PRIVACY POLICY

Effective 20 August 2026 · Version 1.0

1. Who we are

1.1. Whistler AI ("we", "us", "the Service") is an audio and video transcription and summarization service, operated by Kristina Yadova, a self-employed individual entrepreneur, acting as the data controller for the purposes of this Policy.

1.2. Contact for all privacy matters: nikita.yadov@gmail.com.

1.3. This Policy applies to whistlerai.online and to the Telegram bot through which the Service is delivered. It is written with regard to Regulation (EU) 2016/679 (the "GDPR") for users located in the European Economic Area, and applies equally to users elsewhere.

2. What data we collect

Category	What it includes	Source
Account identifier	Your Telegram user ID and username (if public)	Provided by Telegram when you start the bot
Content you submit	Links you paste and audio/video files you upload for transcription	You
Generated content	Transcripts, summaries, and — if you explicitly enable them — emotion labels, personal-data tags, or deepfake-detection results	Generated by the Service from your submitted content
Usage data	Task history, processing duration, quota consumption, language/format preferences	Generated by the Service
Payment data	Subscription tier and payment status. We do not receive or store card numbers — payments are handled entirely by Telegram (Telegram Stars)	Telegram

3. Why we process it and our legal basis

To provide the Service you request (transcription, summarization, chat with your transcript) — necessary for the performance of a contract with you (GDPR Art. 6(1)(b)).
Optional features you explicitly switch on — emotion recognition, personal-data tagging/redaction, deepfake detection — processed only when you activate them, on the basis of your consent (Art. 6(1)(a)). You can withdraw this by simply not activating the feature again; it is one-shot or toggle-based and never runs without your action.
Fraud prevention, rate-limiting and abuse detection — necessary for our legitimate interest in keeping the Service available and secure (Art. 6(1)(f)).
Billing and tax records — necessary to comply with our legal obligations as a registered taxpayer (Art. 6(1)(c)).

4. Where your data is processed

4.1. We are a small, self-employed operator and use established third-party infrastructure rather than running our own data centers. Your data is processed by the following categories of sub-processors, strictly to deliver the Service:

Primary hosting and database — servers located in Amsterdam, the Netherlands (European Economic Area).
Speech recognition and voice analysis — a specialized third-party provider, used to turn your audio into text and (only if you enable them) analyze emotion or detect synthetic voices.
Language models — third-party AI providers, used to generate the structured summary from your transcript.
Messaging and payments — Telegram, which delivers the bot interface and processes payments (Telegram Stars) under its own privacy policy.

Cross-border transfer notice. Our primary hosting and database are located within the European Economic Area. Some of our other sub-processors — including the speech-recognition and language-model providers listed above — may be located outside the EEA, in countries for which the European Commission has not issued an adequacy decision. We rely on the necessity of these transfers to perform the service you have specifically requested (GDPR Art. 49(1)(b)): you ask us to transcribe and summarize your file, and doing so requires sending it to the providers that do that work. If you are not comfortable with this, please do not use the Service.

5. How long we keep your data

5.1. Uploaded files. The original audio/video file you send is deleted immediately after processing completes (typically within minutes), both from our servers and from temporary cloud storage.

5.2. Transcripts and summaries. The text result is kept for as long as your account is active, so you can reopen past results and use the "chat with your transcript" feature. There is currently no fixed automatic deletion date for this text — see Section 6 for how to have it erased on request at any time.

5.3. Billing records are kept for the period required by applicable tax law.

6. Your rights

6.1. Subject to applicable law, you have the right to: access the data we hold about you; correct it; erase it; restrict or object to its processing; and receive a copy of it in a portable format.

6.2. Self-service erasure. In the Telegram bot, open /settings → Revoke Consent to immediately and permanently clear the text of your transcripts, summaries, and chat history. The bare record that a task happened (date, type, status) is kept in anonymized form for statistics.

6.3. For anything Section 6.2 does not cover (e.g. deleting your account entirely), email nikita.yadov@gmail.com. We will respond within 30 days.

6.4. If you are in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

7. Children

7.1. The Service is not directed at children under 16. We do not knowingly collect data from children under that age.

8. Security

8.1. Data in transit is encrypted (TLS). We apply reasonable technical and organizational measures to protect your data, but no system is perfectly secure, and we cannot guarantee absolute security.

9. Changes to this Policy

9.1. We may update this Policy from time to time. Material changes will be reflected by a new "Effective" date at the top of this page.

10. Contact

10.1. Questions about this Policy or your data: nikita.yadov@gmail.com.