Privacy Policy

Last updated: July 18, 2026

1. Who We Are

Last Mile Road (lastmileroad.org) provides speech-to-text transcription and translation services for underserved languages. We operate from Kenya and serve clients globally. We are committed to protecting your privacy and handling your data responsibly.

Operator: Last Mile Road (Kenya)
Contact: support@lastmileroad.org

2. What Data We Collect

2.1 Information You Provide

Data	Purpose
Name	Account creation, communication
Email address	Account login, sending transcripts, service notifications, billing receipts
Organisation	Usage context (optional)
Audio files	Processing into transcripts and translations
Payment information	Processed by Paddle — we never see or store your card details

2.2 Information Collected Automatically

• Usage data: Minutes processed, languages used, feature usage (for service improvement and billing)
• Technical data: Browser type, IP address, operating system (for analytics and security)
• Cookies: Essential cookies for session management and authentication. We do not use tracking or advertising cookies.

3. How We Use Your Data

We use your data only for:

• Providing the service — processing audio, generating transcripts, delivering results
• Billing — calculating usage, generating invoices
• Communication — sending transcripts, account notifications, support responses
• Service improvement — aggregate analytics to understand usage patterns and improve performance
• Legal compliance — complying with applicable laws and regulations

4. Data Retention & Deletion

Data Type	Retention Period
Audio files	Deleted automatically after processing completes
Transcripts & translations	Stored in your account until you delete them
Account information	Retained while account is active, plus 12 months after closure for billing records
Usage logs	12 months, then anonymised or deleted

You can request deletion of your account and associated data at any time by contacting support@lastmileroad.org. We will process deletion requests within a reasonable timeframe and will confirm once complete.

5. Data Sharing

We do not sell your personal data. We share data only with the service providers who help us deliver the service:

Provider	Purpose	Data Shared	Data Residency
Paddle	Payment processing	Billing info, email address	Global (US/EU)
Modal	Cloud compute (GPU processing for ASR, translation, diarization)	Audio files only — during processing, then deleted	US / EU (varies by region)
ZeptoMail	Transactional email delivery	Email address, transcript delivery	US / EU
Hetzner	VPS hosting (backend API, database, file storage)	Account data, transcripts, uploaded files	Finland (EU)

Your data may be processed in data centres located in the United States and European Union where these providers operate. All transcription and translation runs on our own self-hosted GPU infrastructure — your data is never sent to third-party AI model providers for training or inference.

6. Data Security

We implement appropriate technical and organisational measures to protect your data:

• Encryption in transit — all data transmitted over TLS 1.3
• No third-party AI API calls during processing — your audio stays on our own GPU infrastructure. All ASR, diarization, alignment, and translation runs on self-hosted models
• Access controls — authentication required for all account access, with session management and rate limiting
• Infrastructure security — firewalls, rate limiting, regular security patching
• Backups — encrypted daily backups with 14-day retention

7. Cookies

We use only essential cookies:

• Session cookie — maintains your login session

No tracking, advertising, or analytics cookies are used. You can block cookies in your browser settings, though this may affect service functionality.

8. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Restriction — limit how we process your data
• Objection — object to certain processing activities

To exercise any of these rights, contact support@lastmileroad.org. We will respond within a reasonable timeframe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or through the service. Continued use after changes take effect constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the Republic of Kenya, where our operator is based. This does not limit any rights you may have under applicable consumer or data protection laws in your jurisdiction.

12. Contact

General privacy enquiries: support@lastmileroad.org

Website: https://lastmileroad.org

---