Privacy Policy
Last updated : September 25, 2026
Ondula is committed to protecting your privacy. This policy explains what data we collect, how we use it, and what your rights are.
🔒 In local mode, your voice never leaves your PC. In cloud mode, audio is sent to our transcription provider, which operates inference infrastructure in Europe (Helsinki), only for the duration of processing, then is not retained by Ondula; your account data stays in the European Union (Frankfurt).
1. Data Controller
2. Data Collected
Audio Data
- ✓Transmitted for transcription only
- ✓Not retained by Ondula after processing
- ✓In cloud mode, sent to our transcription provider, which operates inference infrastructure in Europe (Helsinki), for the duration of processing
Account Data (if registered)
- •Email address
- •Anonymized hardware ID
- •Subscription history
Technical Data
- •Application version
- •Usage statistics linked to the hardware ID (never the text or the audio)
3. Purpose of Processing
| Data | Purpose | Legal Basis |
|---|---|---|
| Audio | Voice transcription | Contract execution |
| Account management | Contract execution | |
| Hardware ID | Fraud prevention, licensing | Legitimate interest |
| Usage statistics | Counting active users (days of use, number of dictations, country, version) | Legitimate interest |
4. Subprocessors
We use the following services to operate Ondula:
Authentication and database (Frankfurt, European Union)
🇪🇺 EUCloud-mode voice transcription (audio sent only for the time needed to transcribe it)
🇪🇺 Europe (Helsinki)Payments and billing
GlobalWebsite hosting and CDN
GlobalAnonymous website traffic measurement, with no cookies or personal identifiers
Global5. Data transfers outside the EU
Local mode: no transfer. Cloud mode: transfer for transcription, processed in Europe (Helsinki).
In local mode, no audio data leaves your computer. In cloud mode, your audio is sent to our transcription provider, which operates inference infrastructure in Europe (Helsinki), only for the duration of transcription; it is then not retained by Ondula. As this provider is a US company, temporary retention of logs outside the European Union cannot be entirely ruled out. Your account data (email, identifier) is hosted in the European Union (Frankfurt).
6. Data Retention
| Data | Duration |
|---|---|
| Audio data | Not retained by Ondula after transcription |
| Account data | Until account deletion |
| Payment data | According to legal obligations (10 years max) |
| Usage statistics | 3 months, then deleted automatically |
7. Your Rights
Under GDPR, you have the following rights:
Right of access
Obtain a copy of your data
Right to rectification
Correct your information
Right to erasure
Delete your account and data
Right to portability
Export your data
Right to object
Object to processing
Right to complain
File a complaint with the authority
To exercise your rights, contact us at [email protected]
8. Cookies
The ondula.ai website uses only essential cookies:
- •Session cookie (authentication)
- •Theme preference (light/dark)
We do not use tracking or advertising cookies.
We measure website traffic anonymously, to know which pages are viewed and how fast they load: no cookies, no personal identifiers and no cross-site tracking.
9. Security
We implement the following measures to protect your data:
- ✓Communications via HTTPS/TLS
- ✓Secure authentication
- ✓Audio data not retained by Ondula
- ✓Restricted data access
10. Changes to This Policy
We may update this privacy policy. In case of significant changes, we will notify you by email or through the application. The last update date is shown at the top of this page.
11. Deletion of your data
You can delete your account and all your personal data at any time from your account settings. If you prefer to go through us, here is the procedure:
- Email us at [email protected] from your account's email address.
- State your request to delete your account and data.
- We process your request within 48 hours and confirm the deletion to you.
This email procedure remains available if you prefer not to use deletion from your account settings.
Contact
For any questions about this policy or your data:
[email protected]