Privacy Policy
Last updated: August 2026
The short version: your voice is used to write your text, and nothing else. We collect the minimum needed to transcribe, meter your plan, and take payment.
What tautau does
tautau is a speech-to-text tool: a Chrome extension and web app that turn your voice into text in any input field. When you dictate, your microphone audio is sent over HTTPS to our transcription API (api.tautau.xyz) and processed by a speech-to-text provider (xAI, with failover to Groq or OpenAI) so it can be transcribed.
Audio and transcripts
- Audio is used only to produce a transcript. It is not used to train models, not sold, and not shared with anyone other than the transcription provider processing that request.
- In the web playground, recorded audio never leaves your browser tab — only the transcript is kept in the session log.
- If you sign in, your dictations are saved to your private history — transcript and audio — stored in encrypted object storage (Google Cloud Storage) so you can replay them. Only you can read them, and you can delete any item or your whole history from the history page at any time.
- If you use the extension or playground without an account, transcripts are returned to the page and nothing is retained by us beyond the request.
Accounts
Sign-in is handled by Firebase Authentication (Google). If you create an account we store your email address and basic profile identifiers to manage your quota and subscription. We never see or store your Google password.
Usage quotas
To enforce fair-use limits, anonymous usage is counted against a browser cookie identifier and your IP address; signed-in usage is counted against your account email. These counters (plan, usage totals, subscription status) are stored in our transcription service database.
Payments
Paid plans are processed by Stripe. Card details go directly to Stripe — we never see or store them. We receive only your subscription status and a customer reference.
What the Chrome extension can access
- Microphone — only while you actively start a dictation; recording stops when you stop it or the field changes.
- Page content — the content script runs on pages you visit so it can place the mic button and insert transcripts into the focused field. Page content is never read, collected, or transmitted.
- Storage — your settings and sign-in token are kept in Chrome’s local/sync storage on your device.
Third-party processors
- xAI / Groq / OpenAI — speech-to-text transcription of dictation audio
- Google Firebase — authentication
- Stripe — payment processing
- Google Cloud Storage — encrypted storage of signed-in users' history (transcripts + audio)
- Vercel — web hosting
Data retention and deletion
Dictation history (transcripts and, for signed-in users, audio) is kept until you delete it — per item or all at once, from the history page. Quota counters reset on their own schedule (daily for free accounts, per billing period for paid plans). To delete your account and associated data, contact us at the address below.
Changes and contact
If this policy changes we will update this page. Questions or deletion requests: support@tautau.xyz.