Privacy policy

Last updated: 18 October 2026

Who is responsible

The controller of your personal data is SophiaDesign Inc. Contact: support@ordsana.com.

Audio and video files you upload – to create the transcript (performance of a contract, GDPR Art. 6(1)(b)). Files are deleted automatically as soon as the transcription is finished. Files that are never transcribed are deleted within 3 days.
Transcripts – so that you can read and download them. They are deleted automatically after 7 days.
An anonymous identifier stored in your browser – to link your files to you without an account.
Your IP address – stored only as a one-way hash for up to 3 days, to prevent misuse of the free tier (legitimate interest, GDPR Art. 6(1)(f)).
Payments – handled by our payment provider. We never see your card details. We keep the records that accounting law requires.

Google Cloud / Firebase (hosting, file storage and database; data is stored in the EU, in Finland).
Soniox Inc. (speech recognition, USA) – receives the audio only to create the transcript.
Transfers outside the EU/EEA are protected with appropriate safeguards, such as the EU Standard Contractual Clauses.

We do not use advertising or tracking cookies. We only use browser storage that is strictly necessary for the service to work.

You have the right to access, correct and erase your data, to restrict or object to processing, and to data portability. Contact us at support@ordsana.com.
You can also lodge a complaint with a supervisory authority, for example IMY in Sweden or the Data Protection Ombudsman in Finland.