Privacy Policy

This Privacy Policy ("Policy") describes how Atlas L&S LLC ("Company," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the WhisperType macOS application, the whisperlabs.app website, and all associated services (collectively, the "Service"). This Policy is incorporated into and forms part of the Terms of Service. By using the Service, you consent to the data practices described herein.

If you do not agree with this Policy, you must discontinue use of the Service. Capitalized terms not defined in this Policy have the meanings given to them in the Terms of Service.

1. Scope and Core Principle

WhisperType is architected around a foundational privacy principle: your voice stays on your Mac. The core speech-to-text feature operates entirely on-device — audio is captured from your microphone, processed in memory using a locally installed machine-learning model, and the resulting text is typed directly into your active application. Under normal operation, neither your audio recordings nor your transcribed text are transmitted to, stored on, or processed by our servers.

We do, however, collect a limited set of information necessary to operate the business — to issue and validate licenses, process payments, deliver software updates, and respond to support requests. This Policy describes that information in full.

2. Information We Collect

2.1 Licensing and Account Information

When you register for a free trial, purchase a license, or activate the Service, we collect:

• Your email address;
• Your License Key (a unique identifier we generate and issue to you);
• A hashed, non-reversible device identifier derived from hardware characteristics of each Mac on which you activate the Service, used solely to enforce the per-seat activation limit; and
• Purchase metadata provided by our payment processor, including transaction amount, currency, date, and country of purchase.

We do not receive or store your credit card number, card verification value, or full banking information. Payment card data is collected and processed exclusively by Stripe, Inc., which is a PCI-DSS-certified payment processor operating under its own privacy policy.

2.2 License Validation and Update Check Requests

The Service periodically contacts our servers to validate your License Key and to check for available software updates. Each such request transmits: your License Key; the hashed device identifier; the application version; the macOS version; and standard network metadata, including your IP address. We use IP addresses to detect and prevent abuse of the licensing system and to generate aggregate geographic statistics. We do not use IP addresses to build advertising profiles or to track individual users across sessions.

2.3 Diagnostic and Crash Reports

Automatic crash reporting is disabled by default. If you affirmatively elect to send a diagnostic or crash report — for example, by responding to an in-app prompt or by emailing our support team — such report may include technical information such as: a stack trace; the macOS and application versions; the feature or workflow in use at the time; and hardware identifiers relevant to reproducing the issue. Diagnostic reports never include your audio recordings or transcribed text.

2.4 Website Analytics

The whisperlabs.app marketing website may use privacy-preserving analytics tools to measure aggregate visitor counts, page popularity, and referral sources. Any analytics we employ are configured to: avoid cross-site tracking cookies; refrain from fingerprinting individual users; and report only aggregated, non-identifying statistics. We do not use third-party advertising networks on our website.

2.5 Support Communications

When you contact us for support via email or any other channel, we retain those communications and any information you provide in them in order to respond to your request and to improve the Service.

3. Information We Do Not Collect

We explicitly do not collect, transmit, or store any of the following:

• Your audio recordings, at any time or under any circumstance;
• Your transcribed text, at any time or under any circumstance;
• The names, bundle identifiers, or contents of any application or document you use in conjunction with the dictation feature;
• Clipboard contents, file contents, or any document data;
• Contacts, calendar data, location data, or browsing history; or
• Any information accessible through the Accessibility permission beyond what is necessary to type the transcribed text into the focused text field.

4. System Permissions

The Service requests the following macOS system permissions:

• Microphone. Required to capture the audio you dictate. The audio stream is held in memory exclusively for the duration of each dictation session and is discarded immediately upon completion. It is not written to disk and is not transmitted.
• Accessibility. Required to programmatically type the transcribed text into the text field that has keyboard focus. This permission does not grant the Service read access to the existing contents of any text field, document, or window.

You may revoke either permission at any time by navigating to System Settings → Privacy & Security on your Mac. Revoking a required permission will prevent the corresponding Service functionality from operating.

5. How We Use Information

We use the information we collect for the following purposes and no others:

• To issue, activate, validate, and deactivate License Keys and to enforce the per-seat activation limit;
• To process, verify, and record payments and refunds;
• To deliver software updates and security patches;
• To respond to support requests and to resolve technical issues;
• To detect, investigate, and prevent fraudulent, unauthorized, or abusive use of the licensing system;
• To generate aggregate, non-identifying statistics about geographic distribution and usage patterns; and
• To comply with applicable legal obligations, including tax, accounting, and anti-fraud requirements.

We do not sell, rent, or otherwise disclose your personal information to third parties for their marketing or advertising purposes. We do not use your information for behavioral advertising or profiling.

6. Disclosure of Information

We may disclose your information only in the following circumstances:

• Service Providers. We engage a limited number of third-party vendors who process data on our behalf, including Stripe (payment processing), a cloud hosting provider (license API and website infrastructure), and a transactional email provider (delivery of receipts, License Keys, and refund confirmations). Each such provider is contractually bound to use your information only as directed by us and to implement appropriate security safeguards.
• Legal Compliance and Protection. We may disclose information if required to do so by applicable law, regulation, court order, or governmental authority; or when we believe disclosure is necessary to: protect the rights, property, or safety of the Company, its users, or others; detect, prevent, or address fraud, security, or technical issues; or enforce our Terms of Service.
• Business Transfers.In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of the Company's assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations. Specifically:

• Licensing and purchase records are retained for the life of an active license and for up to seven (7) years thereafter to satisfy tax, accounting, and anti-fraud obligations.
• Support communications are retained for up to two (2) years from the date of the last correspondence.
• License validation logs are retained for up to ninety (90) days for abuse-detection purposes.

You may request deletion of your personal information as described in Section 9 below, subject to our legal retention obligations.

8. Security

We implement reasonable and appropriate administrative, technical, and physical safeguards designed to protect the limited personal information we hold against unauthorized access, disclosure, alteration, and destruction. These safeguards include encrypted data transmission (HTTPS/TLS), restricted access to production systems, and industry-standard key management practices. No security system is infallible; we cannot guarantee absolute security. In the event of a data breach that triggers a legal notification obligation, we will notify affected individuals as required by applicable law.

9. Your Rights and Choices

Subject to applicable law, you may have the right to: access the personal information we hold about you; correct inaccurate or incomplete information; request deletion of your information; object to or restrict certain processing; and receive your information in a portable format. To exercise any of these rights, please email [email protected] with a description of your request. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising any right afforded to you under applicable privacy law.

9.1 California Residents (CCPA / CPRA)

We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. California residents may submit a request to know, delete, or correct their personal information by contacting us at the email address above. We will verify your identity before processing requests that involve sensitive data. You may designate an authorized agent to submit a request on your behalf, provided the agent provides written proof of authorization.

9.2 EEA, UK, and Swiss Residents (GDPR / UK GDPR)

For residents of the European Economic Area, the United Kingdom, and Switzerland, the Company processes personal data on the following legal bases: (a) performance of a contract with you (Art. 6(1)(b) GDPR) — to issue and validate licenses and to process payments; (b) legitimate interests (Art. 6(1)(f) GDPR) — to detect and prevent fraud and abuse, and to improve the Service; and (c) legal obligation (Art. 6(1)(c) GDPR) — to comply with tax, accounting, and anti-fraud laws. You have the right to lodge a complaint with your local supervisory authority at any time.

10. International Data Transfers

The Company is headquartered in New York, United States. If you access the Service from a location outside the United States, please be aware that information we collect may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. Where required by applicable law, we take appropriate measures (such as Standard Contractual Clauses) to ensure that such transfers comply with applicable data-protection requirements.

11. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, individuals under 13 years of age (or the applicable minimum age in your jurisdiction). If we learn that we have inadvertently collected personal information from a child below the applicable age threshold, we will take prompt steps to delete that information. If you believe we have collected personal information from a child, please contact us at [email protected].

12. Third-Party Links and Services

The Service may contain links to third-party websites or services, including Stripe's payment interface. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party service before providing personal information to it.

13. Changes to This Policy

We reserve the right to update or modify this Policy at any time. If we make a material change, we will post the updated Policy on this page and update the "Last updated" date at the top. Where practicable and required by applicable law, we will provide advance notice of material changes via the Service or by email. Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must discontinue use of the Service.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Atlas L&S LLC
New York, New York
[email protected]