Privacy Policy

Last updated: June 13, 2026

1. Who We Are

Last Mile Road (lastmileroad.org) provides speech-to-text transcription and translation services for underserved languages. We are committed to protecting your privacy and handling your data responsibly.

Data controller: Last Mile Road
Contact: support@lastmileroad.org

2. What Data We Collect

2.1 Information You Provide

Data	Purpose
Name	Account creation, communication
Email address	Account login, sending transcripts, service notifications, billing receipts
Organisation	Usage context (optional)
Audio files	Processing into transcripts and translations
Payment information	Processed by Paddle — we never see or store your card details

2.2 Information Collected Automatically

• Usage data: Minutes processed, languages used, feature usage (for service improvement and billing)
• Technical data: Browser type, IP address, operating system (for analytics and security)
• Cookies: Essential cookies for session management and authentication. We do not use tracking or advertising cookies.

3. How We Use Your Data

We use your data only for:

• Providing the service — processing audio, generating transcripts, delivering results
• Billing — calculating usage, generating invoices
• Communication — sending transcripts, account notifications, support responses
• Service improvement — aggregate analytics to understand usage patterns and improve performance
• Legal compliance — complying with applicable laws and regulations

4. Data Retention & Deletion

Data Type	Retention Period
Audio files	Deleted immediately after processing completes
Transcripts & translations	Stored in your account until you delete them
Account information	Retained while account is active, plus 12 months after closure for billing records
Usage logs	12 months, then anonymised or deleted

You can request deletion of your account and associated data at any time by contacting support@lastmileroad.org. We will process the request within 30 days.

5. Data Sharing

We do not sell your personal data. We share data only with trusted sub-processors who help us deliver the service:

Provider	Purpose	Data Shared
Paddle	Payment processing	Billing info, email address
Modal	Cloud compute (GPU processing)	Audio files during processing only
ZeptoMail	Transactional email	Email address, transcript delivery

Each provider processes data under their own standard terms, which include data protection commitments.

International Transfers

Your data may be processed in data centres located in the United States and European Union where our sub-processors operate. Both jurisdictions have established adequacy decisions or standard transfer frameworks.

6. Your Rights

Under the Kenya Data Protection Act, 2019 and applicable law, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Restriction — limit how we process your data
• Objection — object to certain processing activities

To exercise any of these rights, contact support@lastmileroad.org. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit — all data transmitted over TLS
• Encryption at rest — data on cloud compute infrastructure (Modal) is encrypted at rest by default. VPS storage uses standard hosting provider security measures.
• Access controls — strict authentication and authorisation for staff
• Infrastructure security — firewalls, intrusion detection, regular security updates
• No third-party API calls during processing — your audio stays on our own infrastructure

8. Cookies

We use only essential cookies:

• Session cookie — maintains your login session
• CSRF token — prevents cross-site request forgery

No tracking, advertising, or analytics cookies are used. You can block cookies in your browser settings, though this may affect service functionality.

9. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or through the service. Continued use after changes take effect constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the Republic of Kenya and the Kenya Data Protection Act, 2019.

12. Contact

Email: support@lastmileroad.org
Website: https://lastmileroad.org

---