speechly.io.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures, including:

  • Encryption: All data transmissions are encrypted using SSL/TLS (HTTPS)

  • Access controls: Strict internal access restrictions based on the principle of least privilege

  • Data minimization: We only collect data that is necessary for our stated purposes

  • Regular security reviews: Ongoing assessment of our security practices

  • Secure storage: Data is stored on secure servers with industry-standard protections

Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

12.1 Retention Periods

Data Type Retention Period Account data Until you request deletion or close your account Payment records 7 years (for tax and accounting purposes) Newsletter subscriptions Until you unsubscribe Analytics data 26 months (anonymized thereafter) Support correspondence 3 years

12.2 Deletion

When data is no longer needed, we will securely delete or anonymize it. If you request deletion of your data, we will comply within 30 days unless we are legally required to retain certain information.

13. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

13.1 Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you.

13.2 Right to Rectification (Article 16)

You have the right to correct inaccurate or incomplete personal data.

13.3 Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data in certain circumstances.

13.4 Right to Restriction of Processing (Article 18)

You have the right to request that we limit the processing of your personal data in certain situations.

13.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

13.6 Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

13.7 Right to Withdraw Consent (Article 7)

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

13.8 Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State where you reside, work, or where an alleged infringement occurred.

For France: Commission Nationale de l'Informatique et des Libertés (CNIL)
Website: https://www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France

13.9 How to Exercise Your Rights

To exercise any of these rights, please contact us at: Email: paul@speechly.io

We will respond to your request within 30 days of receipt. If we need additional time, we will inform you and explain the reason for the delay.

14. Children's Privacy

Speechly is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

If you believe we have collected data from a child under 16, please contact us immediately at paul@speechly.io.

15. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

16.1 Notification of Changes

If we make material changes to this Privacy Policy, we will notify you by:

  • Sending an email to the address you provided

  • Displaying a prominent notice on our website

  • Updating the "Last Updated" date at the top of this policy

16.2 Your Continued Use

Your continued use of Speechly after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

You can always find the latest version of our Privacy Policy at: https://speechly.io/privacy

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Email: paul@speechly.io
Website: https://speechly.io

We will respond to your inquiry as quickly as possible, typically within 5 business days.

18. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of France and the European Union, particularly the GDPR.

Any disputes arising from this Privacy Policy will be subject to the exclusive jurisdiction of the courts of France.

End of Privacy Policy