GDPR & CCPA DATA PROTECTION COMPLIANCE

Privacy Policy

Effective Date: July 17, 2026 · Version 2.4

1.Privacy Commitment & Overview

At ScribeStamp ("Company", "we", "us", or "our"), we are committed to respecting and protecting the privacy of our users. This Privacy Policy outlines our procedures regarding the collection, use, disclosure, and automated retention of personal data and audio media when you interact with our website (scribestamp.com) and speech transcription applications.

By using ScribeStamp, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

We collect only the essential categories of information required to deliver speech-to-text inference and microsecond timestamping services:

  • Account Identification: Email address, optional display name, hashed passwords, and OAuth credentials.
  • Uploaded Media Files: Audio/video files uploaded for transcription (MP3, WAV, M4A, AAC, MP4).
  • Generated Outputs: Word-level timestamps, line timings, SRT files, and YouTube chapters.
  • Technical Telemetry: IP address, user agent, session tokens, and credit usage logs.

3. Zero Model Training Guarantee

Strict AI Confidentiality Pledge

We NEVER sell, rent, license, or publish your uploaded audio files or transcripts. We do NOT use your private audio content or transcription outputs to train public AI models, large language models (LLMs), or proprietary neural weights. Your media is processed exclusively for your requested transcription job.

4.Automated Data Retention & Storage Purge Schedule

To prevent unauthorized access and minimize our data retention footprint, ScribeStamp automatically executes strict data purging:

  • Guest Pre-Auth Uploads: Raw audio files uploaded by unauthenticated visitors are permanently deleted from R2 storage after 1 hour if not claimed.
  • Free Plan User Transcripts: All audio media and transcript records belonging to free plan users are permanently deleted after 7 days.
  • Paid Plan Transcripts: Retained securely in encrypted object buckets until deleted manually by the user or upon account termination.

5.Security Architecture & Encryption

We implement industry-standard administrative, technical, and physical security measures to safeguard your personal data:

  • In-Transit Encryption: 256-Bit HTTP Strict Transport Security (HSTS) SSL protocol across all subdomains.
  • At-Rest Encryption: AES-256 encrypted Cloudflare R2 storage buckets and D1 relational databases.
  • Authentication Security: HMAC-SHA256 WebCrypto password hashing with random salt generation.

6. Third-Party Sub-Processors

We partner with trusted sub-processors who adhere to strict data security standards:

Cloudflare Workers & AIEdge computing, R2 storage, D1 database, and ScribeStamp neural model inference.
Resend Inc.Transactional email notifications and support desk inquiry routing.

7.Your GDPR & CCPA Privacy Rights

Depending on your location, you possess rights regarding your personal data:

  • Right to Access & Export: Download your transcripts in SRT, VTT, TXT, or JSON format at any time.
  • Right to Erasure: Request immediate deletion of your account and all associated media history.
  • Right to Opt-Out: We do not sell personal information, rendering opt-out options automatically fulfilled.

8.Cookies & Tracking Policies

ScribeStamp uses only essential, functional session cookies (`scribestamp_session`, `scribestamp_site_access`) required for user authentication and site access. We do NOT use third-party tracking pixels or behavioral advertising cookies.

9. Contact Support Desk

For privacy requests, data access inquiries, or account deletion assistance, please reach out via our Contact Support Desk.