Privacy Policy

1. Who we are

TanLens ("we", "us") operates tranlens.com, a live captioning and translation service. This policy explains what we process when you use the web app, the browser extension, file transcription, broadcast rooms, and our support channels. It applies to the website and the extension; it does not cover third-party sites you caption.

Contact: privacy@tranlens.com.

2. What we process

• Account data — name, email address, hashed password or OAuth identifier, locale, and the IP address and user agent recorded at sign-up and sign-in.
• Audio — microphone or tab audio is encoded in your browser and streamed to our servers in short chunks for speech recognition. Audio is processed in memory and is not stored by TanLens. It is sent to the speech-to-text and machine-translation providers configured for the service.
• Transcripts — if you save a transcript, we store its text, segment timings, languages, title, duration, and the source file URL for uploads. Saved transcripts are kept until you delete them.
• Usage and billing — minutes consumed, credits, orders, subscriptions, and payment-provider references. We do not store full card numbers.
• Extension tokens — when you connect the extension we store a SHA-256 hash of the device token, a device label, and last-use time. Revoking a token takes effect immediately.
• Product analytics — aggregated page views and product events (for example, a session started). Analytics are configured by the site operator and can be disabled with the cookie banner.

Special-category data: do not use TanLens to caption medical, legal, or other high-risk conversations where a mistake could cause harm. We do not knowingly collect data from children under 16.

3. Why we process it

We process data to provide captions and translations you request, to meter minutes and settle credits, to prevent abuse and fraud, to secure the service, to provide support, and to comply with law. Where GDPR applies, the legal bases are performance of our contract, our legitimate interests in operating and securing the service, and consent for optional analytics.

4. Who we share it with

We use sub-processors to run the service:

• Cloudflare — hosting, CDN, D1 database, and object storage.
• Speech and translation providers you or the site operator configure, such as Deepgram, AssemblyAI, OpenAI-compatible endpoints, Google Gemini, or Cloudflare Workers AI. Audio or text is sent to them solely to produce captions and translations.
• Payment providers such as Waffo, Stripe, PayPal, or Dodo Payments, which process checkout and billing data under their own policies.
• Email delivery for verification, receipts, and support replies.

We do not sell personal data. We disclose data only when legally required or to protect the rights and safety of users.

5. International transfers

Our infrastructure and providers may process data outside your country. Where required, transfers rely on standard contractual clauses or an equivalent safeguard offered by the provider.

6. Retention

• Audio: processed transiently, not retained.
• Transcripts: until you delete them or close your account.
• Account and order records: for as long as your account exists and as required for tax and accounting.
• Server logs: typically 30 days, longer only for security investigations.
• Extension tokens: until expiry (90 days by default) or revocation.

7. Your rights

Depending on where you live, you may request access, correction, deletion, export, or restriction of your data, and object to processing based on legitimate interests. Use the account settings to delete transcripts or your account, or email privacy@tranlens.com. You can also lodge a complaint with your local data-protection authority.

8. Security

Data is encrypted in transit. Admin-panel secrets are encrypted at rest with AES-256-GCM. Access to production data is limited and logged. No system is perfectly secure; report suspected issues to security@tranlens.com.

9. Changes

We will update this page when practices change and note the date at the top. Material changes will be announced in the product or by email.