Privacy Policy

Your text and audio are not stored

Text you send is processed in memory, and the audio is returned to you. We keep neither. Audio you generate in the playground stays in your browser until you leave the page.

What we keep

• Account: your e-mail address and your password, which our authentication provider holds hashed.
• API keys: a SHA-256 hash of each key, its first 16 characters and the name you gave it. We never hold the key itself; it is shown once when created.
• Usage records: time, source, model, voice, character count, audio length, cost, status and a request id. No text and no audio.
• Credit: your top-ups, grants, refunds and chargebacks, with the payment reference Stripe gives us. We keep these accounting records after an account is closed.
• Signup credit: a one-way hash of your normalised e-mail address (lowercase, with any +tag removed and, for Gmail, dots removed), so that each address gets the credit once. It is linked to no account and stays after the account is closed.
• Technical logs: IP address, browser, request path and status code, kept for up to 90 days.

Payments

Stripe handles payments. We never see your card number. Stripe sends us the amount and a reference for each payment.

Security check

The sign-up and log-in pages use Cloudflare Turnstile to check that a person, not a bot, is using them. Your browser loads it from Cloudflare, which processes technical data such as your IP address and browser details to run the check. We receive only a pass or fail result and keep nothing from it. Your text and audio do not pass through it.

Cookies

Session cookies keep you signed in. Your theme and code-language choices are kept in your browser. There are no advertising or third-party analytics cookies.

Where data is processed

Spero runs on Google Cloud in the United States (us-central1). Account, key, usage and credit data sit with our database and authentication provider in the United States (us-east-1).

Service providers

• Google Cloud: hosting and model servers.
• Supabase: database and authentication.
• Resend: account e-mails.
• Stripe: payments.
• Cloudflare: the Turnstile security check on the sign-up and log-in pages.

Retention

We keep account, key and usage data while your account exists and delete it within 30 days after the account is closed. We keep the credit records for tax and accounting, and the signup-credit hash so that the credit is not granted again.

Your rights

Depending on where you live, laws such as the GDPR and KVKK give you the right to access, correct, delete and object to the processing of your data. To make a request, or to close your account, write to sezgin@patientdesk.ai.

Security

All traffic is encrypted with TLS. Keys are stored hashed. Database rules let an account read only its own rows, and only our servers can write. Access to the servers is limited to authorised staff.

Changes

If we update this policy, we publish it here with its date.