Privacy Policy — Scribbes

1. Introduction

Welcome to Scribbes ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice-to-text conversion service and related features (collectively, the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy applies to all users of our Service, accessible through our website.

Data Controller: Scribbes is the data controller responsible for your personal information under applicable data protection laws.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

Create an Account: Email address for authentication purposes
Use the Service: Voice recordings, audio files, and any text or content you input
Contact Support: Name, email address, and any information you choose to provide in your communications
Subscribe to Paid Plans: Billing information (processed securely through our payment processor)

2.2 Information Collected Automatically

When you access our Service, we may automatically collect certain information, including:

Device Information: Device type, operating system, browser type and version
Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
Log Data: IP address, access times, referring URLs, and error logs
Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance user experience and analyze Service usage

2.3 Information We Do NOT Collect

We do not collect:

Passwords (we use passwordless authentication)
Precise geolocation data
Biometric identifiers
Social security numbers or government-issued identification numbers
Financial information (handled by third-party payment processors)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

Process voice recordings and convert them to text, summaries, and other outputs
Authenticate users and manage accounts
Provide, maintain, and improve the Service
Deliver requested features and functionality

3.2 Communication

Send transactional emails (login links, account notifications, service updates)
Respond to inquiries and provide customer support
Send important notices about changes to our policies or Service
With your consent, send promotional communications (you may opt out at any time)

3.3 Analytics and Improvement

Analyze usage patterns to improve Service performance and user experience
Conduct research and development for new features
Monitor and analyze trends, usage, and activities
Detect, prevent, and address technical issues and security threats

3.4 Legal and Compliance

Comply with legal obligations and regulatory requirements
Enforce our Terms of Service and other agreements
Protect our rights, privacy, safety, or property, and that of our users
Respond to legal requests from authorities

4. Voice Data Processing

4.1 Demo/Trial Usage (No Account)

When you use our demo or trial features without creating an account:

Voice recordings are processed temporarily for transcription purposes only
Audio files are automatically deleted after processing is complete
Generated text is not permanently stored and is deleted after your session ends
No personally identifiable information is linked to demo usage

4.2 Registered User Data

When you create an account and use the Service:

Voice recordings and generated content are stored securely in your account
You retain full ownership of all content you create
Data is stored only as long as necessary to provide the Service or as required by law
You may request deletion of your data at any time by contacting us

4.3 Third-Party Processing

We use trusted third-party services for:

Speech-to-Text: Voice transcription services (e.g., Deepgram)
AI Processing: Text generation and summarization (e.g., Groq, OpenAI)
Audio Generation: Text-to-speech conversion (e.g., ElevenLabs)

These providers process your data solely to deliver the Service and are contractually obligated to protect your information and use it only for specified purposes.

Machine Learning: We do not use your voice recordings or generated content to train general-purpose machine learning models.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We share data with third-party vendors who perform services on our behalf, including hosting, analytics, payment processing, and customer support. These providers are bound by confidentiality agreements and may only use your information to provide services to us.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal processes (subpoenas, court orders, warrants)
Governmental or regulatory requests
Protection of our legal rights or those of others
Investigation of fraud, security issues, or technical problems

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using SSL/TLS protocols
Encryption of sensitive data at rest
Regular security audits and vulnerability assessments
Access controls and authentication mechanisms
Secure data centers with physical and network security

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

Provide you with the Service
Comply with legal obligations
Resolve disputes and enforce our agreements
Maintain business records for legitimate purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy in a structured, commonly used format.

8.2 Correction

You may request correction of inaccurate or incomplete personal information.

8.3 Deletion

You may request deletion of your personal information, subject to certain legal exceptions.

8.4 Objection and Restriction

You may object to or request restriction of certain processing activities.

8.5 Withdraw Consent

Where we rely on your consent to process your information, you may withdraw that consent at any time.

8.6 Opt-Out of Marketing

You may opt out of receiving promotional communications by following the unsubscribe instructions in those messages or contacting us directly.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your session and keep you logged in
Remember your preferences and settings
Analyze how you use the Service
Improve Service performance and user experience

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

Update the "Last Updated" date at the top of this policy
Notify you via email or through a prominent notice on our Service
For material changes, provide advance notice and obtain consent where required by law

Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Support: [email protected]

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

15. Jurisdiction-Specific Rights

15.1 European Economic Area (EEA) and UK Users

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

15.2 California Residents

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

15.3 Other Jurisdictions

Users in other jurisdictions may have rights under applicable local laws. Please contact us to exercise your rights.