Back to home

Privacy Policy

Last updated: February 11, 2026

1. Data Controller

Dicto.be is published by an independent developer based in Belgium.
Contact: contact@dicto.be

2. Data We Collect

When you create your account:

  • Email address (for authentication)
  • Display name (optional)
  • Password (stored in hashed form using bcrypt, never in plain text)

When you use the service:

  • Number of words transcribed per month (usage counter)
  • Number of transcriptions and enhancements performed
  • Language used and processing duration (anonymized logs)

3. Data We Do NOT Collect

We do NOT store your audio recordings. Audio is sent for transcription, then immediately deleted.

We do NOT store the transcribed or translated text.

We do NOT collect location data, IP addresses, or tracking cookies.

4. Sub-processors

Sub-processor Purpose Location
Groq Inc. Voice transcription (Whisper) and AI correction (LLM) United States
OVH SAS Backend server hosting France (Gravelines)

Groq processes audio in real time and does not store data after processing (see Groq's privacy policy).

5. Legal Basis for Processing

  • Performance of a contract (Article 6(1)(b) GDPR): the data is necessary to provide the voice dictation service.
  • Legitimate interest (Article 6(1)(f) GDPR): anonymized usage logs allow us to monitor quotas and prevent abuse.

6. Data Retention

Account data

Retained as long as the account is active. Deleted within 30 days following account deletion.

Usage logs

Retained for 12 months for billing and quota tracking purposes.

Audio

Not retained. Processed in real time then immediately deleted.

7. Your Rights (GDPR)

In accordance with the General Data Protection Regulation, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request the deletion of your account and data
  • Right to data portability: receive your data in a structured format
  • Right to object: object to the processing of your data

To exercise these rights, contact us at contact@dicto.be. We will respond within 30 days.

You also have the right to file a complaint with the Data Protection Authority (DPA): www.autoriteprotectiondonnees.be

8. Security

Passwords

Hashed with bcrypt (10 rounds)

Communications

Encrypted via HTTPS/TLS

Authentication

JWT tokens with 7-day expiration

Server

Firewall (UFW), Fail2ban, CrowdSec, SSH-only access

9. Cookies

Dicto.be only uses cookies essential to the operation of the service:

  • Authentication token (localStorage, not a cookie)
  • Language preferences (localStorage)

We do not use any tracking, analytics, or advertising cookies.

10. Changes

This policy may be updated. The date of the last modification is indicated at the top of this page. In the event of a substantial change, we will notify you by email.

11. Contact

For any questions regarding this privacy policy:
Email: contact@dicto.be