Database hosting
PostgreSQL hosted by our infrastructure provider, in the region where our servers run. Holds accounts, summaries, source text and settings. No audio file is stored there.
European Union
Sub-processors and partners
This page names the providers that process data on behalf of Freshrecap, with their role under the GDPR, their purpose, their country and the applicable transfer safeguards. No provider may use your data for its own purposes.
Dataset partners
No partner is authorized by default. Any new recipient must be named with its purpose, country, guarantees and activation date, then be subject to a new consent before any transfer.
1. Processors (Article 28 GDPR)
These providers process data on our instructions and under contract, for the categories strictly necessary to their service.
Private object storage (S3-compatible)
Stores generated audio files, reachable only through a time-limited signed URL. Files are erased on account deletion or when the retention period expires.
European Union
Stripe
Payment processing and subscription management. Freshrecap never stores your card number or security code.
United States, under standard contractual clauses and supplementary measures (Stripe is PCI-DSS certified)
Language model and speech synthesis providers
Generation of summaries and voice from the text you submit. The active provider is configured in administration and may change; the text sent is limited to what generation requires.
European Union and/or United States, under standard contractual clauses depending on the provider, with the training option disabled
Public video subtitle extraction provider
Retrieval, only at your explicit request, of the existing subtitles and metadata of a public video in order to produce a summary. No video is downloaded and no audio track is extracted.
European Union / United Kingdom (adequacy decision)
Transactional email provider
Sending service emails: account confirmation, password reset, usage-related notifications. No summary content is transmitted.
European Union
2. Separate recipients and international transfers
Beyond these processors, no recipient has access to your data, except under a legal obligation or following an explicit decision on your part. Where a transfer outside the European Union is necessary, it relies on a European Commission adequacy decision or on standard contractual clauses, supplemented where necessary by technical and organisational measures.
3. Selection and review
Each provider is assessed before going live (purpose, data categories, country, transfer safeguards, retention period, security). Any change to this list is published on this page before it takes effect.