--- title: "DictationDesk privacy policy (DPDP Act 2023)" canonical: https://dictationdesk.com/privacy last_modified: 2026-11-04 publisher: Surge Software Solutions Private Limited --- # DictationDesk privacy policy (DPDP Act 2023) > How Surge Software Solutions Pvt Ltd handles personal data in DictationDesk: what we collect, where it is processed, our providers and your rights. Last updated 4 November 2026 ยท Surge Software Solutions Private Limited ## 1. Who we are Surge Software Solutions Private Limited ("Surge", "we"), Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066, India, is the data fiduciary (data controller) for DictationDesk at dictationdesk.com. Questions: corp@surgesoftware.co.in. ## 2. What we collect Account details: your name, email address and, if you sign in with Google, your profile picture. Google sign-in shares only your name, email and profile picture with us. What you put into DictationDesk: dictated audio (processed in memory and never stored), the text it becomes if you turn on Cloud history, your dictionary and snippets, and the results DictationDesk makes from them. Payments: if you add a prepaid balance, Razorpay processes the payment. We receive a payment reference and status, not your full card or bank details. Technical data: IP address, browser, pages used, errors and timestamps, kept in server logs to run, secure and debug the service. Enquiries: what you send through the site assistant or by email. ## 3. How DictationDesk handles your audio and text No screenshots, ever. The Windows app only reads the name of the focused app to choose formatting. Audio is processed in memory and never stored, on our servers or on your PC. Text is not stored on our servers unless you turn on Cloud history. Local history (last 500) can be turned off. Offline only mode keeps everything on your PC using whisper.cpp. ## 4. How we use it To provide DictationDesk, including its AI features; to sign you in, secure your account and prevent abuse; to send service emails such as password-reset links, alerts and receipts; to charge usage from your prepaid balance; to answer your questions; and to fix problems and improve the product. We do not sell personal data, we do not show ads, and we do not share your data with advertisers. We do not use your content to train AI models for anyone else. ## 5. Where your data is processed Our servers: DictationDesk's application and database run on Surge's own servers in Bengaluru, India. Network: traffic to this website passes through Cloudflare's global network, which may handle it outside India. AI: cloud speech-to-text and AI clean-up run on Surge's own servers in Bengaluru. If they are down, a fallback provider is used, which may be outside India (Anthropic for AI clean-up). Indian-language speech, when switched on, is processed by Sarvam AI in India. Email: service emails are sent through Resend, outside India. When data leaves India, it goes only to the service providers listed in this policy, for the purposes listed here. ## 6. Service providers Cloudflare: network and security for this website. Resend: service email. Razorpay: payments for prepaid credit. Google: sign-in, if you choose to sign in with Google. Anthropic: fallback for AI clean-up, only when our own servers are down. Sarvam AI (India): Indian-language speech, when it is switched on. Each provider receives only what it needs for its task, under its own terms and privacy policy. ## 7. Data we process for our customers When a business uses DictationDesk with data about your team members and anyone whose names or details you dictate, that business decides why and how the data is used, and we process it on its behalf. Requests about that data should go to the business first; we will help it respond. ## 8. Cookies DictationDesk uses cookies to keep you signed in and secure your session. We do not use advertising or cross-site tracking cookies. ## 9. How long we keep data We keep your account and content while your account is open. When you delete content or close your account, we delete it from our live systems, except where the law requires us to keep records (for example payment records) or where we need it to resolve a dispute. ## 10. Your rights (India's DPDP Act 2023) Under the Digital Personal Data Protection Act, 2023, you can: ask what personal data we hold about you and how we use it; ask us to correct, complete or update it; ask us to erase it, and withdraw consent you gave; nominate another person to exercise these rights for you; and raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied. Email corp@surgesoftware.co.in from the address on your account. Most rights can also be used from your account settings. Grievance officer: Venu Gopal Reddy Muvva, Director, Surge Software Solutions Pvt Ltd, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066, India. Email corp@surgesoftware.co.in, phone +91 91600 57000. ## 11. Children DictationDesk is for adults and businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data. ## 12. Security We use encryption in transit, access controls and separate data per account. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires. ## 13. Changes and contact If we change this policy, we will update the date on this page and, for important changes, tell account holders by email. Contact: Surge Software Solutions Private Limited, Sy No. 13/1, #155, Shop No. 2, 1st Floor, 4th Main, BEML Layout, Thubrahalli, Bengaluru, Karnataka 560066, India. corp@surgesoftware.co.in, +91 91600 57000. See also our terms of use (https://dictationdesk.com/terms).