SECURITY · Last updated November 10, 2026

How your recordings are protected

People upload interviews, lectures, doctor visits and family voice notes. This page lists the measures that protect those files, from the moment you choose one until it is deleted.

The life of a file

  1. 1. UploadYour browser takes out the audio and sends it over an encrypted HTTPS connection.
  2. 2. TranscriptionThe audio is transcribed automatically on servers in the USA and deleted 24 hours later.
  3. 3. In your accountThe transcript opens only in the account that uploaded the file.
  4. 4. DeletedThe audio after 24 hours, and the transcript when you press Delete or ask us to delete it.

Audio deleted after 24 hours

We delete your audio file automatically 24 hours after transcribing it. Your transcript stays until you delete it. Delete a single file, remove your whole account, or write to us through the contact form and we delete it for you.

Converters stay on your device

MP4 to MP3 and the audio converter run in your browser. Those files stay on your computer or phone.

Card details stay with the payment processor

You pay through a secure checkout, and your card number stays with the payment processor.

Sign-in without a password

Each sign-in link works once and expires after 30 minutes.

Delete your account any time

One button in your account removes your files, transcripts and email address.

What we keep, and why

Your email address, so you can sign in and receive receipts.

Your audio and transcripts, the audio until 24 hours after transcribing, the transcripts until you delete them or ask us to.

Your IP address, a device cookie, a device marker and a file fingerprint, to keep the free limits fair, for as long as abuse protection needs them.

The full details are in our privacy policy. Questions go through the contact form, and we answer within 24 hours.

Encrypted connections

Every page, upload and download travels over HTTPS. The site also tells your browser to connect to kotosay.com over HTTPS only, so a typing mistake or an old link cannot open an unencrypted page.

Work done in your browser

Before an upload, your browser takes the audio out of a video and compresses it. Only that audio leaves your device, and the picture stays with you. If your browser cannot do this, it sends the original file instead.

The MP4 to MP3 converter and the audio converter do all their work in your browser. Files you convert there are never uploaded.

Storage and deletion

Uploaded audio and transcripts are stored on servers in the USA. We delete the audio automatically 24 hours after the transcription is finished. Transcripts stay in your account until you delete them. You can delete a single file at any time, delete your account, which removes all its files and transcripts at once, or write to us through the contact form and ask us to delete them.

Access through your account only

Each file is tied to the account that uploaded it, or to the browser that uploaded it if you have no account. The file, its transcript and its exports open only there. An uploaded file and its transcript reach other people only when you export and send them yourself. A finished, unedited transcript from a YouTube link is also given to the next person who pastes the same link, as the privacy policy describes.

Sign-in

You sign in with a link sent to your email address. Each link works once and expires after 30 minutes. Your session is kept in a cookie that the pages' scripts cannot read, and it is sent over HTTPS only. Signing out or deleting the account ends the session.

Protections in the page

The browser receives a set of rules with every page:

Protection against abuse

Uploads and sign-ins pass a bot protection check. The free limits are counted per account, IP address and device, which keeps automated misuse away from the service.

Payments

Card payments run through a secure checkout. Your card number goes to the payment processor and stays there.

Report a security issue

If you find a weakness in Kotosay, write to us through the contact form with the steps to reproduce it. We answer within 24 hours.

Ready to try it with a file?

Upload a file