Privacy policy

Last updated: April 2026 · GDPR compliant (EU Regulation 2016/679)

1. Data controller

ExNihiloLab
Email : [email protected]
Contact données personnelles : [email protected]

2. Data collected and processing

Core principle — The client retains full ownership of all transcriptions. OnAirText claims no rights over produced content data and does not use it for any secondary purpose.

Processing	Data	Legal basis	Retention
Contact form	Name, professional email, organisation, org type, streams, formats, technical requirements	Consent	3 years after last contact
Client transcriptions	Transcribed audio content, timestamps, stream metadata	Contract performance	Per plan (30 days to 5+ years)
Account data	Email, name, organisation, access logs	Contract performance	Contract duration + 1 year
Billing	Payment data (via Stripe), billing information	Legal obligation	10 years (accounting requirement)
Marketing emails	Email, preferences	Explicit opt-in consent	Until unsubscription

3. Sub-processors and recipients

Sub-processor	Role	Location
Formspree	Receiving form submissions	United States (EU SCCs)
hCaptcha (Intuition Machines)	Anti-bot protection for the form	United States (EU SCCs)
Stripe	Payment processing	United States (EU SCCs)
Hostinger	Website hosting	European Union
AWS / GCP / Azure	Transcription infrastructure (per client region)	EU or USA (EU SCCs)

Your data is never sold, rented or transferred to third parties for commercial purposes.

4. International transfers

Some of our sub-processors (Formspree, hCaptcha, Stripe) are based in the United States. Transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Article 46 of the GDPR.

5. Your rights

Right of access

Obtain a copy of the data we hold about you.

Right to rectification

Correct inaccurate or incomplete data.

Right to erasure

Request deletion of your personal data.

Right to portability

Receive your data in a structured, machine-readable format.

Right to object

Object to processing based on legitimate interest.

Right to restriction

Request temporary suspension of a processing activity.

To exercise your rights: [email protected]. We respond within 30 days. You may also lodge a complaint with your national data protection authority.

6. Cookies

This site uses no tracking or advertising cookies. hCaptcha may set strictly necessary technical cookies for its anti-bot functionality, which are exempt from consent under the ePrivacy Directive.

7. Security

Encrypted HTTPS connection (TLS 1.2+) across the entire site and API
Client transcriptions isolated by account — no cross-client access
Dedicated instances available on Scale plan for complete isolation
hCaptcha anti-bot protection + honeypot on the contact form
Data access restricted to authorised ExNihiloLab team members

8. Changes

This policy may be updated. The update date is shown at the top of this page. For material changes, clients will be notified by email.

9. Contact

For any question about the protection of your data:
[email protected]
ExNihiloLab — exnihilolab.com