GDPR controls you can verify
Pepys combines consent-gated analytics, limited source-media retention, encryption, access controls, and self-service deletion. We do not sell personal information or use customer content to train Pepys models.
Private by default
Your recordings and transcripts are tied to your account. Sharing requires you to create a share link.
Encrypted in transit and at rest
Everything you send travels over HTTPS/TLS, and your files and transcripts are encrypted at rest through our infrastructure providers.
You control deletion
Delete a transcript or your whole account from the app. Pepys removes the associated customer content and files.
Transcription starts after signup
Pepys does not send media to a transcription provider before you create or sign in to an account. Your first 60 minutes are free.
Security questions, answered
How does Pepys support GDPR requirements?
Pepys documents its processing purposes and legal bases, keeps optional browser analytics off until consent, limits source-media retention, supports access and deletion requests, and uses transfer safeguards for processing outside the EEA and UK. Some account data and processing remain in the United States, as our Privacy Policy explains.
Do you train AI on my recordings?
No. Pepys does not use your audio, video, transcripts, or derived outputs to train its own models. We use third-party processors to provide requested features and apply available data-use controls.
Is my data encrypted?
Yes. Your data is encrypted in transit over HTTPS/TLS and at rest through our infrastructure providers.
How do I delete my data?
You can delete an individual transcript or your entire account directly in the app at any time. Deleting a transcript removes its associated data; deleting your account cascades to your files, jobs, transcripts, and credit ledger. We may keep limited transaction and credit-ledger records where required for legal, accounting, and tax purposes.
Do I need an account to transcribe?
Yes. Pepys requires a free account before it starts provider-backed transcription. New accounts receive free minutes and do not need a payment card.
Where is my data processed?
Pepys is based in the United States. Our subprocessors may process data in the US and other countries. Contact us for current subprocessor and location details.
Need security details?
Read our Privacy Policy and Terms, or email contact@pepys.co for current subprocessor information or a security review.