Privacy Policy

Last updated: October 2026

      Your meeting recordings belong to you. We do not sell data, do not use it for advertising and do not pass it on to third parties.
    

1. Controller

The controller responsible for processing your data is:

Datafuse SRLs
Rosenheim 21, 39040 Laurein (BZ), Italy
VAT no.: IT03352290211
Email: info@ratsch.bz

2. What data we collect

2.1 Data you provide to us

Account data: email address, name (optional), password
Payment information: credit card or SEPA details (processed by Stripe; we do not store complete payment details)
Meeting content: audio recordings you upload for transcription
Support requests: messages you send to our support

2.2 Automatically collected data

Usage data: extent of your usage (e.g. recording minutes, number of transcriptions) to manage your quota
Device information: browser type and operating system (only in error logs, for troubleshooting)
Log data: truncated IP address, access times, pages accessed, error logs

2.3 Data received from third parties

Microsoft 365 (only if you sign in with Microsoft and use the integration): name and email from your profile; calendar events (title, participants, times) and reminders you create; people and contacts for selecting participants; OneNote notebooks and sections for saving minutes; To Do and Planner lists for creating tasks; sending emails on your behalf when you share minutes. Access only takes place with your explicit consent and can be revoked at any time.

3. How we use your data

We process your data for the following purposes:

3.1 Providing the service

Transcription and AI-assisted processing of your recordings
Creating summaries, minutes and to-do lists
Speaker recognition and attribution
Managing your account and subscription

3.2 Improvement and support

Technical support and troubleshooting
Analysing usage volumes and errors to improve the app
Security monitoring and fraud prevention

3.3 Communication

Important service notifications (e.g. changes, security warnings)
Replies to your requests

      What we do NOT do: We do not use your data for advertising, we do not sell it and we do not train AI models with your personal content.
    

4. Legal bases (GDPR Art. 6)

Performance of contract (Art. 6(1)(b)): providing the service, account management, billing
Legitimate interest (Art. 6(1)(f)): security, fraud prevention, product improvement
Consent (Art. 6(1)(a)): calendar integration, optional features
Legal obligation (Art. 6(1)(c)): retention of billing data

5. Storage and security

5.1 Storage location

All data is stored on servers within the European Union (Hetzner, Germany). AI processing takes place via Microsoft Azure AI Foundry in the Sweden Central region (EU).

5.2 Security measures

Encrypted transmission (TLS 1.3 / HTTPS)
Encrypted storage of sensitive data
Access control and authentication
Regular security updates
No storage of complete payment details (PCI-DSS compliant via Stripe)

5.3 Retention periods

Audio recordings: automatically deleted 30 days after recording, or earlier if you delete them yourself. The transcript and minutes are kept.
Transcripts and minutes: as long as your account is active, plus 30 days after deletion; transcripts you delete stay in the archive for 30 days and are then permanently deleted
Billing data: 10 years (statutory retention obligation in Italy)
Log data: server logs: 7 days; error logs: 90 days
Backups: Our hosting provider Hetzner (Germany) creates a daily backup of the server. Each backup is automatically overwritten after 7 days. Deleted data is therefore also removed from the backups no later than 7 days after deletion.

6. Account deletion and data retention

You can delete your account at any time in the settings. After deletion:

your access is deactivated immediately
your data (transcripts, minutes) is kept for another 30 days
you can request restoration within these 30 days
after 30 days all your data is irrevocably deleted (from backups no later than 7 days after that)
billing data is kept for 10 years due to legal obligations

7. Disclosure to third parties

We only pass on your data in the following cases:

7.1 Processors

Microsoft Azure AI Foundry (Sweden Central, EU): AI transcription, speech processing and speaker recognition. Microsoft does not store the audio files after transcription and does not use the data for training.
Stripe Payments Europe Ltd. (Ireland): payment processing and subscription management, PCI-DSS certified. Transmitted data: email address, billing address, company name, VAT/tax number, Codice Fiscale, recipient code (SDI) or PEC; you enter payment details directly with Stripe. Stripe may transfer data to Stripe, Inc. (USA) on the basis of the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.
Hetzner Online GmbH (Germany): server hosting, data storage and storage for attachments. ISO 27001 certified.
Fatture in Cloud (Italy): invoicing. Data remains in the EU.
Contabilità in Cloud (Italy): accounting. Data remains in the EU.
Hostinger (EU): domains (ratsch.app, ratsch.bz) and our mailboxes (e.g. info@ratsch.bz, support@ratsch.bz). If you email us, your message is stored there.
Microsoft Teams: only if you arrange a call with us via Teams (e.g. for support or an introduction to the app).

7.2 Other disclosures

Legal obligation: if we are legally required to do so (e.g. court order)
Enforcement of rights: to protect our rights in cases of fraud or abuse

We do not sell data. We do not pass on data to advertising partners or data brokers.

8. Your rights (GDPR)

You have the following rights at any time:

Access (Art. 15): find out what data we hold about you
Rectification (Art. 16): have incorrect data corrected
Erasure (Art. 17): request the deletion of your data
Restriction (Art. 18): restrict processing
Data portability (Art. 20): receive your data in a machine-readable format (JSON)
Objection (Art. 21): object to processing based on legitimate interests
Withdrawal of consent (Art. 7): withdraw consent you have given at any time

For all requests: info@ratsch.bz. We reply within 30 days.

9. Cookies and tracking

We do not use cookies. We store technically necessary data in your browser's local storage (localStorage):

Login token: keeps you logged in (deleted when you log out)
Settings: language, time zone, output format and display settings (kept until you delete them in your browser)

No tracking: We do not use analytics tools such as Google Analytics, advertising trackers or social media plugins.

10. International data transfers

Your data is generally processed within the EU/EEA. Exception: for payment processing, Stripe may transfer data to Stripe, Inc. (USA). This transfer is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Should further transfers to third countries be added, we will inform you in advance.

11. Data breaches

In the unlikely event of a data breach that poses a high risk to your rights, we will inform you without delay and notify the competent supervisory authority.

12. Changes to this policy

We may update this Privacy Policy. In the case of material changes, we will inform you by email or by a notice in the app. You can always find the current version on this page.

13. Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

14. Contact

For questions about data protection or general enquiries:

Datafuse SRLs
Rosenheim 21, 39040 Laurein (BZ), Italy
VAT no.: IT03352290211
Email: info@ratsch.bz