Privacy Policy

• Account info: email, name, persona selection, and marketing consent state.
• Content: audio uploads, transcripts, YouTube URLs you submit, AI-generated summaries, and any notes you attach to a session.
• Usage: which features you use, login times, and aggregate counts (for example, minutes transcribed per month) so we can enforce plan limits and improve the product.
• Payments: processed by Stripe. We store a customer ID and the last four digits of your card; the full card number never touches our servers.
• Consent records: when you send a recording-consent notice through ActaScribe, we keep a timestamped record so you can prove notice was given.

• Operate the service — transcription, structuring, retrieval, and delivery of your content back to you.
• Send transactional emails (trial reminders, billing receipts, password resets).
• Process payments and manage subscriptions through Stripe.
• Comply with legal obligations (subpoenas, tax records, audit trails).

We share data only with the subprocessors listed below, each engaged under a data processing agreement and limited to the purpose described:

Regardless of where you live, you can:

• Access the personal data we hold about you.
• Correct any inaccuracies in your account.
• Delete your account and all associated data from the in-app settings page or by emailing info@actascribe.ai.
• Export your transcripts, summaries, and corpora at any time.
• Opt out of marketing email with one click; transactional email cannot be opted out of while you have an active account.

By default, audio files are purged within 7 days of successful transcription unless you explicitly mark a session to keep its audio. Transcripts, summaries, and TalkBase corpora are retained for as long as your account is active. Pro, Team, and Founding plans can configure custom retention windows per workspace. When you delete your account, all data is queued for permanent deletion within 30 days; encrypted backups roll off within 90 days.

The application surfaces (/app and /m) use first-party authentication cookies only — required for sign-in. The marketing site uses PostHog in cookieless mode for aggregate analytics. We do not run third-party ad-tech, pixels, or cross-site trackers.

ActaScribe is hosted in US-east regions. If you access the service from outside the United States — including the EU, UK, Switzerland, or other jurisdictions — your data crosses borders to the US. We rely on Standard Contractual Clauses (SCCs) with our subprocessors to safeguard those transfers.

ActaScribe is not intended for users under 13. We do not knowingly collect data from children. If you believe a minor has created an account, email privacy@actascribe.ai and we will delete the account.

We will email all active account holders at least 30 days before any material change to this policy takes effect. Non-material changes (typo fixes, clarifying language) may be made without notice; the “Last updated” date at the top of the page always reflects the most recent revision.

Privacy questions: privacy@actascribe.ai
Vulnerability disclosures: security@actascribe.ai