Privacy Policy

This Privacy Policy explains how Maybloc ("Maybloc", "we", "us") collects, uses, shares, and protects personal information when you visit maybloc.com (the "Site"), create an account or use the dashboard at app.maybloc.com (the "App"), or call our application programming interface (the "API"). Together we call these the "Services".

If you use the Services on behalf of an organization, that organization is our customer and generally controls the recordings and results it submits. In that case we process that content on the organization's behalf, and the organization's own privacy notice governs it. Questions about that content should go to the organization first.

If you have questions about this policy, contact us at [email protected].

We collect information you give us, information created when you use the Services, and limited information from the providers who help us run them.

• Account information: your email address, a password (stored only as a salted, one-way hash, never in readable form), and the name of your organization.
• Customer content: the audio and video files you upload, the file names and technical properties of those files (such as size, format, and duration), and the results we produce from them, including transcripts, speaker labels, timing, and overlap information.
• Developer information: API keys (we store only a short visible prefix and a one-way hash of each key), webhook endpoint addresses, and webhook signing secrets, which we store encrypted.
• Billing information: the amount, currency, time, and status of each top-up, and the balance and usage entries on your account. Card and other payment details are collected and processed by our payment provider; we do not receive or store your full card number.
• Usage and technical information: the requests you make, the analyses you run, timestamps, error and status records, and the network address and browser or client information that comes with each request. We use network addresses to prevent abuse, such as enforcing sign-in and sign-up rate limits.
• Communications: the content of messages you send us, such as support requests, and our replies.

We do not ask for, and ask you not to upload, recordings that you are not entitled to share. Recordings can contain the voices, names, and other personal information of people other than you; see "Your responsibilities for recordings" below.

We use the information we collect to:

• provide the Services, including storing your uploads, analyzing them, and showing and exporting the results;
• create and secure your account, authenticate you and your API keys, and keep you signed in;
• process top-ups, reserve and settle charges for each analysis, and keep accurate financial records;
• deliver webhooks you have configured;
• monitor, maintain, debug, and improve the reliability, performance, and security of the Services;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• communicate with you about your account, transactions, changes to the Services, and support requests; and
• comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use your customer content for advertising.

When you start an analysis, your file is stored in private cloud storage and processed on isolated compute infrastructure. Some add-ons are generated with the help of third-party AI service providers that act on our instructions. Those providers receive only what is needed to perform the task, are bound by contractual confidentiality and data-protection obligations, and are not permitted to use your content for their own purposes.

Results may contain errors. Automated speech recognition and speaker separation are probabilistic, and you should review results before relying on them.

If you are in the European Economic Area, the United Kingdom, or another place with similar laws, we rely on the following legal bases:

• Contract: to provide the Services you request and to manage your account and payments.
• Legitimate interests: to secure, maintain, and improve the Services, prevent abuse, and communicate with you about them, where those interests are not overridden by your rights.
• Legal obligation: to keep financial records and respond to lawful requests.
• Consent: where we ask for it, for example for optional communications. You can withdraw consent at any time.

We share personal information only as described here:

• Service providers that host and operate the Services for us, including cloud storage and content delivery, managed database hosting, compute infrastructure, AI service providers, email delivery, and our payment provider. They may use information only to provide services to us.
• Payments: top-ups are processed by our payment provider, which may act as merchant of record and processes your payment information under its own privacy policy.
• Within your organization: other members of your organization can see the organization's uploads, results, usage, and settings.
• Webhooks and integrations you configure: when you register a webhook endpoint, we send event data to the address you choose.
• Legal and safety: when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of Maybloc, our users, or others.
• Business transfers: as part of a merger, acquisition, financing, or sale of assets, subject to this policy or a notice to you.

A current list of our main subprocessors is available on request at [email protected].

We keep information only as long as we need it for the purposes above:

• Uploaded source files are kept for a limited retention window after upload so they can be analyzed and played back, and are then deleted automatically.
• Results and processing checkpoints are kept for a limited retention window after an analysis finishes, and are then deleted automatically.
• You can delete an analysis at any time from the dashboard or with the API. Deletion removes the retained file and results immediately from our active systems.
• Account information is kept while your account is open. When an account is closed, we delete or de-identify it within a reasonable period.
• We keep minimal financial, billing, and security audit records (for example, that an analysis existed, its duration, and its charge) after deletion, for as long as needed to meet legal, tax, accounting, and security obligations.

Retention windows are shown in the dashboard or documentation and may change. Deleted data may persist for a short period in encrypted backups before it is overwritten.

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, private storage that is accessible only through short-lived, object-specific links, hashed passwords, hashed API keys, encrypted webhook secrets, strict separation of each organization's data, rate limiting, and restricted access for our staff.

No method of transmission or storage is completely secure. If we learn of a security incident affecting your personal information, we will notify you and the relevant authorities as required by law.

We and our providers may process information in countries other than the one where you live, including the United States. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for these transfers.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent. You may also have the right to complain to a data protection authority.

California residents have the right to know what personal information we collect, use, and disclose; to request deletion and correction; and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

You can delete individual analyses yourself at any time. For other requests, contact [email protected]. We will verify your request and respond within the time required by law. If your request concerns content an organization submitted, we may refer you to that organization.

Recordings often include people other than the person uploading them. If you upload a recording, you are responsible for having the rights, notices, and consents required by law to record it and to have it processed by us, including under laws on call recording, eavesdropping, and biometric information. Do not upload recordings you are not permitted to share.

The Site does not use advertising or analytics cookies. It stores your light or dark theme choice in your browser's local storage so the page looks the same on your next visit.

The App uses a strictly necessary session cookie to keep you signed in. It is marked secure and HTTP-only, and it ends when you sign out or when it expires. Our infrastructure providers may record standard server logs, such as network address, requested address, and time, to deliver and protect the Services.

The Services are not directed to children and are not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. When we do, we will change the effective date above, and if the changes are material we will give notice through the Services or by email before they take effect.

Maybloc. Email: [email protected].