Privacy Policy
Last updated: August 7, 2026
1. Information We Collect
We collect several categories of information to provide and improve our services:
- Account Data: Name, email address, and authentication credentials.
- Content Data: Audio and video files you upload, and the resulting text transcripts.
- Usage Data: Information about how you interact with our platform (e.g., features used, time spent).
- Payment Data: Billing history and subscription status (processed securely by our payment provider).
- Device/Technical Data: IP address, browser type, operating system, and unique device identifiers.
2. How We Use Your Information
Under the General Data Protection Regulation (GDPR), we process your data based on the following legal grounds (Art. 6):
- Performance of a Contract: To provide transcription services, manage your account, and process payments.
- Legitimate Interests: To improve our platform, ensure security, and prevent fraud.
- Legal Obligation: To comply with applicable laws, regulations, and financial reporting requirements.
- Consent: When you have explicitly opted into specific features or communications.
3. Third-Party Sub-Processors
We share necessary data with trusted third parties to operate scribeme.ai. These sub-processors are carefully selected and bound by strict confidentiality and data protection agreements.
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Clerk | Authentication & Identity | Email, name, OAuth tokens | USA |
| Supabase | Database & Profile Storage | User profiles, transcription metadata | USA |
| Cloudflare R2 | Media File Storage | Audio/video uploads | Global |
| Polar | Subscription Billing | Payment details, billing history | USA |
| Google Gemini API | AI Transcription & Analysis | Audio content, transcript text | USA |
4. Data Retention Periods
We retain your data for different periods depending on your subscription plan:
| Plan | Media Files | Transcripts | Account Data |
|---|---|---|---|
| Free | 7 days | 7 days | Until deletion |
| Pro Ultra | 90 days | 90 days | Until deletion |
| Business Enterprise | 365 days | 365 days | Until deletion |
5. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights (Art. 15-22):
- Right of Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restriction: Request limited processing of your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Rights Regarding Automated Decision-Making: Not be subject to a decision based solely on automated processing.
- Right to Lodge a Complaint: File a complaint with your local supervisory authority.
6. Your Rights Under CCPA/CPRA
If you are a California resident, you have specific rights regarding your personal information:
- Right to Know: Request details about the personal information we collect and use.
- Right to Delete: Request deletion of personal information we have collected.
- Right to Opt-Out of Sale/Sharing: Opt out of the sale or sharing of personal information.
- Right to Non-Discrimination: Receive equal service and pricing regardless of exercising your rights.
We do not sell or share your personal information.
7. International Data Transfers
We process your data globally. Information may be transferred to, stored, and processed in the United States and the European Union via our sub-processors. We ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data during transfer.
8. AI & Machine Learning
We do NOT use your uploaded audio, video, or transcript content to train any AI or machine learning models. Your content is processed solely for the purpose of providing the transcription service.
9. Cookies & Tracking Technologies
We currently use essential cookies required for authentication and core platform functionality. We do not currently use third-party analytics or marketing cookies. If optional analytics are introduced in the future, they will only be enabled with your consent.
10. Children's Privacy
Our service is not directed at children under the age of 16. We do not knowingly collect personal information from individuals under 16 years of age. If we become aware that we have collected such data, we will take steps to delete it immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or through an in-app banner before the changes take effect.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:
Email: support@scribeme.ai