Privacy Policy
Last updated: April 27, 2026 · Version 1.0
Who is responsible
Codelabs Studio, S.L. (CIF B88708797), registered in Spain, operates the AudioMap service and is responsible for processing your personal data.
Contact for data matters: privacidad@audiomap.ai.
If you reside in the European Union, your data is processed under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
What data we collect
- Account and profile: email, name, and login method. Legal basis: contract performance.
- Audio and transcriptions: files you upload and the text we generate from them. Accessible only to you. Legal basis: explicit consent.
- Usage data: minutes consumed, features used. Used for quota management and service improvement. Never sold. Legal basis: legitimate interest.
- Consent log: a record of every permission you grant, with timestamp, IP address, and version of the legal text accepted. This log is immutable. Legal basis: legal obligation (LOPDGDD Art. 8).
How we use your data
- Transcribe your audio and generate AI Notes and chat responses.
- Manage your subscription and enforce plan quotas.
- Customer support — only from @audiomap.ai addresses.
- Legal compliance when required by a founded court order.
Your audio is never used to train AI models. Not ours, not third parties'. This is a contractual obligation, not a policy preference.
Subprocessors that touch your data
The following providers process your data exclusively as our subprocessors under signed data processing agreements:
- AssemblyAI (USA) — audio transcription. Audio is deleted from their systems once transcription is complete.
- Anthropic (USA) — AI Notes and chat generation. Anthropic does not train models with data sent via API.
- OpenAI (USA) — semantic search features. OpenAI does not train on API data without explicit opt-in.
- Cloudflare R2 — encrypted audio storage in a Western Europe bucket.
- Dedicated server in Europe — database and job processing, under our exclusive management. Your transcription texts never leave this server to generate search vectors.
- Sentry (USA) — error monitoring. Filters are active to prevent sending sensitive content.
US transfers are covered by Standard Contractual Clauses (EU Commission Decision 2021/914).
How long we keep your data
Under GDPR and LOPDGDD you have the following rights:
- Access: request a copy of all personal data we hold about you.
- Rectification: correct any inaccurate or incomplete data.
- Erasure: request deletion of your account and associated data.
- Portability: receive your data in a machine-readable format.
- Objection and restriction: limit or stop certain uses of your data.
To exercise any of these rights, write to privacidad@audiomap.ai. We respond within the legal deadline of one calendar month.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
No spy bot, no third-party recording
- Original audio: while your account is active and you have given explicit consent. If you revoke consent, we physically delete it from storage within 7 days.
- Transcriptions and AI Notes: while your account is active or until you delete them.
- Consent log: 6 years after account closure — the minimum legal requirement in Spain for contractual records. This is the only data that survives account closure.
privacyPage.s7
We use Plausible Analytics to measure aggregate site traffic. Plausible does not use cookies, does not track individuals across sites, and does not send data outside the EU. No cookie banner is required for this tool.
We also set session cookies that are strictly necessary for authentication. These do not require your consent under the ePrivacy Directive (Art. 5(3)) as they are essential for the service to function.
We do not use advertising cookies, cross-site tracking, or fingerprinting of any kind.