Privacy Policy

This policy dey explain how Albireus (“we”) dey collect, process and use personal data. Contact: support@albireus.com. This policy dey work together with the Terms of Service, the Cookie Policy, and the AI features notice.

Statutory notice

According to the Personal Data Protection Act of Republic of China (Taiwan), we dey inform you say:

• Name: Lin Chen Yu (operator of Albireus service; contact email dey on top).
• Purpose of collection: to provide account, knowledge workspace, transcription, AI assistant, and team collaboration; check beta application; handle billing and account matters; and maintain the service.
• Data types: identification data (account, email, name); content (docs, audio, images, scans); usage records (how you take use am, no be the content); and transaction data (plan, billing period, payment status, point deduction records).
• Usage period: throughout the lifetime of the account; after deletion, e go follow "Account Deletion and Data Retention" below; and any period wey law, tax, or dispute settlement require.
• Area of use: Republic of China (Taiwan), and processing location outside Taiwan wey dey necessary to provide the service (check "Processors" for bottom); Paddle dey process payment data for United Kingdom and other places.
• Who dey use am and how: us, our processors, and people wey you choose to share with.
• Your rights: to ask about and check your data, collect copy, add or correct am, tell us make we stop to collect, process or use am, and tell us make we delete am. See the end of this document to see how you fit use dem.
• If you no provide am: you no go fit create account or use features wey require make you sign in.

Wetin we dey collect

• Google sign-in: your Firebase Auth user ID, email address, display name and profile picture.
• Beta application: your display name, username, how you wan use am and other questionnaire answers (when you submit application).
• Content wey you create: Docs, Note, Database files, Journal, Board, Canvas, presentations, transcription results, and AI conversations.
• Audio and video: file wey you upload or record live, and the text wey we transcribe from dem.
• Usage stats: number of requests, token count, seconds transcribed, AI point deduction records, and other things like dat; e no include prompts or doc text.
• Referral program: to stop people from inviting demself and other abuse, we dey keep salted hash of the IP address and of one random identifier for each browser (we no dey keep the raw IP address). We use am only to check if invite come from the same device or network — no be for tracking or adverts. Referrer hashes dey delete 90 days after the last time we see dem; the person wey dem invite, we only compare their hashes for sign-up and we no keep am. The random identifier dey your browser and e go comot when you clear site data.
• Transaction data: the plan wey you pick, billing cycle, current billing period, payment status, order number, payment currency and amount, billing country, and your Paddle customer and subscription ID.

Payment and billing data

Paddle.com Market Ltd (United Kingdom), wey be di Merchant of Record for these transactions, dey process payment (na NewebPay process subscriptions wey happen before). Paddle go process di billing details wey you provide for checkout according to dia own privacy policy. Your card number, expiry date, and security code dey go directly to di payment provider; we no dey receive or store dem at all. We only dey keep di order number, amount, payment status, and di plan period wey match am, make we fit balance account and attend to complain. Di billing records wey tax law say make we keep, we go keep dem reach di time wey law talk, even if you delete your account.

Database scan and OCR

Scans and image-to-text request dey go our processing service, and our processor fit help do some image enhancement. During this process, your image go leave your browser.

Voice and video transcription

• Source audio files for the queue dey usually delete once transcription finish; the transcribed text go remain for the task or doc.
• Audio or video wey you add to doc by yourself no go delete automatically.
• Live recording dey use Google Cloud Speech-to-Text; file and YouTube transcription dey use di speech model services wey we connect with.
• If you provide cookies to download from YouTube or capture page wey need login, we only dey use am for that one capture and we no dey keep am as long-term credentials.
• Before you upload file wey get other people voice, abeg make sure say you get right to record and process am.

AI, conversation and memory

Normally, text and image generation dey pass through our cloud model channel, and e fit send the docs, attachments, or transcripts wey you select as context. See AI features notice for more details.

API keys wey you bring by yourself dey stored only inside di browser for dis device, and e no dey enter Albireus cloud database. Requests dey pass through our servers go reach di provider wey you select; how those providers dey use data follow dia own terms.

Teams and public sharing

Teams wey you join and public links wey you on dey make people wey get access fit see di content; person fit even view public link without signing in. Abeg check well how you dey share things.

Processors and international transfers

To provide di service, data fit dey processed by Google Cloud and Firebase, Cloud Run, Vertex AI, Google Speech-to-Text, speech transcription providers, Paddle.com Market Ltd (United Kingdom, Merchant of Record; na NewebPay for Taiwan process earlier subscriptions), and email delivery services, and some of this processing dey happen outside Taiwan. We only dey use processors for wetin dey necessary to make di features work.

GIF search for team chat na GIPHY (United States) dey provide am: the search words wey you type, our server dey send am go GIPHY to get results; we no dey give GIPHY your account or chat wetin you write. GIF images dey load direct from GIPHY servers, so wen GIF show, GIPHY dey receive your device IP address and normal connection details. GIF search no dey work offline.

Push notifications dey pass through Firebase Cloud Messaging (Google) reach the devices wey you turn am on; we dey only store each device push token and we dey delete am automatically wen the device stop to receive push. You fit off push for under Notifications & privacy.

Cookies & similar technologies

Right now, na only technology wey we need to keep you signed in and run the interface we dey use; check the Cookie Policy for details. We no dey use third-party tracking for advertisement.

How you fit exercise your rights

Under Article 3 of Personal Data Protection Act, you fit ask to check, view, collect copy, correct, stop processing, or delete your data. You fit delete account directly inside app ("Settings → Account → Delete account", check next section); for other requests, send email from your registered address to support@albireus.com, and we go reply within reasonable time. For export options, see Data Export and Portability.

Account Deletion and Data Retention

• You fit delete your account by yourself anytime for Albireus under "Settings → Account → Delete account" (web, desktop, or mobile app), no need to send email. To protect your account, you fit need to log in again before deletion.
• Once deletion confirm, account go deactivate immediately and sign out from all devices; you no go fit log in or sync again.
• Account data—including docs, Handwriting, Canvas, Database, transcripts and activity history, uploaded files and media, collaborative doc status, search index, settings, wallet and remaining points, plus the login account itself—go dey permanently deleted from main system within 14 days after request, and you no go fit recover am. Abeg export wetin you wan keep before deletion.
• After deletion from main system, backup fit still hold copies: daily backup of collaborative docs go remain for maximum 30 days before automatic deletion; cloud provider recovery mechanism fit also briefly keep deleted files within this 30 days. These copies na only for disaster recovery, we no go use am restore deleted accounts or for anything else.
• If you get active subscription, we go cancel auto-renewal through Paddle when deleting account (latest within one day), and e no go charge again; past NewebPay recurring payments go also cancel. Current period fees wey you pay no go automatically refund because of account deletion, you fit apply under Refund Policy; remaining points go delete with account, dem no go keep or convert to cash. If payment gateway delay, we go settle subscription first before finishing deletion, and try to complete am within the 14 days.
• Share links and permissions wey you create go stop to work, and your membership record inside other people docs, folders, or teams go dey removed. Content wey you leave for shared spaces wey other people own (like their docs, team channels, or direct messages) belong to dat space and fit remain for other members.
• Data wey no go delete with account: billing records wey tax law say make we keep (check "Payment and Billing Information" above) go remain until statutory period end; plus we go keep one deletion record without personal data (hashed ID wey person no fit trace, request and completion time, count of deleted items) to prove say deletion don happen.

Users outside Taiwan

If you dey European Economic Area, United Kingdom or another region wey get similar law, you still get right to data portability, to restrict processing, to object to processing, and to report give your local data protection authority. The legal reason why we dey process your data na to carry out our service agreement with you (account, content, payment), obey legal requirement (billing and tax record), and our proper interest to keep the service safe and make am better. For transfer go another country, we dey follow protection measures like standard contractual clauses wey our processors provide. You fit use these rights the same way wey we explain on top.

Security and limitations

We dey use reasonable access controls and protection when data dey move, but we no fit guarantee say system no go ever cut or say person no go fit hack am. Operations staff dey only check system logs when e really necessary to fix problem.

Underage people

This service dey only for people wey don reach 18 years or pass. If we discover say any account belong to person under 18 years, we fit stop to give am service.

Policy changes

When Privacy Policy or Terms of Service get major change, we go change di version number and ask you make you confirm am again next time you enter workspace. If na just wording touch-up wey no affect how we dey use data, we fit no ask for new consent.