SpacesAI
Legal

Privacy Policy

Last updated: 9 April 2026

1. Who we are

SpacesAI ("we", "us", "our") operates the SpacesAI platform accessible at spacesai.app. We process Twitter/X Spaces audio and return machine-generated transcripts. Questions about this policy may be directed to privacy@spacesai.app.

2. Information we collect

  • Account data: name, email address, and hashed password when you register.
  • Usage data: the Twitter/X Space URLs you submit, job status, and transcript results.
  • Payment data: billing transactions are processed by Stripe. We store only plan type and a Stripe customer identifier — we never see or store full card numbers.
  • Log data: IP address, browser type, pages visited, and timestamps for security and abuse prevention.
  • Cookies: a single httpOnly session cookie (access_token) used to authenticate your session. No third-party advertising cookies are set.

3. How we use your information

  • To provide and operate the transcription service.
  • To process payments and manage your subscription via Stripe.
  • To send transactional emails (password reset, receipts). We do not send marketing email without explicit consent.
  • To detect and prevent fraud and abuse.
  • To improve accuracy and performance of our service.

4. Deepgram audio processing

Audio files downloaded for transcription are sent to Deepgram, Inc. via their secure API. Deepgram processes the audio solely to generate the transcript and does not retain audio or transcripts beyond the API request under their standard data deletion policy. We delete the audio file from our servers immediately after the transcription job completes. Transcripts are stored in your account until you delete them.

By using SpacesAI you acknowledge that audio will be processed by Deepgram subject to Deepgram's Privacy Policy.

5. Stripe payments

All payment processing is handled by Stripe, Inc. Stripe may collect and store payment card details, billing address, and transaction history subject to Stripe's Privacy Policy. We receive only a customer ID, subscription status, and anonymised transaction events via Stripe webhooks.

6. Data sharing and third parties

We do not sell, rent, or trade your personal data. We share data only with:

  • Deepgram — for audio transcription (see §4).
  • Stripe — for payment processing (see §5).
  • Infrastructure providers — hosting and database services operating under data processing agreements.
  • Law enforcement — if required by applicable law or valid legal process.

7. Cookies & tracking

We use the following cookies and tracking technologies:

  • access_token — an httpOnly, Secure JWT token that authenticates your session. It expires after 7 days and is deleted on logout. Always active.
  • Google Analytics 4 — page views, traffic sources, and usage patterns. Only active if you accept analytics cookies.
  • X (Twitter) Pixel — measures effectiveness of our X Ads campaigns and tracks conversion events (e.g. sign-ups). Only active if you accept analytics cookies. Data is processed by X Corp. under their Privacy Policy.

You can manage your cookie preferences at any time via our Cookie Policy page.

8. Data retention

  • Audio files — deleted immediately after transcription completes.
  • Transcripts and job data — retained for as long as your account is active, or until you delete them.
  • Account data — deleted within 30 days of account deletion.
  • Payment records — retained for 7 years as required by financial regulations.

9. Your rights (GDPR)

If you are in the European Economic Area (EEA) or UK, you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion of your account and data.
  • Portability — receive your data in a machine-readable format.
  • Restriction — ask us to limit processing in certain circumstances.
  • Objection — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@spacesai.app. We will respond within 30 days.

10. Security

Passwords are stored as bcrypt hashes. All data in transit is encrypted via TLS. Session tokens are httpOnly and Secure-flagged. We do not store plaintext credentials.

11. Changes to this policy

We may update this policy periodically. Material changes will be notified by email or a prominent notice on the site. Continued use of the service after changes constitutes acceptance.

12. Contact

Privacy enquiries: privacy@spacesai.app
General support: Contact form

Privacy Policy | SpacesAI