Legal
Privacy Policy
Last updated: October 5, 2026
1. Information We Collect
1.1 Information You Provide
- Account information (email, password)
- Payment information (processed by Stripe)
- Support communications
1.2 Audio and Transcription Data
- Audio recordings: On the Free plan, and whenever the online features are switched off, audio is recorded and processed entirely on your device and never leaves it. Activating Pro turns on online transcription and post-processing, so your dictation is sent to the providers listed in section 5; you can switch either off at any time in Settings → AI & Data.
- Online transcription (Pro; on by default, can be switched off): Audio is sent from your device over an encrypted connection to our servers, which relay it in real time to AssemblyAI and return the transcript to you. The audio and the transcript only pass through our servers in transit: they are held in memory for the duration of the session and are never written to disk, stored or logged by Eximsol Sp. z o.o. AssemblyAI does not retain the audio or transcript after the session, and does not use them to improve its models.
- Online text processing (Pro; on by default, can be switched off): Your transcribed text — not audio — is sent to our servers and forwarded to Baseten, which runs the model, for post-processing or Prompt Mode. We do not store or log that text, and Baseten does not store model inputs or outputs for this kind of request; it exists only for the duration of the request.
- Your rules (Pro): Standing instructions you write for post-processing are stored with your account settings on our servers and included in each request to Baseten.
- Transcriptions: Stored locally on your device. Eximsol Sp. z o.o. does not have access to your transcription history.
- Usage data: Identifiers of the devices you register and the number of online transcription minutes used
- Error reports (on by default, can be switched off): When the app crashes or runs into an error, it sends a diagnostic report to our servers: the error message and technical details (stack trace), recent technical log lines from the app, the app version, operating system and processor architecture, a random installation identifier, your IP address and, if you are signed in, your account email. Reports never contain audio, transcripts or the text you dictate. You can switch them off at any time in Settings → AI & Data → Send Error Reports; reports not yet sent are then deleted from your device.
- Payment diagnostics: When you start a checkout, open the billing portal or change your billing interval, the steps of that flow (requests, payment status updates from Stripe and any errors) are recorded together with your account email so we can resolve failed or stuck payments. Card details are handled by Stripe and never reach us.
- Analytics: We do not collect product analytics.
1.3 Browser Demo (/try)
The demo on this website runs without an account, and we do not ask you for any personal details to use it.
- Audio: Streams directly from your browser to AssemblyAI over an encrypted connection, using a short-lived token issued by us. It does not pass through our servers, we never receive or store it, and AssemblyAI does not retain it after the session.
- Text: If you use the clean-up or prompt part of the demo, the transcribed text is sent to our servers and forwarded to Baseten. We do not store or log it; it exists only for the duration of the request.
- Abuse prevention: The demo is limited to 5 attempts per day, up to 60 seconds each. To count them we store a SHA-256 hash of your IP address together with the date and the number of attempts. We do not store the IP address itself, and the hash is not linked to any account. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
2. How We Use Your Information
- Provide Service: Account management, license verification, model delivery
- Improve Service: Bug fixes and feature development, based on error reports (can be switched off) and support requests
- Communications: Service updates, support responses, marketing (opt-out available)
- Security: Detect fraud, prevent abuse
- Legal: Comply with laws, respond to legal requests
3. Legal Basis for Processing (GDPR Art. 6)
For EU users, we process personal data on these legal bases:
- Contract performance (Art. 6(1)(b)): Account management, license delivery, model downloads
- Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, and diagnosing crashes, errors and failed payments. You can object to error reports at any time by switching them off in Settings → AI & Data
- Legal obligation (Art. 6(1)(c)): Compliance with applicable laws
- Consent (Art. 6(1)(a)): Marketing communications — withdraw anytime at privacy@letsoft.co
4. Data Controller
Eximsol Sp. z o.o. is the data controller for personal data collected through Cascada.
- Contact: privacy@letsoft.co
- Address: Eximsol Sp. z o.o., ul. Marszałkowska 115 p.338, 00-102 Warszawa, Poland
- NIP: 8982265111 | VAT: PL8982265111
5. Data Sharing
5.1 Service Providers
- AssemblyAI: Online audio transcription — in the app (Pro; on by default, can be switched off) and in the browser demo
- Baseten: Runs the model behind online text processing — post-processing (Pro; on by default, can be switched off), Prompt Mode (off until you enable it), and the browser demo
- Stripe: Payment processing
- Cloudflare: Hosting of speech models and application downloads
- Telegram: Delivery of error reports and payment diagnostics to our internal engineering channel
- Google, GitHub, Apple: Sign-in, if you choose to use them
- Database and hosting providers: Account, license, and application infrastructure
We do NOT sell your data, share it for advertising, or use it to train AI models.
6. Data Retention
- Audio: Never stored on our servers. With online transcription, audio passes through our servers in transit only and is not written to disk or logs; AssemblyAI does not retain the audio or the transcript after the session; it keeps limited session metadata for logging and billing
- Transcriptions: Local device only — not accessible to Eximsol Sp. z o.o.
- Error reports and payment diagnostics: Kept only as long as needed to investigate and resolve the issue, then deleted
- Account data: 30 days after deletion, then permanently removed
- Backups: Encrypted, up to 90 days
- Browser demo: Neither the audio nor the text is stored. The hashed IP address, date and attempt count are kept for abuse prevention
7. Your Rights
You have the right to access, rectify, delete, port, or restrict processing of your data, and to object to processing or withdraw consent.
To exercise rights: privacy@letsoft.co
8. Right to Lodge a Complaint
If you believe we have processed your data unlawfully, you may file a complaint with:
UODO (Poland — lead supervisory authority)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl
Email: kancelaria@uodo.gov.pl
9. Security
We use TLS/SSL, encryption at rest, and access controls. No system is 100% secure — use a strong, unique password.
10. International Data Transfers
Your data may be processed by providers in the United States: Stripe (payments), AssemblyAI (online transcription) and Baseten (online text processing), both active on the Pro plan unless you switch them off and whenever you use the browser demo, and Cloudflare (model and application distribution). Sign-in providers (Google, GitHub, Apple) process data only when you choose to sign in with them. Error reports and payment diagnostics are delivered through Telegram, whose servers may be located outside the EEA. For transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms approved under GDPR.
11. Children's Privacy
The Service is not intended for users under 18. We do not knowingly collect data from children.
12. Changes to This Policy
Material changes will be notified via email or in-app notification at least 30 days in advance. Material changes may require re-acceptance.
13. California Users (CCPA)
California residents have rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.
To exercise CCPA rights: privacy@letsoft.co
14. Contact Us
Eximsol Sp. z o.o.
ul. Marszałkowska 115 p.338, 00-102 Warszawa, Poland
NIP: 8982265111 | VAT: PL8982265111
- Privacy: privacy@letsoft.co
- Support: support@letsoft.co