Privacy Policy
Draft — not legal advice; final text pending review.
Draft, last changed 8 September 2026
This policy describes what Arcada US LLC does with data when you use Subtl. The short version: call audio is never stored, transcripts stay on your device unless you turn on cloud sync, and the files you attach for context expire.
Call audio
Held in the memory of your device and streamed over TLS to the transcription provider while a session runs. It is not written to disk by the application and not stored on our servers. Retention: none.
Transcripts, translations and suggestions
Stored locally on your device. They reach our servers only if you switch cloud sync on, and you can delete them at any time or set them to auto-delete after a number of days. Basis: performance of the contract, or your consent for the synced copy.
Context files
Files you attach to a meeting preset are parsed into text chunks and embeddings on our server so that a suggestion can quote the right paragraph. Encrypted at rest. Deleted 30 days after the last meeting that used them.
Account, devices and payments
Email address, device names and platforms, subscription state. Card details are handled by Stripe and never reach us. Retention: until you delete your account.
Product telemetry
Counters and latency measurements with no call content, processed by PostHog and kept for 12 months. Legitimate interest, and consent where the law requires it. It can be switched off in the application's privacy settings.
Subprocessors
The current list, with what each service handles, is published on the subprocessors page and updated before changes take effect.
Your rights
- Export everything we hold about you, from the cabinet.
- Delete your account; the data is purged within 24 hours.
- Withdraw consent to telemetry at any time.
- Object, restrict, or complain to your supervisory authority where the GDPR applies to you.
Children
Subtl is not for people under 16, and accounts are not knowingly created for them.
Contacting us
Write to the address on the contact link in the footer. Where we are required to appoint an EU representative under Article 27 GDPR, their details will be published here.