Privacy Policy

Overview

Diarize is operated by ABHI Tech Inc. This Privacy Policy explains how diarize (“we”, “us”, or “our”) collects, uses, and shares information about you when you use our website and services (the “Service”).

Information We Collect

Account Information: Email address and profile details used to create and authenticate your account.
Service & Usage Data: Video links and metadata you submit, job identifiers and statuses, transcripts and derived artifacts, usage metrics (e.g., minutes consumed), and settings.
Payment & Purchases: Interactions with our payment processor (e.g., customer identifier, purchase records). We do not store full payment card numbers on our servers.
Cookies & Local Storage: Minimal cookies such as authentication status/token and UI preferences (e.g., sidebar state).
Analytics: Limited analytics information (e.g., page views, referrers, device attributes) to improve the Service.
API Keys & Developer Data: Key name, prefix plus last four characters, creation time, last-used time, revocation time, and optional note. We store only a one-way hash of your API key secret (not the raw secret).
Service Logs & Rate Limiting: Request metadata used for security and abuse prevention (e.g., timestamps, counters) and limited network information (e.g., IP address, user agent) to enforce quotas and protect the Service.

How We Use Information

Authenticate users and operate the Service.
Process videos, generate transcripts, and deliver outputs.
Manage credits, purchases, and billing records.
Monitor, maintain, and improve performance and security.
Communicate with you about updates, promotions, and support.
Comply with legal obligations and enforce our Terms.

AI-Assisted Processing

Parts of the Service use AI-assisted processing to analyze content (for example, to correct transcription errors or enrich keywords). We may use trusted service providers to facilitate such processing. Outputs may be imperfect; please review before relying on them.

Marketing Communications

We may send you marketing emails about new features, promotions, and updates. You can opt out at any time by following the unsubscribe instructions in the emails or contacting us at support@diarize.io.

Cookies

We use cookies necessary to operate the Service (for example, authentication status and certain UI preferences) and limited analytics.

We also use advertising cookies. Where required, we ask for your consent first.

Service Providers: We use third parties for hosting, storage, authentication, payments, analytics, and AI-assisted processing. These providers process data on our behalf under appropriate safeguards.
Advertising Partners: We share limited usage information and hashed email addresses with advertising partners to measure and manage our advertising.
Legal & Safety: We may disclose information to comply with law, protect rights, or respond to lawful requests.
Business Transfers: In connection with a merger, sale, or similar transaction, information may be transferred as permitted by law.

We do not sell your personal information.

ChatGPT Connection

When you connect Diarize to ChatGPT, we receive the tool inputs needed to carry out your requests, such as a video URL, job identifier, or transcript page selection. OpenAI receives the requested results. These can include your account identifier, minute balance and free-minute limits, video details, job progress, and transcript text with speaker labels that your account is permitted to access. We use this information to create and track transcription jobs and return results to ChatGPT.

We store connection records containing your account identifier, the connected client, permissions, authorization and expiration times, revocation status, and hashes used to verify credentials. We also store request records linking your account, requested video, and job. We use these records to authorize access, detect credential reuse, and prevent duplicate jobs and minute charges when a request is retried.

You can revoke a connection at Manage ChatGPT connections. Revocation blocks further access through that connection. It does not delete your Diarize account, jobs, transcripts, or content already returned to ChatGPT. OpenAI handles that content under its own privacy policy and your ChatGPT settings.

A connection can authorize access for up to 30 days. Authorization and access-token records become eligible for automatic deletion after up to 10 minutes. Grant, authorization code, credential-reuse detection, and refresh-token records become eligible for automatic deletion after up to 30 days. Cleanup runs asynchronously, so records may remain stored after these times. Expiration blocks access even if cleanup has not yet removed the records.

If Sign in with ChatGPT is available and you choose to use it, we receive the identity information OpenAI provides, which can include an account identifier, email address, email verification status, and name. We use it to sign you in or link your Diarize account. Temporary sign-in and account-confirmation records become eligible for automatic deletion after 10 minutes and may be deleted sooner when used. The record linking your OpenAI identity to your Diarize account has no automatic expiration.

Request records used to prevent duplicate jobs and minute charges also have no automatic expiration. These records and persistent identity links remain stored indefinitely unless manually removed. You can request deletion at support@diarize.io. Account, transcript, and related file retention is described in the Data Retention section below.

Security

We use reasonable technical and organizational measures designed to protect information. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

For API authentication, we store API keys as one-way hashes and verify them using constant-time comparison; we do not store raw API key secrets.

Data Retention

Account, purchase, job, transcript, and related file records currently have no automatic expiration. We retain them indefinitely unless manually removed. We use these records to provide account and transcript access, track minute usage, and maintain purchase and operational records. Administrative deletion of an account or job does not automatically remove all related storage files or ChatGPT connection records. Deleted storage files may remain recoverable for seven days under our storage provider's soft-delete setting. Deletion requests are subject to applicable legal and accounting obligations.

API key metadata and API usage counters also have no automatic expiration, including after a key is revoked. Service logs copied to our observability database are retained without a rolling deletion schedule. We use these records for security, abuse prevention, and operational troubleshooting. The ChatGPT Connection section above describes automatic cleanup of temporary authentication records.

Your Choices & Rights

You may request access, correction, or deletion of your personal information, subject to applicable law. To make a request, contact support@diarize.io.

International Transfers

We may process and store information in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers.

Children's Privacy

The Service is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, please contact us so we can take appropriate action.

Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by reasonable means. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Contact Us

For privacy questions or deletion requests, email support@diarize.io.