Privacy notice

1. Scope and summary

This Privacy Notice explains how Livne Technology Consulting LLC handles personal information in connection with Whisper-Line, including the Windows application, account, hosted AI service and whisper-line.com.

The core design is data-minimizing:

• speech-to-text is performed on the user's computer;
• raw audio is not intended to be uploaded to our hosted AI service and is not intentionally retained by Whisper-Line after transcription;
• optional screen OCR is off by default;
• raw screenshots are not intended to be sent to the hosted AI service;
• the assembled prompt is sent to our hosted AI service, and text included in that prompt can leave your computer, including transcript text, OCR-derived text, code or notes that appear in it;
• we do not use website analytics today and do not sell personal information for advertising.

2. Information that stays on your computer

Depending on your settings and version, Whisper-Line may store or process locally:

• application settings and prompt blocks;
• local logs;
• downloaded speech-to-text models;
• selected local code/file context;
• local transcript/session state;
• local legal-acceptance journal copies;
• encrypted sign-in tokens or session credentials;
• temporary screen/OCR state.

Local information is under your control except where the app intentionally sends selected text as part of a hosted prompt or syncs limited account/legal evidence as described below.

Audio

Raw microphone/system audio is transcribed locally. Whisper-Line is not designed to upload raw session audio to the hosted AI service or to retain an audio recording after the text is extracted.

Screen OCR

Screen OCR is optional and off by default. Raw screenshots are not designed to be uploaded to the hosted AI service. OCR-derived text may exist transiently in memory. If OCR-derived text is included in the assembled prompt shown to you, that text may be sent when you use a hosted model.

3. Information we collect or receive

3.1 Account and authentication data

We may receive and store:

• email address;
• account/user identifier;
• authentication records and login/session metadata;
• OAuth identity information necessary to complete sign-in if you choose an external sign-in provider;
• account status and security information.

3.2 Trial and anti-abuse data

To meter a free allowance and prevent repeated trial abuse, we may store a device-derived or installation-derived identifier or value. We use it for entitlement, fraud/abuse prevention and security, not for advertising.

3.3 Acceptance and legal-evidence records

We record limited evidence of what you accepted and when, such as:

• account/user identity;
• Terms and Privacy versions and hashes;
• timestamps;
• app version;
• age/acceptance representation;
• session-attestation version and origin (local or remote_display where applicable);
• subscription-renewal consent evidence;
• arbitration opt-out status where applicable.

These records do not need to contain your interview/practice audio, transcript, code, OCR text, screenshots or hosted prompt content.

3.4 Hosted usage and metering data

For hosted AI use, we may record limited operational metadata such as:

• timestamp;
• account/entitlement identifier;
• model or routing identifier;
• request and response size/token/count information;
• latency, success/failure and error category;
• quota/rate-limit information;
• abuse/security signals.

By default, we do not store the content of hosted prompts or model responses as ordinary metering records. If we ever offer an optional diagnostic mode that stores content, it must be clearly disclosed and separately enabled before collection.

3.5 Payment and subscription data

A third-party payment processor or Merchant of Record handles payment-card information. We may receive transaction and entitlement information such as:

• plan/product;
• transaction/subscription identifier;
• payment status;
• billing period/status;
• currency and amount;
• country or tax-related transaction fields where needed;
• cancellation/refund status.

We do not need to receive or store your full payment-card number.

3.6 Support communications

If you contact us, we receive the information you send, your email address, and the support/legal correspondence necessary to respond and keep a record of the matter.

3.7 Website/network information

Our hosting and security infrastructure may process ordinary network information such as IP address, request timestamp, browser/user-agent, requested URL, security events and server logs.

4. What is sent when you use a hosted AI model

The assembled prompt and necessary generation parameters are transmitted through our API infrastructure to one or more third-party AI model providers so they can generate a response.

The prompt may contain text you chose or configured the app to include, such as:

• the current question/transcript text;
• OCR-derived text;
• code/file excerpts;
• resume, job-description or other prompt blocks you configured;
• app/system instructions needed to obtain the requested response.

Whisper-Line is designed to show you the effective assembled prompt/context before the hosted request is sent.

We do not publicly promise or bind the Service to a particular AI provider or model. Providers can change. We maintain an internal record of actual recipients and their applicable commercial/privacy terms.

Third-party AI providers may transiently process or retain request/response data under their own commercial security, abuse-prevention, legal and retention terms. We do not promise zero third-party retention unless an applicable provider contract actually guarantees it.

5. Purposes and legal bases

We process information for the following purposes. Where EU/EEA or UK data-protection law applies, the corresponding legal basis is generally:

Purpose	Typical information	Legal basis where applicable
Create/authenticate account	email, auth IDs, login metadata	performance of contract / steps requested before contract
Provide hosted AI and entitlements	account ID, prompt text for hosted request, usage metadata	performance of contract
Meter free/paid usage	usage counts, entitlement, device-derived anti-abuse value	contract and legitimate interests
Prevent fraud, abuse and security incidents	account/device/network/security data	legitimate interests; legal obligation where applicable
Process payments/subscriptions	transaction and plan information	contract; legal obligations
Keep evidence of assent and subscription consent	acceptance records	legitimate interests, contract evidence, legal obligation where applicable
Respond to support/legal requests	correspondence and account information	contract, legitimate interests, legal obligation
Comply with law and defend claims	relevant limited records	legal obligation and legitimate interests in legal claims

We do not rely on a single blanket “consent to the Privacy Notice” as the legal basis for all processing. Optional processing that legally requires consent will receive a separate consent when needed.

6. Recipients and service-provider categories

We may disclose or allow processing of information by the following categories only as needed to operate the Service:

• authentication/account infrastructure providers — sign-in and account records;
• cloud hosting, CDN, API and security providers — network traffic, hosted API processing, security/logging and infrastructure;
• third-party AI model providers — hosted prompt text and generation parameters required to answer it;
• payment processors / Merchants of Record — purchase, billing, tax, fraud, dispute, refund and subscription data;
• OAuth/sign-in providers — information necessary if you choose their sign-in method;
• video/content hosting providers — network/device information only when you choose to load third-party content such as a hosted video;
• professional advisers and authorities — only where reasonably necessary for legal compliance, security, claims, accounting or enforcement;
• transaction counterparties — if the business or product is reorganized, financed, sold or transferred, subject to applicable law.

We may change vendors within these categories without changing this Notice solely because a vendor name changes, provided the type and purpose of processing remain materially the same.

Where law gives you a right to know the actual recipient of your personal information, you may request that information and we will provide it when legally required and reasonably identifiable.

7. No sale, behavioral advertising or website analytics

We do not sell personal information for money.

We do not share personal information for cross-context behavioral advertising and do not use Whisper-Line prompt/session content to build advertising profiles.

At the effective date of this Notice, whisper-line.com does not run behavioral analytics. If we later add analytics, advertising or materially different tracking, we will update this Notice and add any consent/control required before enabling it.

8. Cookies and third-party web content

The main website is intended to operate without non-essential tracking cookies.

Security/hosting infrastructure may use strictly necessary technical mechanisms or process network metadata to deliver and protect the site. A payment or authentication provider may use its own necessary fraud/security/session technologies when you open its separate flow.

A promotional video or other third-party embedded content should not load until you deliberately choose to load or play it. Once you do, the third-party host may receive your IP address, browser/device information and may use its own cookies or similar technologies under its terms.

Website fonts are self-hosted from whisper-line.com, so no font request is made to a third party.

9. International processing and transfers

Livne Technology Consulting LLC is located in California, USA, and service providers may process information in the United States and other countries.

Where EU/EEA, UK or other law requires a transfer mechanism or contractual safeguard for an international transfer, we use the mechanism required by the applicable law and our provider relationships.

Before actively targeting a region that requires a local privacy representative, we will appoint the required representative or restrict availability until the requirement is resolved.

10. Retention

We keep personal information only for as long as reasonably necessary for the purpose described, subject to legal holds and mandatory longer periods.

Default retention targets are:

• active account/authentication data: while the account is active, then normally deleted or de-identified within 30 days after account deletion where feasible;
• backup/residual copies: may persist for up to 90 days in ordinary backup/replication cycles;
• hosted usage/metering metadata: up to 24 months, unless a longer period is necessary for an active security, fraud, billing or legal matter;
• support correspondence: up to 24 months after the issue closes, unless needed longer for legal/accounting reasons;
• acceptance, session-attestation, subscription-consent and arbitration records: up to six years after the later of account closure or the last relevant acceptance, and longer only when required for an active legal hold, dispute or mandatory law;
• payment/tax/accounting records: for the period required by the payment provider/Merchant of Record and applicable tax, accounting, anti-fraud or legal requirements;
• hosted prompt/response content stored by us: not retained as ordinary metering data by default;
• raw audio: not intentionally retained by Whisper-Line after local transcription;
• raw screen images: not intentionally retained or uploaded as part of ordinary OCR processing.

Account deletion does not necessarily delete limited legal evidence immediately. We retain only the evidence reasonably needed for contract/subscription proof, compliance and legal claims; it should not include ordinary session content.

11. Security

We use technical and organizational measures intended to protect account and service information, including access controls, authentication, encrypted transport and other safeguards appropriate to the Service.

No system is perfectly secure. We do not guarantee that unauthorized access, loss, interruption or security incidents can never occur.

If applicable law requires notice of a qualifying personal-data breach, we will provide the notice required by that law.

12. Your privacy rights

Depending on where you live and which law applies, you may have rights to:

• access personal information we hold about you;
• correct inaccurate information;
• delete information;
• receive a portable copy of certain information;
• restrict or object to certain processing;
• withdraw consent where a particular processing activity is based on consent;
• complain to an applicable privacy/data-protection authority.

These rights are not absolute. For example, we may retain limited information where necessary for security, fraud prevention, billing, legal obligations, or the establishment, exercise or defense of legal claims.

To exercise a privacy right, email [email protected]. We may take reasonable steps to verify that the request relates to you and your account.

Where applicable law gives you a right to know the actual recipients of your information, we can use our internal recipient register to respond even though this public Notice describes provider categories.

13. California privacy notice

Where the California Consumer Privacy Act/California Privacy Rights Act applies to us, California residents receive the rights required by that law.

We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against a person for exercising an applicable privacy right.

The CCPA/CPRA may not apply to the company if statutory business thresholds are not met. This Section does not voluntarily convert the company into a regulated “business” where the statute does not apply, but we may honor reasonable access/deletion requests as a matter of practice where doing so is lawful and feasible.

14. EU/EEA and UK information

Where the EU GDPR or UK GDPR applies, Livne Technology Consulting LLC is the controller for the account, metering, acceptance and product-service processing described in this Notice, except where another provider independently determines its own processing purposes under law.

You may have the rights listed in Section 12 and the right to lodge a complaint with your local supervisory authority.

EU/EEA representative (if required before targeted availability): [EU REPRESENTATIVE PENDING]
UK representative (if required before targeted availability): [UK REPRESENTATIVE PENDING]

The company must resolve these fields before actively targeting paid consumers in a region where a representative is required.

15. Children

Whisper-Line is for adults 18 and older. We do not knowingly offer accounts to children.

If we learn that an under-18 person created an account contrary to our Terms, we may suspend/delete the account and associated data subject to legal-retention requirements.

16. Account deletion

Sign in on the account page and use the “Delete my account” control there. If that does not work for you, contact [email protected] instead.

Deleting the account may end access immediately and should also stop future subscription renewal through the applicable cancellation/payment flow. Ordinary account information will be deleted or de-identified according to Section 10, but limited legal, subscription, fraud/security and transaction records may be retained where permitted or required.

17. Changes to this Notice

We may update this Privacy Notice as the Service, vendors, laws or data practices change.

If a change materially affects how we use personal information, we will provide the notice required by applicable law before or when the change takes effect. Where a new activity legally requires consent, we will obtain that consent rather than treating continued use as consent.

18. Contact

Livne Technology Consulting LLC
3409 Cook St, Rocklin, CA 95765
Privacy/legal requests: [email protected]
Customer support: [email protected]

Last updated: 2026-08-28.