Yes. Submissions are private by default. We don't use, publish, or share a recording beyond what's needed to provide the platform to you unless you choose to share it.

No. Transcription and search run on your content for your benefit only. Nothing you record is fed into third-party model training.

Recordings are retained for up to 30 days after your account or your organization's agreement ends, then permanently deleted, unless you export them or ask us to retain specific content before that period expires. Exporting what you want to keep is your responsibility, and the export is available at any time.

Email privacy@theirstory.io. We verify your identity first, then respond within the time applicable law requires. You may also designate an authorized agent to make a request for you where the law permits it. Deletion or anonymization happens within 60 days, except where we're legally required to retain something.

You can request access, correction, restriction, or erasure of your personal data, receive a copy in a portable format, object to processing based on our legitimate interests or to direct marketing, and lodge a complaint with your local data protection authority. Where the GDPR applies, we process data on the basis of contract, legitimate interests, legal obligation, or your consent.

TheirStory is based in the United States, and the information we collect is generally stored and processed there. If you use the platform from outside the US, your information is transferred to and processed in the US. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.

If we confirm an incident involving unauthorized access to or disclosure of your personal data, we notify affected individuals and the relevant organization without undue delay, and no later than 72 hours after we become aware of it, to the extent applicable law requires.

We don't knowingly collect personal information from children under 13 without verifiable parental consent. For users aged 13 to 17, the subscribing organization is responsible for obtaining and retaining verifiable parental or guardian consent before those users record, and for providing copies to us on request.