Privacy Policy

1. Introduction & Scope

1.1. This Privacy Policy ("Policy") describes the privacy and data protection principles applied by Anton Sergachev ("Developer", "we", "us", or "our"), the independent creator and maintainer of the Slysh! project.

1.2. This Policy governs your interaction with our public website located at https://slyshai.pro/ (including all localized versions such as /en/, collectively the "Website") and your use of the Slysh! desktop software for Windows (the "Software").

1.3. We place paramount importance on user privacy, confidentiality, and data minimization. We have deliberately engineered Slysh! with a strict local-first architecture to ensure that your sensitive voice recordings, transcriptions, and personal notes remain under your exclusive control.

2. Desktop Application & Local Processing

2.1. Local Audio and Speech Processing: When you run the Software on your computer, all core audio processing, speech-to-text inference, speaker diarization, audio decoding, and database indexing execute entirely locally on your machine's hardware (CPU and NVIDIA GPU via CUDA acceleration).

2.2. Zero Audio/Text Telemetry: The Software does NOT transmit your audio files, microphone recordings, system loopback captures, transcription outputs, speaker names, timestamps, or project metadata to the Developer or any Developer-controlled remote servers. We do not operate inference servers, audio collectors, or remote user-profiling databases.

2.3. Offline Execution: When utilizing local neural network models (such as GigaAM, offline OpenAI Whisper variants, or NeMo Sortformer), the transcription engine operates 100% offline without requiring an active internet connection once model dependencies and weights are installed.

2.4. Local Database: All saved transcripts, audio references, speaker profiles, and metadata are stored exclusively in a local SQLite database residing on your local storage drive (e.g., within %LOCALAPPDATA%\GigaAMDesktop or your chosen project directory).

3. Third-Party Cloud Services (BYOK Model)

3.1. Optional Cloud Providers: The Software provides optional support for cloud-based transcription APIs (such as Groq, Gladia, Deepgram, OpenAI, or OpenRouter) for users who prefer cloud processing or operate hardware without dedicated GPU acceleration.

3.2. Bring Your Own Key (BYOK): Cloud transcription is enabled solely upon your explicit configuration. You supply your own private API credentials obtained directly from the respective cloud service provider.

3.3. Direct Client-to-Provider Communication: When cloud transcription is triggered, all audio payloads and API requests are transmitted directly from your computer to the chosen provider's official HTTPS endpoints via encrypted TLS channels. The Developer does NOT act as an intermediary, proxy server, or relay node, and never intercepts, logs, or stores your secret API keys or audio payloads.

3.4. Governing Provider Policies: Processing of audio by third-party cloud providers is governed exclusively by the terms of service and privacy policies of those respective entities. You are solely responsible for reviewing and accepting their compliance terms.

4. Website Analytics & Technical Telemetry

4.1. Hosting Infrastructure: The Website is hosted on GitHub Pages (operated by GitHub, Inc. / Microsoft Corporation). Accessing the Website automatically logs standard HTTP transmission telemetry, including your IP address, browser user-agent header, date and timestamp, and requested URL, as governed by GitHub's Privacy Statement.

4.2. Web Analytics (Yandex Metrica): To understand aggregate visitor trends, measure traffic volume, diagnose rendering issues, and improve website usability, the Website integrates Yandex Metrica, a web analytics service operated by Yandex.

4.3. Data Collected via Analytics: Yandex Metrica processes pseudonymous technical data, including:

• Truncated IP address and geographic location at country/city level;
• Browser type, version, language, operating system, and screen resolution;
• Referring website URL and search queries;
• Page views, interaction timestamps, navigation flow, and click events;
• Unique client identifiers stored in cookies (e.g., _ym_uid).

4.4. No User Registration or Forms: The Website does not feature user accounts, contact forms, or newsletter subscriptions. We do not solicit or store your name, postal address, telephone number, or banking details through the Website.

5. Legal Bases for Processing

5.1. In accordance with Article 6(1) of the EU General Data Protection Regulation (EU GDPR) and UK GDPR, we process personal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR): Setting non-essential analytics cookies and processing pseudonymous analytics metrics via Yandex Metrica relies strictly on your prior, freely given, affirmative consent provided via our Cookie Banner.
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing essential technical server logs (via GitHub Pages hosting) and storing your cookie preference is based on our legitimate interest in ensuring technical stability, cybersecurity, and delivery of website content.

6. International Data Transfers

6.1. Cross-Border Analytics Processing: Data collected through Yandex Metrica may be transferred, stored, and processed on servers located outside the European Economic Area (EEA) and the United Kingdom, including within the Russian Federation.

6.2. Safeguards & Explicit Consent: You are hereby informed that certain third countries may not offer an equivalent level of statutory data protection as recognized by an adequacy decision of the European Commission under Article 45 GDPR. By voluntarily clicking "Accept" on our Cookie Banner, you provide your explicit, informed consent pursuant to Article 49(1)(a) GDPR for the transfer of pseudonymous analytics telemetry to third-country servers.

6.3. Revocation: You can refuse or withdraw your consent to international analytics transfers at any time by selecting "Decline" or clearing your cookies.

7. Cookies & Tracking Technologies

7.1. The Website uses small text files known as cookies and local storage keys to operate the site and evaluate engagement.

7.2. Strictly Necessary Cookies: We store a local preference key (slysh_cookie_consent) in your browser's local storage to record your cookie consent choice. This item is strictly necessary for legal compliance and does not track your online activities across third-party websites.

7.3. Analytics Cookies: Analytical identifiers (including _ym_uid, _ym_d, _ym_is9) are deployed only after you grant consent. For full details on cookie categories, purposes, and retention terms, please consult our dedicated Cookie Policy.

8. Data Retention & Security

8.1. Retention Periods: Analytics identifiers collected via Yandex Metrica are retained for a maximum duration of up to 12 months, after which aggregated statistics are fully anonymized or automatically purged.

8.2. Security Measures: The Website enforces HTTPS encryption (TLS 1.3/1.2) across all connections to protect traffic in transit. Desktop software downloads are hosted on GitHub Releases over encrypted connections with verifiable cryptographic hashes.

9. Your Rights (GDPR & UK GDPR)

9.1. If you reside in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you possess statutory rights under the GDPR / UK GDPR:

• Right of Access (Art. 15 GDPR): You may request confirmation of whether we process personal data concerning you and obtain access to such data.
• Right to Rectification (Art. 16 GDPR): You have the right to request rectification of inaccurate personal data.
• Right to Erasure / Deletion (Art. 17 GDPR): You may request the erasure of your personal data, subject to lawful retention requirements.
• Right to Restrict Processing (Art. 18 GDPR): You may request restriction of processing under specified statutory grounds.
• Right to Data Portability (Art. 20 GDPR): You may receive your data in a structured, commonly used, machine-readable format.
• Right to Object & Withdraw Consent (Art. 21 & Art. 7(3) GDPR): You have the absolute right to withdraw previously granted cookie consent at any time without retroactive detriment.

9.2. To exercise your rights, please submit an inquiry to kotdesignstudio@gmail.com. We respond to verified requests within thirty (30) calendar days.

9.3. You also have the right to lodge a complaint with your local Data Protection Authority (DPA) or the Information Commissioner's Office (ICO) in the UK.

10. Notice to California Residents (CCPA/CPRA)

10.1. This section applies to residents of California pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA).

10.2. No Sale or Sharing of Personal Information: We do NOT sell your personal information, nor do we share your personal information for cross-context behavioral advertising.

10.3. No Sensitive Personal Information: We do not collect, process, or disclose sensitive personal information (such as financial records, precise geolocation, biometrics, or racial identity).

10.4. California Privacy Rights: California consumers have the right to know what personal information has been collected, the right to request deletion, the right to correct inaccurate information, and the right to be free from discrimination for exercising these rights.

10.5. Do Not Track (DNT) / Global Privacy Control (GPC): Non-essential tracking scripts are deactivated by default on the Website until affirmative consent is given. You may also block cookies directly via browser settings.

11. Children's Privacy

11.1. Neither the Website nor the Software is aimed at or knowingly marketed to children under the age of 16 (or under 13 in the United States under COPPA). We do not knowingly collect personal data from minors.

11.2. If a parent or guardian discovers that a minor has provided data without consent, please contact us at kotdesignstudio@gmail.com, and we will promptly delete such information.

12. Changes to this Policy

12.1. We reserve the right to amend this Privacy Policy from time to time to reflect technical updates, architectural modifications, or legal requirements.

12.2. Changes take effect immediately upon posting to the Website with an updated "Effective Date". Your continued use of the Website following modifications constitutes acceptance of the revised terms.

13. Data Controller & Contact Information