Privacy Policy
Last updated · 2026-06-29
CORREZIANLABS (“we”) operates Brassens, a voice recording and transcription service. This policy explains the personal data we process, why, on what legal basis, and the rights you have under the GDPR.
01 // Data Controller
The data controller is CORREZIANLABS (SAS (société par actions simplifiée)). For any question about your data, contact us through our contact page.
02 // Data, Purpose and Legal Basis
| Provider | Purpose | Legal basis |
|---|---|---|
| Account (name, email) | Create and manage your account, authenticate you | Performance of the contract |
| Audio recordings | Produce your transcripts | Performance of the contract |
| Transcripts and metadata | Deliver, store and return your transcripts | Performance of the contract |
| Billing data | Manage your subscription and payments | Contract / legal obligation |
| Technical and log data | Operate, secure and improve the service | Legitimate interest |
| Usage data (analytics) | Understand usage and improve the product | Legitimate interest |
03 // Retention
We keep your data for as long as your account is active. When you delete your account, a 30-day grace period applies (account disabled and recoverable on request), after which the account and its associated recordings and transcripts are permanently deleted from our active systems. An anonymous identifier (a one-way hash of your email, with no other data) may be retained to prevent abuse of the free trial. Billing data is retained for the period required by accounting and tax obligations.
04 // Sub-processors
We rely on a limited set of sub-processors, each bound by contractual data-protection obligations. Some are located in the United States; transfers outside the EU are covered by appropriate safeguards (Standard Contractual Clauses).
| Provider | Location | Purpose |
|---|---|---|
| Vercel | USA | Site hosting |
| Cloudflare | USA | DNS and bot protection |
| Resend | USA | Transactional email delivery |
| Stripe | USA / EU | Payment processing |
| Supabase | EU | Authentication and data storage |
| WorkOS | USA | Authentication |
| PostHog | USA | Product analytics |
05 // Your Rights
Under the GDPR you have the right to access, rectify, erase, port, restrict, and object to the processing of your personal data. You can exercise these rights through our contact page. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).
06 // Security
We use reasonable technical and organizational measures to protect your data in transit and at rest. No system is fully secure, so we cannot guarantee absolute security.
07 // Recordings and Transcripts
Your audio recordings are sent to an AI transcription provider solely to produce a transcript. We do not sell your recordings or transcripts, and we do not use them to train our own models without your explicit consent. You can delete individual recordings and transcripts at any time from within the service.
08 // Mobile App and Device Permissions
On the Android app, Brassens requests only the permissions needed for voice dictation. Each permission is optional, granted explicitly by you, and revocable at any time in your Android settings.
Microphone and foreground service: the microphone is active only while you are dictating. In Cloud mode, audio is sent over an encrypted connection to our backend and then to the transcription provider, and the recording is deleted after transcription. A foreground service (with a persistent notification) keeps recording alive while you dictate into another app.
Accessibility service: Brassens uses the Android accessibility API solely to insert the text you have dictated into the field you have focused, on your explicit action. The service reads the targeted editable field only at the moment of insertion; it does not read, store, or transmit your screen contents, other apps, or anything you did not dictate, and it blocks password and sensitive fields. You enable it manually after an in-app disclosure and can disable it at any time.
On-device mode: when you use on-device transcription, audio and transcripts never leave your phone. Brassens does not collect your contacts, location, or photos.
09 // Changes
We may update this policy. Material changes will be communicated through the service and the “last updated” date above will be revised.
For any question, contact us through our contact page.