Privacy Policy
Last Updated: August 2026
1. Introduction
Timbra Sociedade Unipessoal (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, in compliance with the General Data Protection Regulation (GDPR).
2. What Data We Collect
- Account Information: Your email address and basic profile information when you sign up.
- Financial Information: Processed securely by Stripe. We do not store full credit card numbers on our servers.
- User Content: The documents (e.g., PDFs, EPUBs) you upload for processing, and the resulting audio files.
- Usage Data: Telemetry, error logs, and interaction data to help us improve the service.
3. How We Use Your Data
We use your data strictly to provide and improve the Timbra service. Specifically:
- To process your documents into audio (Performance of a Contract).
- To manage your account, billing, and support requests.
- To send you transactional emails (receipts, render-complete notifications).
We do NOT use your private documents to train our AI models.
4. Data Retention
We practice strict data minimization:
- Uploaded Documents: Retained for a maximum of 30 days to allow you to retry or re-download processing. They are automatically destroyed thereafter.
- Ephemeral Processing: Certain features, such as the “Reading Capsule” (CAP-04), are processed on our private EU-based infrastructure ephemerally. Only a process UUID is retained post-job; the underlying data is destroyed immediately upon completion.
5. Sub-processors and Data Transfers
We use trusted third-party sub-processors (like Google Cloud Platform, Stripe, and Resend) to deliver our service. All data is processed within the European Union where possible. For a complete list of our sub-processors, please visit our Sub-processors page.
6. Your GDPR Rights
Under the GDPR, you have the right to:
- Access, correct, or request deletion of your personal data.
- Object to processing or request restriction of processing.
- Data portability.
To exercise any of these rights, or if you have questions about our privacy practices, please contact our Data Protection Officer.
7. Contact Us
Data Protection Officer (DPO)
Timbra Sociedade Unipessoal
Email: privacy@timbra.life