Куда уходят ваши слова

Что не отправляется на наши серверы

• Ваше аудио — ни диктовки, ни встречи. Оно уходит сервису распознавания, а не нам, и мы его не храним.
• Ваши расшифровки, записи встреч, заметки и проекты. Учёт использования передаёт число, а не содержимое.
• Содержимое приложения, в которое вы печатали.
• Ваш полный IP-адрес как хранимая запись. Мы сохраняем максимум код страны.

Задействованные сервисы

У каждого сервиса свои сроки хранения и свои условия по обучению моделей. Эти условия указаны в политике конфиденциальности только там, где они подтверждены подписанным соглашением. Там, где не подтверждены, страница прямо об этом говорит, а не догадывается.

• Soniox

  Условия не подтверждены

  Speech-to-text transcription, including mixed-language recognition, meeting transcription with speaker separation, and optional translation.

  • · Microphone audio captured while dictation is active
  • · During a meeting recording: microphone audio and, when enabled, Windows system audio, mixed into one stream
  • · Language hints and, when configured, personal-dictionary terms and per-project vocabulary used as recognition context

  How long Soniox keeps audio, and whether it may use it to improve its own models, is governed by the Soniox terms and the account agreement in force — not by this policy. We have not verified those terms against a signed agreement, so nothing here should be read as a promise that your audio is excluded from retention or from training. Soniox’s own privacy terms are what it commits to.

• OpenAI

  Условия не подтверждены

  Optional AI processing: dictation cleanup (grammar, filler removal, punctuation, writing style), final meeting-transcript polish, and on-demand meeting insights (summary, key points, to-dos, speaker quotes, assistant answers).

  • · The raw transcript text of the current dictation
  • · The selected writing style and personal-dictionary terms relevant to that dictation
  • · When an AI meeting action is used: the speaker-labelled meeting transcript text (never the audio)

  How long OpenAI keeps the text sent to it, and whether it may use it for training, is governed by the OpenAI API terms and the account agreement in force. We have not verified those terms against a signed agreement, and zero-data-retention is not confirmed for this account — so nothing here should be read as a promise that your text is excluded from retention or from training. The text now reaches OpenAI through Xuula servers rather than directly from the Windows application — nobody supplies a key of their own any more — and each request asks OpenAI not to retain it. Xuula does not store the text: it is held for the length of one request and dropped. Audio is never sent to OpenAI, and turning AI cleanup off stops text being sent at all.

• Stripe

  Payment processing, subscription management, invoicing and tax calculation.

  • · Email address and account identifier
  • · Billing details and payment method entered directly into Stripe
  • · Subscription and invoice records

  Card numbers never reach Xuula servers; they are entered into Stripe-hosted Checkout. Stripe acts as an independent controller for fraud prevention and regulatory purposes, and keeps payment records for as long as its own obligations require. Payments are switched off on this deployment, so no customer data has been sent to Stripe yet.

• Railway

  Условия не подтверждены

  Hosting the website and running the application server. The production service runs in Railway’s us-east4 region, in the United States.

  • · Every request to the site, including IP address and request metadata in the platform’s own access logs
  • · All data the application processes, because the application runs there

  Railway operates the servers and holds platform-level logs under its own terms; we have not verified a retention period for those logs against a signed agreement and do not state one here. The application’s own records keep no full IP addresses — see the retention table.

• PostgreSQL on Railway

  Storing account, subscription, device, usage-ledger and billing-event records. Same vendor and same us-east4 region as the application server.

  • · All persisted application data

  A PostgreSQL instance on a Railway volume, reachable only on Railway’s private network and never exposed to the public internet. It is not a separate managed-database vendor: the data stays with the hosting provider named above, under the same terms.

• Resend

  Условия не подтверждены

  Sending transactional email: address verification, sign-in links, security notices and billing notifications.

  • · Your email address
  • · The content of the transactional message itself

  Resend is the application’s outbound mail provider. How long it keeps message content and delivery logs is governed by its own terms, which we have not verified against a signed agreement. Receiving mail is a separate job: the mailboxes named on this site are hosted by the domain’s inbound mail provider, and Resend is not involved in them.

• Cloudflare R2

  Off-site storage of encrypted logical database backups, held with a different vendor from the database itself.

  • · An encrypted archive of the application database: account, subscription, device, usage-ledger and billing-event rows
  • · No audio, transcripts, meeting recordings or Projects — those never reach this server

  Each archive is encrypted with AES-256-GCM on our own server before it is uploaded, so Cloudflare holds ciphertext and never holds the key. Off-site backups are switched off on the current deployment and no archive exists yet; this row is here because R2 is where they will go the moment they are switched on.

Сколько что хранится

Что зависит от вас

• Отключить ИИ-обработку — тогда текст расшифровки не отправляется на переписывание.
• ИИ-выводы по встречам запускаются только по вашему запросу — фоновой обработки нет.
• Отключить свой микрофон во время записи встречи, поставить запись на паузу или остановить её в любой момент.
• Включать и выключать живой перевод для каждой встречи отдельно.
• Очистить локальную историю диктовок в любой момент прямо в программе; файлы встреч — обычные локальные файлы, которые вы можете удалить сами.
• Выгрузить всё, что хранит ваш аккаунт, в формате JSON.
• Удалить аккаунт — данные будут стёрты после короткого периода на отмену.