opensources.dev

Privacy Policy

Last updated: 23 September 2026

opensources.dev ("we", "us") is operated by [LEGAL NAME], [REGISTERED ADDRESS], Türkiye ("Controller"). Contact: privacy@opensources.dev. This policy explains what we collect, why, and your rights under the GDPR, the Turkish Personal Data Protection Law No. 6698 (KVKK) and other applicable laws.

What we collect

  • Account data: your email address and, if you use Google sign-in, your Google account identifier. Purpose: to create and secure your account (contract performance).
  • Plan & usage data: your subscriptions/passes and counters such as "words dictated this week". Purpose: to provide your plan and enforce free-tier limits (contract performance).
  • Security data: session records, the browser type of connected extensions, and a salted hash of your IP address for security events. Purpose: to protect your account and prevent abuse (legitimate interest).
  • Payment data: handled entirely by Paddle.com, our Merchant of Record. We never see or store your card details. We receive your Paddle customer ID and the status of your purchases.

What we do not collect or keep

  • Say: your voice recording and the resulting text are sent to our AI providers only to produce your result and are then discarded. We do not store or log audio or text.
  • We do not sell personal data, use it for advertising, or use your content to train AI models.
  • Our extensions do not read pages you haven't explicitly activated them on.

Processors

We use: Cloudflare (hosting, database — EU/US), Paddle.com (payments, Merchant of Record — UK), Groq and OpenAI (speech-to-text and text processing — US; API data is not used for model training), Resend (sign-in emails — US), Google (optional sign-in — US). International transfers rely on Standard Contractual Clauses or equivalent safeguards, and on your explicit consent where KVKK Art. 9 requires it.

Retention

Account data is kept until you delete your account. Usage counters are kept up to 13 months; security logs up to 12 months; sign-in codes and expired sessions are deleted automatically. Paddle keeps invoices as required by tax law.

Your rights

You can access and download your data (Account → Download my data), correct it, delete your account (Account → Delete account), object to processing, and lodge a complaint with your data-protection authority (in Türkiye: KVKK Kurumu). Email privacy@opensources.dev for any request; we answer within 30 days.

Chrome Web Store Limited Use

The use of information received from Google APIs and browser extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension's single, user-facing purpose.