Privacy Policy

This policy explains what information is collected when using Tamleluya's transcription service ("the Company", "we"), what it is used for, with whom it is shared, and how it is stored and deleted. This policy forms an integral part of the Terms of Use, and confirming them upon registration includes confirmation of this policy as well.

This policy is formulated in accordance with the Privacy Protection Law, 5741-1981, and its regulations.

Account details: email address, name, password (stored only as an encrypted hash — never as plain text), and profile picture if you registered with Google.

Content you upload: audio and video files, recordings you make in the service, and the derived outputs — transcripts, subtitles, translations, summaries, and documents.

Billing details: name for invoicing, business/company registration number, and country, if provided. Payment method details (credit card, etc.) are never stored by us — they are submitted directly to the payment processor.

Operational usage data: balances and billing history, job history, activity and error logs, IP address and rate limits, and a record of your consent to the Terms of Use (date, version).

Anonymous usage data (subject to your consent via the consent banner): browsing events such as page views and clicks, for the purpose of improving the user experience. This data is collected under a random identifier and is not collected without consent.

Support inquiries and bug reports you send us.

To operate the service: transcribing files, saving the outputs to your account, billing based on usage, and sending operational messages (such as a verification code, password reset, notification that a transcript is ready, and receipts).

For security and abuse prevention: detecting anomalies, rate limiting, and activity logging.

To improve the service: aggregate and anonymous analysis of usage patterns (subject to consent).

Marketing communications, if any, will only be sent with explicit prior consent in accordance with Section 30A of the Communications Law, and always with an opt-out option. Operational messages are not marketing communications.

We do not sell your personal information, and we do not make any commercial use of your content beyond providing the service.

To provide the service, we use subprocessors, each of whom receives only the information necessary for their role: cloud file storage (Cloudflare R2) and server infrastructure (Railway) — where files and data are stored; transcription and speech-recognition engines — receive the audio for producing the transcript; an AI provider (Anthropic) — receives transcript text for features such as subtitles, translation, and summaries; a payment processor (Lemon Squeezy) — handles payments and receives purchase details; an email delivery provider (Resend) — sends operational email messages.

Under our AI provider's terms of use, content sent via the API is not used to train models.

Some providers operate from servers outside Israel (the US and Europe). Information transfer is carried out solely for the purpose of providing the service and in accordance with the Privacy Protection Regulations (Transfer of Data to Databases Outside the State's Borders), 5761-2001.

By default, no one listens to your recordings — processing is automatic. Human access to content occurs only in two cases: (a) when you initiate sharing for the purpose of human correction or proofreading — the party you selected is granted access to the scope you defined (for example, error segments only or the full file); (b) limited operational access by the Company's staff for the purpose of support, troubleshooting, or a legal obligation — and for these purposes only.

Files and outputs (audio, video, transcripts, translations): retained for 30 days from creation and automatically deleted from storage after that period. Please download and save anything important to you.

Manual deletion: you can delete any file at any time through your account — deletion removes the file and its outputs from storage and cancels any active shares of it.

Account deletion: you may request account deletion by contacting asr@tamleluya.com, and it will be carried out within 30 days. Upon deletion, account details, files, and outputs will be removed; records legally required to be retained (such as billing documentation) will be kept only as required.

Operational records (activity logs, consent records, billing records) are retained for the periods required to operate the service and comply with the law.

We implement standard protective measures: encrypted traffic (HTTPS), encrypted password hashing, one-time verification codes with attempt limits, access controls, and rate limiting, in accordance with the Privacy Protection Regulations (Data Security), 5777-2017.

That said, no online system is completely immune to breach, malfunction, or loss. Consider the sensitivity of your material before uploading it, and keep your own independent backup.

In the event of a security incident that may affect your information, we will act to notify you and the relevant authorities in accordance with legal obligations.

We use only essential cookies for login, session management, and security. These cookies are required for the service to function.

Collection of behavioral data for product improvement purposes is carried out only after your consent via the consent banner, under an anonymous identifier. You may decline — the service will continue to work as usual.

Under the Privacy Protection Law, you are entitled to review your personal information, request its correction or deletion, and receive a copy of your outputs (available for direct download from your account). You may also withdraw your consent at any time to the collection of behavioral data or to marketing communications.

To exercise these rights: asr@tamleluya.com. We will respond promptly and no later than the timeframes set by law. If you are not satisfied with how your request was handled, you have the right to contact the Privacy Protection Authority.

The service is intended for individuals aged 18 and above, and we do not knowingly collect information about minors under this age without parental consent. If you become aware of such information, please contact us and we will delete it.

We may update this policy from time to time. For material changes, we will provide advance notice on the website or by email, and where appropriate, we will request renewed consent. The version of the policy and its update date appear at the top of the page.

Tamleluya, 4 Gordon Street, Jerusalem 9666212, Israel. For privacy inquiries and to exercise your rights: asr@tamleluya.com.