Privacy Policy

Stellato ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our marketing website (stellato.dev) and use the Stellato application (app.stellato.dev).

By using our website or providing us with your personal information, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or application.

1. Information We Collect

Information You Provide

• Account & billing: Email address and payment method (processed by Stripe — we never store card numbers)
• Audio files: Files you upload for processing. These are processed and deleted — we do not retain your audio after the job completes.
• Support communications: Any information you share when contacting us

Information Collected Automatically

• Usage data: Pages visited, features used, processing duration (for billing purposes)
• Technical data: Browser type, device type, IP address
• Cookies: We use a single local-storage entry to remember your dark/light mode preference. No tracking cookies.

2. How We Use Your Information

• Processing your audio: To perform transcription, translation, and speech synthesis
• Billing & subscriptions: To manage your plan, process payments, and enforce usage limits
• Transactional emails: Usage milestone notifications (sent via Resend)
• Website improvement: To understand how our site and app are used
• Legal compliance: To comply with applicable laws, regulations, and legal processes

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the following circumstances:

• Service providers: Stripe (payments), Groq (STT), OpenAI (translation), Inworld AI (TTS), Resend (transactional email) — each processes data on our behalf under their own privacy and security terms
• Legal requirements: If required by law, court order, or government regulation
• Business transfers: In the event of a merger, acquisition, or asset sale

4. Third-Party Services

• Stripe: Handles all payment processing. Card numbers are never transmitted to or stored on our servers. Stripe Privacy Policy →
• Groq: Speech-to-text processing. Audio is sent to Groq's API for transcription.
• OpenAI: Text translation. Transcribed text may be sent to OpenAI for translation.
• Inworld AI: Text-to-speech synthesis.
• Resend: Transactional email delivery (usage milestone notifications).
• Google Fonts: For typography (no personal information collected).

5. Data Retention

Audio files: Deleted immediately after processing completes. We do not store your audio content.

Account and billing data: Retained while your account is active and for a reasonable period afterward to comply with legal and financial obligations. You may request deletion at any time by contacting us.

6. Data Security

• HTTPS encryption for all data transmission
• Card data never touches our servers (handled by Stripe)
• API keys and secrets stored as environment variables, never in code
• Limited access to personal information on a need-to-know basis

7. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Delete: Request deletion of your personal information
• Opt-out: We do not sell personal information
• Portability: Receive your data in a portable format

To exercise any of these rights, contact us at support@stellato.dev .

8. Children's Privacy

Stellato is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately.

9. Changes to This Policy

We may update this policy periodically. We will post the updated version on this page with a new "Last Updated" date. Your continued use of Stellato after any changes constitutes acceptance of the updated policy.

10. Contact Us