Legal

Privacy Policy

Last updated October 22, 2026

Draft. This policy is a working draft pending attorney review, and the subprocessor list will be confirmed before launch.

This policy explains what Scribberty collects, why, and the choices you have. The short version: we use your recordings only to transcribe them for you, we do not sell data, and we do not train AI on your content.

What we collect

  • Account data: your name, email address, password (stored only as a salted hash), workspace name and settings.
  • Your content: recordings you upload or email in, the transcripts produced from them, your edits, and any vocabulary lists.
  • Billing data: credit purchases and usage. Card details are handled by our payment processor; we never see or store full card numbers.
  • Usage and device data: IP address, browser type, sign-in times and actions in the app, kept for security and an audit log your workspace owner can see.

How we use it

  • To provide the Service: transcribe, store, display, share and export your content as you direct.
  • To send service email: sign-in links, password resets, finished-transcript notifications and low-balance alerts.
  • To keep the Service secure, prevent abuse and meet legal obligations.

We do not sell personal data, use your content to train machine learning models, or use it for advertising.

Subprocessors

We rely on a small number of providers, each bound to process data only on our instructions:

ProviderPurpose
CloudflareHosting, storage of recordings and transcripts, email routing
Speech recognition providerConverting audio to text
Language model providerCleanup, word alternatives, summaries and chapters
Payment processorCredit purchases
Email delivery providerTransactional email

Health information

Scribberty is not HIPAA compliant and does not sign Business Associate Agreements. Please do not upload protected health information. See our Terms of Service, section 3.

Retention

Audio is deleted after the retention period you set on each project (7 days, 30 days, a year, or until you delete it). Transcripts are kept until you delete them or close your account. Deleted data leaves our backups within 30 days. Account and billing records are kept as long as the law requires.

Security

Data is encrypted in transit (TLS) and at rest. Access is limited to your workspace's members and to share links you create. Staff do not access your content except to resolve a support request you open or where the law requires.

Your choices and rights

You can view, edit, export and delete your content at any time in the app, and close your account from Settings. Depending on where you live you may have rights to access, correct, delete or port your personal data, or to object to some processing. Email support@example.com and we will respond within 30 days.

Cookies

We use one essential cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

Changes

We will post updates here and, for material changes, notify you by email before they take effect.

Contact

Privacy questions: support@example.com.