Privacy Policy

This Privacy Policy governs the processing of personal data by ASR.GE through our website, web platform, desktop applications, and related speech-to-text infrastructure (collectively, the "Services").

We are deeply committed to data privacy and technical sovereignty. Our services are engineered around a Privacy-by-Design philosophy, ensuring that your audio remains entirely under your control and is never repurposed. We preserve, process, and store all data in strict compliance with the Law of Georgia on Personal Data Protection.

1. Scope and Roles of the Parties

Depending on how you interact with ASR.GE, our legal responsibilities under Georgian data protection law differ:

• ASR.GE as a Data Controller: We act as a Data Controller for basic corporate account data, billing details, and technical usage logs collected when you register an account, purchase a subscription, or navigate our website.
• ASR.GE as a Data Processor: When you upload audio files or stream speech through our web or desktop applications to generate transcripts, you (the Client) are the Data Controller, and ASR.GE acts solely as a Data Processor. We process that underlying audio and resulting text exclusively on your behalf and according to your documented instructions.

2. Technical Architecture & Privacy-by-Design

Our systems are architected to ensure maximum data minimization. Our software applications (including the ASR.GE Live Transcribe desktop application) operate under a strict local-first approach:

• Offline Local Storage: The application never automatically transmits your local system data, files, or background analytics. Audio files remain saved offline on your local computer.
• Ephemeral Audio Processing: When you explicitly submit audio for transcription, the file is temporarily sent to our secure cloud GPU infrastructure to run the AI inference model. The moment the transcript text is generated, the audio file is instantly discarded and purged from GPU memory.
• No Server-Side Audio Retention: Your audio files are never saved, cached, or permanently stored on ASR.GE servers.
• No Model Training: We strictly do not use your audio files, transcripts, or edited texts to train, fine-tune, or benchmark our AI models or any third-party systems.

3. Types of Data Collected and Purpose of Processing

A. Account & Operational Data (Processed as Controller)

• Data Types: Name, email address, organization name, billing details, and subscription status.
• Purpose: To manage your account, deliver API keys, process payments, and provide technical customer support.

B. User-Submitted Content (Processed as Processor)

• Data Types: Voice recordings, personal names, locations, dates, and any sensitive information (such as health, legal, or financial context) spoken within submitted audio files.
• Purpose: Strictly limited to automated speech-to-text transcription, optional punctuation alignment, and structural formatting.

4. Data Retention and Deletion Schedule

We enforce a strict data minimization schedule. We do not keep your source audio, and text transcripts are automatically purged after a fixed retention window unless you request an earlier deletion.

5. Infrastructure, Subprocessors, and Cross-Border Transfers

To deliver enterprise-grade AI transcription speed, ASR.GE utilizes highly optimized cloud infrastructure. By using the Services, you acknowledge and authorize the following workflows:

• Cloud GPU Compute: Our native Georgian speech-to-text models are hosted on secure GPU cloud infrastructures located primarily in the United States (USA). This constitutes a cross-border transfer under Georgian law, protected by strict encryption in transit.
• Advanced Text Correction: For optional automated text punctuation, formatting, and language cleanup, text data may be processed through the Google Gemini API. Google is bound by strict enterprise data privacy commitments that explicitly prohibit using customer API data for model training.
• Enterprise GPU Locking (Opt-In): For enterprise clients with strict regulatory or internal data localization compliance rules, ASR.GE can arrange to lock the entire processing workflow to a dedicated, isolated GPU cloud instance upon written request.

6. Information Security Measures

ASR.GE implements industry-standard technical and organizational security measures to safeguard your information:

• Encryption: All communication channels, including audio transmission from your application to our GPU infrastructure, are fully encrypted using modern Transport Layer Security (TLS/HTTPS) protocols.
• Access Control: Access to our database environments is strictly restricted via identity-access management policies, ensuring that your stored text transcripts can only be accessed by your authenticated web account.
• Data Breach Protocol: In the occurrence of an unauthorized system event or data breach impacting stored text metadata, we are committed to notifying affected clients and the Personal Data Protection Service of Georgia without undue delay, in full compliance with statutory reporting laws.

7. Your Rights Under Georgian Law

In accordance with the Law of Georgia on Personal Data Protection, you retain full ownership and control over your data. You have the right to:

• Request access to the personal data we hold about you.
• Request the rectification or correction of inaccurate personal data.
• Request the immediate erasure and permanent deletion of your stored transcripts or account data.
• Object to or restrict specific processing workflows.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, or to wipe your data from our web portal instantly, you can use the account dashboard tools or contact us directly.