This Privacy Policy explains how Sincera Works LLC
(operating Lingual) collects, uses, and shares information
when you use our live multilingual captioning service.
What we collect
From you directly:
Email address (during signup or magic-link sign-in)
Church or organization name (set in operator settings or pulled from PCO)
Planning Center org info (when you connect PCO — your church's
service plan, scripture references, songs)
CCLI license number (if you provide it)
Voluntary support inquiries you send via /support or email
From your use of the Service during live services:
Live microphone audio — processed in real-time for
speech recognition, and recorded to power sermon notes and evaluate
transcription quality. Recordings are kept for up to 10
days; a daily automated purge removes them shortly after the window ends. Audio recording can be
disabled entirely for your church on request.
Generated transcripts and translations — stored
in your tenant until you delete them.
Usage logs — which features you used, when, how
much (e.g. credits consumed, services run, audio TTS minutes).
Technical data — IP address, browser type, basic
device info, captured by our infrastructure providers (Cloudflare, Fly).
Marketing analytics — on public marketing and
selected operator pages, Google Ads / Google tag may process page URL,
referrer, browser/device data, ad or campaign identifiers, and conversion
events. Legal pages do not load the tag.
How we use it
To deliver captions, translations, and bulletins during your services.
To send you transactional email (sign-in links, account notices, support
replies).
To improve the Service via aggregated, de-identified usage trends.
To measure whether marketing pages and ads lead to signups or other
conversion events.
To respond when you contact us.
To detect and prevent abuse of the Service.
We do not sell your data. We do not use your audio
or transcripts to train AI models. We don't allow our third-party AI
providers (AssemblyAI, Deepgram, Speechmatics, OpenAI, Azure AI Speech, and
Google Cloud where applicable) to use your data for training either.
Who we share it with
We share data only with third-party processors needed to deliver the
Service. Each has its own privacy policy:
AssemblyAI — primary live speech recognition (audio passes through)
Deepgram — speech recognition for configured source
languages, fallback, and evaluation (audio passes through)
Speechmatics — speech recognition for configured
source languages and evaluation (audio passes through)
OpenAI — text translation (transcripts pass through) and,
for sermon-notes transcription, recorded service audio passes through
Azure AI Speech — text-to-speech (translations pass through)
Google Cloud — fallback text-to-speech (translations pass through)
API.Bible and Crossway — licensed
scripture text fetch (scripture references only)
Planning Center Online — only when you connect it
Stripe — payment processing if/when you make a purchase
Resend — transactional email delivery
Cloudflare — CDN, DNS, DDoS protection
Fly.io — application hosting
Google Ads / Google tag — public marketing and
conversion analytics
We may also disclose information if required by law (e.g. valid subpoena)
or to protect the safety of users.
How long we keep it
Email + account data: as long as your account exists,
plus 90 days after deletion.
Transcripts and sermon notes: indefinitely until you
delete them; deleted on account closure.
Service audio recordings: a 10-day retention window, removed by a daily
automated purge shortly after the window ends (none at all if audio recording is disabled
for your church — available on request).
Usage logs: 90 days.
Webhook events (Stripe etc.): as required for audit
(typically 7 years).
Marketing analytics
We use Google Ads / Google tag on marketing, support, and selected operator
pages to understand which campaigns produce signups or paid-conversion
conversations. We do not send service audio, transcripts,
captions, scripture text, sermon notes, Planning Center plan content, or support
message bodies to Google Ads. You can limit this tracking with browser privacy
settings, Google Ads settings, or by emailing us for help.
Delete your account and all associated transcripts — via the
operator dashboard or by emailing us.
Export your data — transcripts in plain text or JSON format,
typically delivered within 7 business days.
Stop using the Service at any time.
If you're in the EU/EEA or UK, you have additional rights under GDPR,
including the right to object to processing, restrict processing, and lodge
a complaint with a supervisory authority. Email us to exercise them.
If you're in California, you have rights under the CCPA including the
right to know what we collect, request deletion, and opt-out of sale (we
don't sell data, but you can confirm).
Children
Lingual is not designed for children under 13. We do not knowingly
collect data from anyone under 13. If you believe we have, contact us to
have it deleted.
Security
We use industry-standard practices to protect your data: HTTPS
everywhere, encrypted database tokens (PCO OAuth refresh tokens are
encrypted at rest), restrictive file permissions on credentials, and
regular security audits. No system is perfectly secure. If we discover a
breach affecting your data, we will notify you promptly via the email
address on file. See our Security page for
the full picture.
International users
Lingual is operated from the United States. By using the Service, you
consent to the transfer and processing of your data in the United States,
where data protection laws may differ from your home jurisdiction.
Changes to this Policy
We may update this Policy. Material changes will be announced by email
at least 30 days in advance. Continued use after the effective date
constitutes acceptance.
Beta-stage disclaimer. This Policy is a plain-English
starting point. Lingual is operated by a solo founder during Beta.
If anything here is unclear, please reach out — we'd rather have
a conversation than a misunderstanding.