Privacy Policy

The controller under the GDPR is Invariance, an Italian sole trader (ditta individuale) owned by Philipp Gurndin, based in Bolzano, Italy.

Address: Via Max Valier 20 int. 012, 39100 Bolzano (BZ), Italy

Contact: support@invariance.co

This is the most important point in this document. Transcripts and dictation history are stored locally on your own computer, not on our servers. We cannot read them.

When you dictate, the audio is sent to a speech recognition provider for the moment it takes to transcribe it, and the resulting text may be sent to a language model for clean-up. We do not retain that audio or text.

Account data — your email address, your name if you give one, and account identifiers. Used to create and secure your account.

Billing data — handled by our payment provider. We never see or store your card details.

Usage metering — a weekly word count per user and your subscription status, stored in a PostgreSQL database on our own server in the EU. That, plus an account identifier, is the whole of what we hold server-side. It is deliberately minimal.

Support correspondence — if you email us, we keep the message so we can answer it.

Website analytics — visits to this website are counted anonymously, and recorded in full only if you allow analytics. Both are stored on our own server in the EU and described in section 10.

Performance of a contract (Art. 6(1)(b)) — running your account, delivering the app, transcribing your dictation, and billing you.

Legal obligation (Art. 6(1)(c)) — retaining invoices and billing records as Italian tax law requires.

Legitimate interests (Art. 6(1)(f)) — metering usage against plan limits, preventing abuse of the service, and counting website visits anonymously.

Consent (Art. 6(1)(a)) — for website analytics and for loading Paddle, each asked separately in the cookie banner. You can withdraw consent at any time.

Invariance — authentication through login.typeout.co. Receives your email address, name and account identifiers.

Paddle.com Market Ltd — merchant of record. Handles payment and billing data. We never see or store card details.

Groq, Deepgram, OpenAI and xAI — speech recognition and text post-processing. They receive dictated audio and/or the resulting text at the moment of use.

We do not sell your data and we do not share it with anyone not listed here.

Some of these providers process data outside the European Economic Area, chiefly in the United States. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses together with the provider’s own safeguards. Our own database is hosted in the EU.

Account data — for as long as your account exists, then deleted.

Billing records — ten years, as required by Italian law (art. 2220 Codice Civile).

Word counts — kept per week as an aggregate; no dictation content is attached.

Website analytics recorded with your consent — 25 months, then deleted, or at once when you turn analytics off. Anonymous visit counts are kept; they name nobody.

Transcripts — we hold none, so there is nothing for us to delete. Removing them from your device is up to you.

You have the right to access your data, to have it corrected, to have it erased, to restrict how we process it, to receive it in a portable format, and to object to processing based on our legitimate interests.

To exercise any of these, email support@invariance.co. We answer within one month.

If you think we have handled your data wrongly, you can lodge a complaint with the Italian data protection authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy.

Necessary — api.typeout.co sets a host-only session cookie to keep you signed in, and the site itself stores your light/dark theme preference and your cookie choice (inv-consent; a refusal is asked again after six months). These load on every page.

Anonymous visit counting, for everyone — each page you open is counted without identifying you. The last part of your IP address is removed before anything else happens; the shortened address, your browser’s identifier and a random value that is deleted at midnight (UTC) form a key that counts one visit per day without knowing who you are or recognising you the next day. We keep the page, the referring site, campaign parameters, your approximate location (country, region, city), device type, browser, operating system and time on the page. Nothing else is stored on your device. This rests on our legitimate interest in knowing how the site is used, within section 7.2 of the Italian data protection authority’s 2021 cookie guidelines.

Analytics, and only if you allow it — we record your visits in full: a random visitor id (inv-v, in local storage) and session id (inv-s, for the open tab), your full IP address and the location derived from it, browser and device details (user agent, screen and window size, languages, time zone, colour scheme, connection), where you came from (landing page, referring page, campaign parameters and ad click ids), and what you do here: pages and their titles, time spent, scroll depth, clicks and their position, form steps (field names only, never what you type), loading speed, and actions such as choosing a plan or downloading the app. If you are signed in, these visits are linked to your account. We use this to see which pages and channels work. It is stored on our own server in the EU, passed to no one and deleted after 25 months; turning analytics off deletes it at once and removes both ids.

Paddle, and only if you accept — Paddle connects from your browser to show localized pricing and to process payment. It is not loaded until you allow payments in the cookie banner or accept Paddle at checkout. Decline, or simply do not answer, and Paddle is never contacted: the pricing page shows our EUR list prices, taken from our own server, instead of Paddle’s localized ones. Paying does require accepting, because Paddle is the payment processor and there is no checkout without it — the checkout page says so rather than failing silently.

Paddle Retain (ProfitWell) — Paddle bundles a feature called Retain (built on ProfitWell), aimed at reducing subscription cancellations, which runs automatically whenever Paddle loads. We do not configure or query it ourselves; it comes with Paddle. It is covered by the same choice: decline and it never loads. Beyond that, there is no advertising and no cross-site tracking either way.

The cookie banner asks about analytics and Paddle separately, and Cookie settings in the footer of every page reopens it with your current choices, so you can change your mind at any time.

If we change this policy we will update the date at the top. Significant changes will be announced to account holders by email.

Questions about privacy go to support@invariance.co. A person answers.