Skip to content

Legal

Imprint, privacy and terms.

ImprintPrivacy PolicyTerms of Service (ToS)

1. Data Protection at a Glance

The following information provides a simple overview of what happens to your personal data when you visit our website and use Airtape's services. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy listed below this text.

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the imprint of this website.

How do we collect your data?
On one hand, your data is collected by you providing it to us. This could be, for example, data you enter when registering an account (e.g., email address, name). Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page call).

2. Hosting and Content Delivery Networks (CDN)

External Hosting
This website is hosted externally. The personal data collected on this website is stored on the host's servers. This primarily includes IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via a website.

We use the following hosts for Airtape:

  • Hetzner Online GmbH: Providing our application servers and databases (Location: Germany, EU).
  • Cloudflare (R2 Storage): Storage of audio and video data and provision of the website (CDN). Data is primarily processed in the EU.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

3. Subprocessors and External Service Providers

We use carefully selected external service providers to operate Airtape. These providers process data only to the extent necessary to deliver our services, secure the platform, process payments, or provide requested AI features.

  • Hetzner Online GmbH: Application hosting and database infrastructure.
  • Cloudflare (R2 Storage): Storage of uploaded recordings and derived media files.
  • Resend: Transactional email delivery.
  • Stripe: Payment processing, checkout, fraud prevention, and billing records for paid credits.
  • Airtape transcription (no subprocessor): Transcripts are created by Airtape's own transcription software on hardware that Airtape operates itself in Germany. The audio is not passed to any third party and is deleted from that hardware as soon as the transcript is finished.
  • Umami: Privacy-friendly, cookieless website analytics. We self-host Umami on our own infrastructure to measure page views, referral sources, and browser capabilities. Umami does not collect personal data, does not use cookies, and cannot identify individual visitors. All analytics data is stored on our own EU-based server and is never shared with third parties.

If personal data is transferred outside the EU/EEA by one of these providers, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or another lawful transfer mechanism.

4. General Notes and Mandatory Information

Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Note on the Responsible Party
The responsible party for data processing on this website is:

Montazeri Ventures GmbH
Dresdner Straße 12
69181 Leimen, Germany
Phone: +49 6224 9066890
Email: hamed@airtape.co

5. Airtape Specific Data Processing (Recordings, Transcripts & WebRTC)

Airtape is a platform for recording remote interviews and podcasts. This requires specific technical data processing:

To use Airtape, you must grant the application access to your camera and microphone in your browser. Without this release, recording is technically not possible. The release occurs locally in your browser (Art. 6 para. 1 lit. a GDPR).

Airtape initially records audio and video locally on each participant's device in small data packets ("chunks"). These packets are encrypted in transit and uploaded to our cloud storage (Cloudflare R2) during the session. After the final files are assembled on our servers, they are available to the host for download, and the initial chunks are automatically deleted. Final recordings are retained according to the active plan: 7, 30, or 90 days, as shown before purchase and in account settings. Deleting a session removes its associated recording data earlier.

If you explicitly request a transcript, the relevant audio file, language hints, and limited technical metadata are processed by Airtape's own transcription software on hardware that Airtape operates itself in Germany, with encrypted storage. The audio is transferred over an encrypted connection and deleted from that hardware as soon as the transcript is finished; no third party receives it. We process this data to provide the transcript feature you requested (Art. 6 para. 1 lit. b GDPR). Transcript text, transcript status, estimated credit cost, and associated job metadata are stored in your Airtape account so you can access and manage the result.

AI-generated transcripts may contain errors. We recommend reviewing transcripts before publishing, sharing, or relying on them for business, legal, editorial, or medical decisions.

For the live call between participants we use WebRTC together with WebSockets. Audio and video of the live conversation (not the recording) are encrypted (DTLS-SRTP) and relayed through Cloudflare’s real-time media network (Cloudflare Realtime SFU and TURN), which connects each participant to a nearby Cloudflare location. Cloudflare only passes the live media through and does not store it. Signaling data (IP addresses, connection setup information) is briefly processed by our WebSocket servers to establish the connection.

6. Registration, Account, and Credit Balance

You can register on our website to use additional functions (creating sessions). We only use the data entered for this purpose for the use of the respective offer or service for which you have registered. Mandatory information must be provided in full. Otherwise, we will reject the registration.

The processing of the data entered during registration is for the purpose of implementing the user relationship established by the registration and for initiating further contracts (Art. 6 para. 1 lit. b GDPR).

If you subscribe to a paid plan, we store your selected plan, subscription status, billing interval, current billing period, cancellation state, recording usage, and linked Stripe customer and subscription identifiers. If you purchase or spend credits, we also store your credit balance, transaction history, pack selection, transcript-related debits, refunds, and linked checkout identifiers. We process this information to perform the contract, provide paid features, prevent fraud, enforce plan limits, and maintain legally required accounting records.

7. Payments via Stripe

When you start, manage, or pay for a subscription or purchase credits, payment processing is handled by Stripe. Depending on the payment method used, Stripe may process your email address, payment method details, IP address, billing address and country, tax identification details, transaction and subscription identifiers, fraud signals, and metadata necessary to complete checkout and recurring billing. Airtape does not store full payment card numbers.

Stripe acts as an independent payment service provider and may process personal data for payment execution, fraud prevention, compliance, and financial reporting. Stripe's own privacy policy and terms also apply to your payment transaction.

8. Email Dispatch via Resend

We use the service provider "Resend" to send transactional emails (e.g., email verification after registration). When you register, your email address is transmitted to Resend's servers to enable the confirmation email to be sent. The use of Resend is based on our legitimate interests in a fast, secure, and efficient communication system (Art. 6 para. 1 lit. f GDPR).

9. Security and Accessibility Documents

Universities, companies and other institutions often review a service before approving it. These documents answer the usual questions of IT security, privacy and accessibility reviewers. For a questionnaire such as the HECVAT, a data processing agreement or further questions, contact hamed@airtape.co.