Privacy Policy

Last updated: September 23, 2026

Who is responsible

Deep Flow Studios S.L., Carrer de Santa Teresa 15, 46920 Mislata (València), Spain. For anything related to your data: team@deepflow.es.

Your voice never leaves your computer

Susurro is designed so that transcription happens on your own machine. Neither the audio nor the text of your dictations is sent to our servers or any third party, and we never use your dictations to train anything. The dictation history, if enabled, is stored only on your computer and you can clear it anytime. The only exception is voice commands, explained below: they send the text of the command, never the audio.

What the application communicates

• Updates: the app periodically checks whether a new version exists. No personal data travels in that check.
• Subscription: when you start the trial or subscribe, the app checks your subscription status against our servers using an installation identifier and your email address.
• Model download: on first run, the app downloads the speech model. It is a plain file download, with no personal data.
• First steps: to learn where people get stuck when starting out, the app reports each step it reaches only once (opening it, seeing the sign-up, model ready, first dictation). Only the installation identifier (a random number), the step name and the version are sent. Never what you dictate, your email or your computer's name.
• Voice commands: if you use the commands shortcut, the app sends our server the text of the command (already transcribed on your machine; never the audio) together with what's needed to decide what to open: the names of your apps, the titles of your open windows, the names and folders of your projects, the names of your recorded actions and, if you're watching a YouTube video, its title. Our server forwards it to TypeSafe, the provider of the model that decides, only to answer that command. We don't keep that content: we only count how many commands you make per day, for the usage cap.

Payments

Payments are handled by Stripe through our payment system. We process your email address, your country and your subscription status; your card details are processed only by Stripe and never reach our systems. Stripe issues and emails the invoice for every charge, and you can edit your billing details in its customer portal.

This website

This website uses no cookies or advertising. We count visits with our own tool, without cookies and without storing your IP address, and also how many times "Download" is clicked. The server keeps technical logs (such as IP addresses) for the sole purpose of keeping the service secure.

Legal basis and retention

We process your subscription data to perform our contract with you; voice commands, to provide the feature you ask for; technical logs, based on our legitimate interest in security; and billing data, to comply with legal obligations, for the periods required by tax law. Other data is kept while your subscription exists.

Who data is shared with

Only with the providers needed to run the service: Stripe (payments and invoices), GitHub (application downloads and updates) and TypeSafe (the model that decides voice commands, only if you use them). We do not sell data or share it for advertising.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to team@deepflow.es. If you believe we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.