Last updated: 8 June 2026
1. Who we are
AutoTeleprompter (“the App”) is provided by AB Group (sole proprietor), Hagalil Street, Kiryat Bialik, Israel, business registration 312164718 (“we”, “us”, “our”). We are the data controller for the personal data described here. Contact: support@autoteleprompter.abprogroup.com.
2. Scope
This policy covers the AutoTeleprompter application and the website https://autoteleprompter.abprogroup.com. Payment is handled by our reseller/Merchant of Record, Paddle (see §7 and the Refund Policy).
3. What we collect
Account data
• Email address (your login identity).
• Password — managed and hashed by our authentication provider (Supabase Auth). We never see or store your password in plain text.
• Display name (optional).
• A device identifier we generate to bind your session and offline access to your device.
Subscription / entitlement data
• Plan/role (Free, Pro, Admin), subscription status, and billing-period end date, evaluated on our server to grant or lock premium features.
Your content
• Scripts and text you create. These are stored locally on your device. They are only sent to the cloud if you connect Google Drive or Dropbox (§7).
Feedback reports (only if you submit feedback)
• Your message, the app version, your platform/OS, and a device key.
• A diagnostics summary (recent app events/errors).
• The full report including your active script is attached ONLY if you opt in on the feedback screen; otherwise the script content is not sent.
Diagnostics / error logs
• A short in-memory log of app events and errors, kept to diagnose problems. It is transmitted only when you send a feedback report.
Voice input (speech-to-text)
• When you use voice-controlled scrolling, your microphone audio is processed by your device’s platform speech-recognition service — Apple speech recognition on iOS, Google speech recognition on Android, and the operating-system speech service on Windows.
• This means that, depending on your device, your spoken audio may be transmitted to and processed by Apple or Google under their privacy policies in order to convert speech to text. We do not control that processing.
• We use the resulting text only to follow your reading position. We do not store recordings of your voice.
Camera & microphone (Content Creator / recording)
• Used only when you actively use recording features. Recordings are stored locally on your device (or in your connected cloud if you choose).
Payment data
• Processed by Paddle as Merchant of Record. We do not receive or store your full card details. We receive limited transaction/subscription status.
Technical data
• When the App contacts our backend, standard request metadata (e.g. IP address, timestamps) may be processed by our hosting provider for security and delivery.
4. How we use your data
• Provide and operate the App and your account.
• Authenticate you and deliver verification/reset codes by email.
• Determine your subscription entitlements.
• Provide support and respond to feedback.
• Maintain security, prevent abuse/piracy, and debug issues.
• Comply with legal obligations.
5. Legal bases (GDPR / UK GDPR)
• Contract — to provide the App and your account/subscription.
• Consent — voice/speech features, attaching your script to feedback, and connecting cloud accounts. You may withdraw consent at any time.
• Legitimate interests — security, abuse/piracy prevention, product improvement, basic diagnostics.
• Legal obligation — tax/records (via Paddle) and lawful requests.
6. Email delivery
• Outbound transactional emails (verification codes, password reset, account and renewal notices) are sent via Resend.
• Inbound email to our domain is routed via ImprovMX forwarding to our support inbox.
7. Third parties / processors
We share data only with providers that help us run the service:
| Provider | Purpose | Data | |———-|———|——| | Supabase | Backend, authentication, database, functions (hosted in Asia-Pacific) | Account, entitlement, feedback | | Resend | Outbound transactional email | Email address, message content | | ImprovMX | Inbound email forwarding | Emails you send to our domain | | Paddle | Payments / Merchant of Record | Billing & transaction data | | Apple | Speech recognition on iOS (when you use voice control) | Microphone audio for transcription | | Google | Speech recognition on Android (when you use voice control) | Microphone audio for transcription | | Google Drive / Dropbox | Optional cloud sync you connect | Scripts/backups you choose to sync | | GitHub | App update delivery | App version/update requests |
We do not sell your personal data. Apple’s and Google’s processing of your speech audio is governed by their own privacy policies.
8. International transfers
Our backend is hosted in the Asia-Pacific region, and speech recognition may be processed by Apple/Google on their global infrastructure. If you are in the EEA/UK, your data may be transferred outside your country. We rely on appropriate safeguards (e.g. Standard Contractual Clauses) where required.
9. Retention
• Account & entitlement data: while your account is active and as needed for legal/tax purposes.
• Feedback & diagnostics: kept only as long as needed to resolve issues.
• Local content (scripts, recordings): stays on your device until you delete it.
• On account deletion (§10) we delete your account data from our systems; local device files are removed by you/by uninstalling.
10. Your rights
Depending on your location (GDPR, UK GDPR, Israeli PPL, CCPA/CPRA), you may:
• access, correct, or delete your data;
• export your data;
• withdraw consent;
• object to or restrict certain processing;
• (California) opt out of “sale”/“sharing” — we do not sell data.
You can delete your account in Settings → Account → Delete account, or contact support@autoteleprompter.abprogroup.com. You may also lodge a complaint with your data protection authority (in Israel, the Privacy Protection Authority).
11. Security
Passwords are hashed by our auth provider. Local sensitive data is encrypted on Windows (DPAPI). Database access is restricted by row-level security; privileged operations run only server-side. Traffic uses TLS. No system is perfectly secure, but we take reasonable measures to protect your data.
12. Children
The App is not for children under 13. If you are 13 or older but under the age of digital consent in your country (for example, 16 in parts of the EU), you must have verifiable parental or guardian consent to create an account and for any processing based on consent. We do not knowingly collect data from children under 13, or from minors below the local consent age without such consent.
13. Website cookies
Our website https://autoteleprompter.abprogroup.com may use essential and analytics cookies. A cookie notice will be shown on the website where required.
14. Changes
We may update this policy; we will post the new “Last updated” date and, for material changes, notify you in-app or by email.
15. Contact
AB Group — support@autoteleprompter.abprogroup.com — Hagalil Street, Kiryat Bialik, Israel.