Remember to bookmark us!

Privacy Policy

Last updated: May 21, 2026

Transcript.you (“we”, “our”, “us”) operates the website at transcript.you and the “Transcript.you — Instant Transcripts” browser extension distributed via the Chrome Web Store and other extension galleries. This policy explains, in plain language, what we collect, why, how it is used, and the choices you have over it. By using the website or the extension, you accept the practices described below.

1. Quick summary

  • We do not sell, rent, lease, share, or otherwise transfer your personal data to any third party for advertising or for any purpose unrelated to the service.
  • The browser extension reads only the URL of the active tab, and only when you explicitly invoke it (click the icon, click the in-page button, or use the right-click menu).
  • We use a small number of named subprocessors (Stripe for payments, OpenAI for transcription/AI, transactional email providers). We do not use behavioural advertising networks.
  • You can delete your account, transcripts, and all stored personal data at any time from your account page or by emailing us.

2. Information we collect on the website

  • Account data—email address, hashed password, and the IP address used at sign-up. Required to create and secure your account.
  • Payment data—collected and processed directly by Stripe. We receive a customer identifier, the subscribed plan, and the payment status. We never see your card number or full bank details.
  • Usage data—the videos and audio files you submit, the source platform (YouTube / TikTok / Spotify / Vimeo / Twitch / direct upload), feature interactions inside the file manager, and timestamps. Used to deliver the service, enforce quotas, and improve reliability.
  • Generated content—transcripts, AI summaries, translations, and exports you produce. Stored in your account so you can search and re-export them later.
  • Diagnostic logs—HTTP request logs (URL, status code, response time, anonymised IP fragment) retained for a short window to investigate errors and abuse. We do not run user-tracking scripts of any kind.

3. Information collected by the browser extension

The Transcript.you browser extension is designed around a single, narrow purpose: open the transcript of the YouTube or TikTok video you are currently watching on transcript.you in a new tab. To do that, it needs to know which video you are on.

What the extension reads

  • The URL of the currently-active tab, but only at the moment you explicitly invoke the extension by:
    • clicking the toolbar icon,
    • clicking the “Get transcript with Transcript.you” option in the right-click menu, or
    • clicking the in-page “📝 Transcript” button that the extension injects into YouTube and TikTok video pages.

What the extension does NOT do

  • It does not read browsing history.
  • It does not collect a list of pages you visit.
  • It does not transmit any data to any server other than transcript.you, and only when you have explicitly invoked it.
  • It does not use cookies, web beacons, fingerprinting, or any third-party analytics inside the extension.
  • It does not run code on any website beyond YouTube and TikTok video pages (its host permissions are restricted accordingly).

Permissions and why each is requested

Per Chrome Web Store policy, here is a literal-as-possible justification for each permission declared in the extension manifest:

  • activeTab—to read the URL of the tab the user is currently viewing, only when the user clicks the extension's icon or context-menu item.
  • tabs—to open a new browser tab on transcript.you with the correct route after the user invokes the extension.
  • contextMenus—to add the “Get transcript with Transcript.you” entry to the right-click menu on YouTube and TikTok pages.
  • scripting—to inject the in-page “📝 Transcript” button into the YouTube and TikTok video-page UI so users can launch a transcript without leaving the player area.
  • Host permissions for *.youtube.com, youtu.be, and *.tiktok.com—to limit the extension's reach to exactly these two platforms; it has no permission to read or modify any other website.

Single-purpose statement

The single, declared purpose of the Transcript.you extension is to allow a user to open the transcript of the YouTube or TikTok video they are watching on transcript.you with one click. No code in the extension does anything else.

4. How we use information

Information collected on the website or by the extension is used solely to:

  • provide, operate, and maintain the transcription service,
  • process subscription payments and grant the corresponding access,
  • enforce free-tier quotas and prevent abuse,
  • investigate errors, security incidents, and fraudulent activity,
  • communicate with you about your account, billing, and the service (e.g. confirmation emails, payment receipts, support replies, and, only if you have not opted out, occasional product updates).

We do not use your data to train AI models, profile you for advertising, sell to data brokers, or for any purpose unrelated to operating the service.

5. Subprocessors and data sharing

We use the following named subprocessors. Each performs a specific, well-defined function and is bound by its own data-protection obligations:

  • Stripe (Stripe Inc.)—payment processing. Receives your email and payment details; returns a payment confirmation and a customer identifier.
  • OpenAI—speech-to-text (Whisper) and AI summarisation/translation. Receives the audio extracted from the videos you submit and the resulting transcript text. OpenAI does not retain this content for model training under the API tier we use.
  • Wasabi (cloud object storage)—encrypted at-rest storage for your uploaded audio and generated transcripts, so you can re-export them later.
  • Transactional email provider—sending confirmation, password-reset, and receipt emails. We use only the address you provided at sign-up.
  • Webshare—rotating-proxy provider used to fetch YouTube transcripts reliably. No personal user data is forwarded to Webshare.

Beyond these named subprocessors, we do not share your personal data with any third party except when compelled by law (subpoena, court order, regulatory request) or when strictly necessary to protect the security of the service or its users.

6. Cookies and similar technologies

On the website we use a small number of strictly necessary cookies: a session cookie to keep you logged in, a CSRF-protection token, and a few first-party preferences. We do not use third-party advertising cookies or cross-site trackers. The browser extension does not set or read cookies of its own.

7. Data retention and deletion

  • Account data is retained for as long as your account is active. You can delete your account from the account page; once deleted, your email, password hash, and subscription record are removed within 30 days.
  • Transcripts and uploaded audio can be deleted individually from the file manager. Deletion removes both the database row and the underlying object-storage file.
  • Diagnostic logs are rotated after 30 days.
  • Payment records are retained for the period required by tax and accounting law in our jurisdiction (typically up to 7 years).

8. International transfers

Our servers and subprocessors operate primarily in the United States. If you are accessing the service from outside the US, your data will be transferred to and processed in the US. We rely on standard contractual clauses (or equivalent safeguards) with subprocessors located outside your region.

9. Your rights (GDPR, UK GDPR, CCPA, and similar laws)

Depending on where you live, you have some or all of the following rights:

  • access to the personal data we hold about you,
  • correction of inaccurate data,
  • deletion of your data (the “right to be forgotten”),
  • restriction or objection to processing,
  • portability of your data in a machine-readable format,
  • withdrawal of any consent previously given,
  • to lodge a complaint with your local supervisory authority,
  • under the CCPA: the right to know what categories of personal information we collect, the right to delete it, and the right to opt out of any sale of personal information (we do not sell personal information, so this opt-out is the default).

You can exercise most of these rights from your account page directly. For anything else, email us and we will respond within 30 days.

10. Security

We protect your data with TLS in transit, hashed passwords (bcrypt), encrypted-at-rest object storage, restricted server access, and routine dependency-vulnerability scanning. No system is perfectly secure; if we ever become aware of a breach that affects your data we will notify you in accordance with applicable law.

11. Children

The service is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. If we make material changes, we will give reasonable prior notice by email or via an in-app banner.

13. Contact us

Privacy questions, data-rights requests, or concerns about the extension can be sent via our contact page.

Transcript.you
View Pricing Register Login