1. Data Controller
The data controller for Arev is PRO SIA, a company registered in Latvia (EU). For any privacy-related inquiries, contact us at hello@getarev.com.
2. Data We Collect
- Account data: Email address and display name (when you sign in with email or add profile details later).
- Content data: YouTube URLs you submit and the resulting transcript text.
- Usage data: Pages visited, features used, and interaction patterns (collected via PostHog analytics, opt-in only).
- Technical data: IP addresses, browser type, and device information collected automatically by our infrastructure providers.
- Payment data: Billing information processed by Stripe. We do not store credit card numbers.
3. Lawful Basis for Processing (GDPR Art. 6)
- Contract performance (Art. 6(1)(b)): Processing your YouTube URLs and generating transcripts is necessary to provide the core service you request.
- Consent (Art. 6(1)(a)): Analytics data (PostHog) is collected only with your opt-in consent.
- Legal obligation (Art. 6(1)(c)): We retain payment records as required by tax and accounting regulations.
4. Subprocessors
We use the following third-party services to operate Arev:
| Provider | Purpose | Location |
|---|
| ElevenLabs | Audio transcription | US |
| Supabase | Database & authentication | US / EU |
| Vercel | Hosting & edge network | US / Global |
| Stripe | Payment processing | US |
| Resend | Transactional email | US |
| PostHog | Analytics (opt-in) | US / EU |
5. International Data Transfers
Some of our subprocessors are based in the United States. Where personal data is transferred outside the EEA, we rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.
6. Data Retention
- Account data: Retained for the duration of your account. When you delete your account, your profile and transcript data are removed immediately from the active service.
- Transcripts: Retained until you delete them or delete your account.
- Payment records: Retained for 7 years as required by tax regulations.
- Server logs: Automatically purged after 90 days.
7. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Eraseyour data (“right to be forgotten”, Art. 17)
- Restrict processing of your data (Art. 18)
- Port your data to another service (Art. 20)
- Object to processing (Art. 21)
- Lodge a complaint with a supervisory authority (in Latvia: the Data State Inspectorate — Datu valsts inspekcija)
To exercise any of these rights, email us at hello@getarev.com. You can also delete your account and all associated data from the Settings page.
8. Cookies
- Authentication cookies (strictly necessary): Session cookies used to keep you signed in. These are essential for the service to function and cannot be disabled.
- Analytics cookies (opt-in): PostHog analytics cookies are only set if you consent. They help us understand how the service is used so we can improve it.
We do not use advertising cookies or third-party tracking cookies.
9. Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify you by email or by a notice on the service. The “last updated” date at the top reflects the most recent revision.
10. Contact
If you have questions about this privacy policy or how we handle your data, contact us at:
PRO SIA
Registered in Latvia
Email: hello@getarev.com